Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
File:                     cTo2dI_ipynplVRz-lxAACOqIH0.mft (raw, json)
Hash identifier:          UX18y88zUwwECHzmWE0l6uAEklZYB3wACnf352eY0qk=
Subject key identifier:   67:1E:61:3A:B7:D7:DC:C6:8C:AA:47:5C:E5:FC:16:57:AD:42:9E:63
Authority key identifier: 71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
Certificate issuer:       /CN=A91812BE/serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
Manifest number:          2A
Signing time:             Thu 11 Jun 2026 11:06:12 +0000
Manifest this update:     Thu 11 Jun 2026 11:06:12 +0000
Manifest next update:     Thu 18 Jun 2026 11:06:12 +0000
Files and hashes:         1: cTo2dI_ipynplVRz-lxAACOqIH0.crl (hash: BbgABwDhH1DXiPvSE8/mMeboOMdd/SQb6RnkmauEhsw=)
                          2: EFED2132264C11F1BA49400EA1833773.roa (hash: IHm6ka0JJFCAmNqKc7swMLutMt30cesKv/ExBV+fuNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
                          rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91812BE, serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
        Validity
            Not Before: Jun 11 11:06:12 2026 GMT
            Not After : Jun 18 11:06:12 2026 GMT
        Subject: CN=6a2a96a4-db3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:19:8f:02:35:ee:2a:03:1f:7d:df:a8:03:
                    8c:bd:06:e9:82:87:82:10:f3:27:ad:67:a8:8a:9f:
                    f6:2c:a0:3b:66:73:90:d5:50:98:93:85:df:3d:df:
                    ea:a3:35:d9:ae:d0:99:02:38:36:a8:d3:ca:cc:e3:
                    6c:38:95:ce:a6:a1:a8:01:92:fa:06:63:66:ef:39:
                    7c:6d:e5:e6:73:c8:b8:0a:f0:62:53:9c:db:f7:d1:
                    25:6e:c5:fc:75:d5:43:9f:7a:d4:4a:2f:61:1a:91:
                    24:08:24:c1:0e:d3:5d:a7:e5:41:e4:6e:bc:8b:d8:
                    91:9c:18:a1:9e:f7:6c:ee:7b:76:11:d7:c1:f6:4a:
                    e9:1e:e4:ef:f8:e4:04:ec:23:c8:ba:2e:b0:c9:6b:
                    7b:72:4c:82:bb:19:7c:86:95:4a:ac:3b:12:a1:26:
                    3f:07:55:a8:34:b3:0b:55:cb:76:3a:26:ef:ee:2b:
                    ac:20:2a:3b:fc:02:dc:14:d3:55:09:eb:ce:23:ec:
                    e8:b9:f8:71:84:ee:5f:71:96:8b:91:b3:43:56:65:
                    85:d4:a0:c9:96:78:7f:69:9c:63:83:f4:40:7b:ac:
                    00:13:fa:3a:9b:ca:e5:93:0f:59:39:ff:11:21:f8:
                    db:68:b2:2b:1e:5b:aa:b3:eb:f8:09:7c:05:90:04:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1E:61:3A:B7:D7:DC:C6:8C:AA:47:5C:E5:FC:16:57:AD:42:9E:63
            X509v3 Authority Key Identifier:
                keyid:71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:75:06:6a:68:66:57:21:d9:83:80:9b:6b:3a:5d:59:6e:0c:
         7d:0c:6a:11:3d:64:cd:bc:b8:0a:08:6a:0f:a9:5d:ba:8a:b8:
         39:60:37:eb:9c:2f:f8:d9:d8:30:13:79:78:71:27:fb:a1:9a:
         6b:dc:df:07:25:ec:98:a3:63:fe:b1:84:c4:4e:b2:70:83:94:
         d2:9b:34:62:11:f7:9a:f1:ba:08:db:8d:1a:c4:0a:49:e5:d6:
         d9:08:54:1b:a6:9e:50:e2:9d:3d:a4:0d:38:17:9b:d4:83:75:
         be:3d:02:83:68:16:d9:20:89:68:71:ca:dd:a5:76:64:1e:8c:
         06:32:b2:91:64:71:3d:7c:48:56:a3:24:00:26:a5:93:93:c2:
         9a:95:97:7a:e5:e4:10:eb:15:a0:93:aa:e6:e1:d9:68:68:67:
         98:0d:cf:8f:a0:74:9b:ac:7d:ae:d7:fa:41:a2:eb:fd:c0:61:
         e4:01:f4:44:39:8a:9a:24:37:51:13:df:f9:f8:09:a6:2b:ad:
         d5:04:fe:f3:bc:53:22:f9:cd:41:1c:08:67:6e:19:97:9e:e0:
         db:f5:1d:27:9a:c0:09:f0:c0:84:8c:ee:16:80:2b:fb:a9:61:
         42:0b:23:c8:9f:99:cb:ae:a2:c4:2f:c9:bc:61:38:44:95:e7:
         18:77:af:a1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTJCRTExMC8GA1UEBRMoNzEzQTM2NzQ4RkUyQTcyOUU5OTU1NDczRkE1QzQwMDAy
M0FBMjA3RDAeFw0yNjA2MTExMTA2MTJaFw0yNjA2MTgxMTA2MTJaMBgxFjAUBgNV
BAMTDTZhMmE5NmE0LWRiM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaYBmPAjXuKgMffd+oA4y9BumCh4IQ8yetZ6iKn/YsoDtmc5DVUJiThd893+qj
Ndmu0JkCODao08rM42w4lc6moagBkvoGY2bvOXxt5eZzyLgK8GJTnNv30SVuxfx1
1UOfetRKL2EakSQIJMEO012n5UHkbryL2JGcGKGe92zue3YR18H2Suke5O/45ATs
I8i6LrDJa3tyTIK7GXyGlUqsOxKhJj8HVag0swtVy3Y6Ju/uK6wgKjv8AtwU01UJ
684j7Oi5+HGE7l9xlouRs0NWZYXUoMmWeH9pnGOD9EB7rAAT+jqbyuWTD1k5/xEh
+NtosiseW6qz6/gJfAWQBB8tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZx5hOrfX
3MaMqkdc5fwWV61CnmMwHwYDVR0jBBgwFoAUcTo2dI/ipynplVRz+lxAACOqIH0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMkJFLzk3QUREQzBDMjY0
QTExRjE4NjcxMERDNjlGODMzNzczL2NUbzJkSV9pcHlucGxWUnotbHhBQUNPcUlI
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY1RvMmRJX2lweW5wbFZSei1seEFBQ09xSUgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx
MkJFLzk3QUREQzBDMjY0QTExRjE4NjcxMERDNjlGODMzNzczL2NUbzJkSV9pcHlu
cGxWUnotbHhBQUNPcUlIMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAfdQZqaGZXIdmDgJtrOl1Zbgx9DGoRPWTNvLgKCGoPqV26irg5YDfrnC/42dgw
E3l4cSf7oZpr3N8HJeyYo2P+sYTETrJwg5TSmzRiEfea8boI240axApJ5dbZCFQb
pp5Q4p09pA04F5vUg3W+PQKDaBbZIIloccrdpXZkHowGMrKRZHE9fEhWoyQAJqWT
k8KalZd65eQQ6xWgk6rm4dloaGeYDc+PoHSbrH2u1/pBouv9wGHkAfREOYqaJDdR
E9/5+AmmK63VBP7zvFMi+c1BHAhnbhmXnuDb9R0nmsAJ8MCEjO4WgCv7qWFCCyPI
n5nLrqLEL8m8YThElecYd6+h
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:54 2026 by rpki-client