Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File:                     4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier:          UecrtMYDePhOBVCFYtwkOdJOcIIP9xfJwDkGcI37hgs=
Subject key identifier:   22:4C:A8:BC:27:BC:AC:91:FC:69:47:BE:55:0E:0A:9B:16:BA:6D:1D
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer:       /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number:          0150
Signing time:             Sat 13 Jun 2026 05:17:12 +0000
Manifest this update:     Sat 13 Jun 2026 05:17:12 +0000
Manifest next update:     Sat 20 Jun 2026 05:17:12 +0000
Files and hashes:         1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: wHJROySzwMuL/biU8U3Kx2Pt8QGPdrtN1JDqfloBCqo=)
                          2: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: qYPMtqaT2dl4M1S1nYlOq36a/DlHhwOSpr/FUWfOeEE=)
                          3: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: 1lIzFQEALQy8v+QadRa7FoXrMcnKcVBzKsOnfc22ih8=)
                          4: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: zR70IjBkFq8imIW3hGFMMhMRDbM40qlqunUzoF9Z2S8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
                          rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
        Validity
            Not Before: Jun 13 05:17:12 2026 GMT
            Not After : Jun 20 05:17:12 2026 GMT
        Subject: CN=6a2ce7d8-0a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:e3:81:e7:1c:70:ca:cd:7a:6d:28:37:a0:
                    65:f5:0c:9e:d1:d4:08:b3:59:70:a9:05:c4:71:37:
                    ad:cf:50:58:51:db:5b:cc:29:fa:aa:0b:fb:13:97:
                    d1:c2:5c:00:2a:30:03:46:97:65:6b:5a:44:c6:9d:
                    2d:b9:ea:9b:3f:67:88:21:ca:b1:6d:8f:d5:26:53:
                    a5:af:58:d8:15:2a:93:c8:bb:6c:ac:7d:0d:c2:8f:
                    0a:73:4a:dd:d6:2d:bd:87:7a:6b:5a:38:24:b0:51:
                    18:f1:8f:b1:6f:9e:24:fc:b3:4f:76:49:dc:2c:a1:
                    d1:ea:43:3c:aa:d5:e9:d4:41:15:f6:6e:01:73:cf:
                    16:75:b6:08:1b:d1:b3:72:80:e4:06:b5:6b:5f:68:
                    2e:e3:ed:1e:75:e5:bc:e2:9a:7e:13:a8:d9:cc:ce:
                    f7:1c:76:b7:90:b2:de:6d:47:04:85:98:2f:a6:99:
                    b3:9a:a6:64:ba:9d:99:e6:cb:b5:65:67:e3:59:4f:
                    84:22:8a:0a:7f:34:05:e8:b7:4d:68:55:14:5b:34:
                    b7:ce:2b:64:7c:0e:f6:05:3f:c6:27:ef:f6:f0:e7:
                    1c:81:47:84:fa:60:bf:1d:05:00:68:6f:6c:2b:b0:
                    b8:e7:10:99:3f:92:54:6b:66:ab:b8:f1:11:21:93:
                    4d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4C:A8:BC:27:BC:AC:91:FC:69:47:BE:55:0E:0A:9B:16:BA:6D:1D
            X509v3 Authority Key Identifier:
                keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d0:75:59:32:63:32:b1:73:a4:2a:e8:19:b2:89:48:17:c4:
         ce:d2:04:58:91:76:90:d6:85:1b:3e:fd:b0:a3:42:bc:16:cb:
         78:be:e2:65:21:a7:3b:7c:96:0e:52:06:f9:a9:85:93:1b:68:
         ad:57:86:2c:56:39:5b:79:10:b6:56:1e:39:c6:42:0b:e9:9b:
         26:c9:6f:3c:55:3f:9d:87:7d:e2:28:a4:32:fc:a6:1c:47:10:
         bf:85:e0:8a:ce:cb:26:c7:21:36:bc:81:95:0c:f4:73:e2:92:
         9f:e3:f3:90:8e:30:01:31:d6:b4:af:99:50:a6:4a:7b:44:f8:
         eb:c7:7f:2c:10:8b:dc:f7:c4:c8:48:c5:20:91:c4:af:8a:1f:
         f9:69:df:70:aa:e9:9a:85:6b:bb:15:5b:e4:b4:34:c3:c0:2c:
         f6:a7:0e:3b:50:52:2f:a1:5d:00:c4:01:5c:41:f2:19:04:03:
         da:54:94:c1:f7:1e:d4:73:6d:3b:31:2e:3c:c7:98:8b:87:eb:
         b0:1e:46:5b:48:55:23:c7:72:52:56:2a:3b:a4:34:9f:d9:47:
         ec:ce:db:a7:67:c9:58:05:bb:01:0f:15:10:30:1e:4a:87:1f:
         5e:cd:c6:72:29:65:ea:1e:51:5a:17:a9:9f:a1:94:cd:a8:b4:
         e5:7f:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:38:57 2026 by rpki-client