Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
File:                     28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json)
Hash identifier:          gq89r8OPGDZUKh2Th8jt5TA0aL8wH0i6p5p1C7GoBTU=
Subject key identifier:   E5:75:42:2F:E5:8E:BB:23:66:E4:7F:C5:0E:C2:FD:E1:DD:E4:25:77
Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
Certificate issuer:       /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Certificate serial:       0342
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
Manifest number:          033D
Signing time:             Sat 13 Jun 2026 01:02:06 +0000
Manifest this update:     Sat 13 Jun 2026 01:02:06 +0000
Manifest next update:     Sat 20 Jun 2026 01:02:06 +0000
Files and hashes:         1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: WTF2GgYGvGo4d6BmjPLWk3Ncdj9ou8WJBIOcM+TrGrQ=)
                          2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: pwiKgtogbJLJ/RbRQdDDfmFN4XuwAJG68m5hiv5+D3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
                          rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
        Validity
            Not Before: Jun 13 01:02:06 2026 GMT
            Not After : Jun 20 01:02:06 2026 GMT
        Subject: CN=6a2cac0e-c9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:fb:2e:e5:64:3f:6d:a2:a5:5d:c5:be:45:
                    9c:de:42:86:e7:03:68:2e:c3:d8:82:df:9d:5a:22:
                    b5:9e:90:1e:f1:14:59:c2:7e:54:98:57:9c:d7:c0:
                    c9:ed:13:97:65:01:cb:d4:ec:f5:b2:e7:b5:51:6f:
                    26:fc:82:ca:49:53:65:c9:35:1e:86:f0:2a:96:ff:
                    2b:13:6d:fe:11:89:4e:c9:13:4a:5c:58:4f:e9:ec:
                    c6:18:ac:bf:c2:52:dc:e2:bb:70:ed:89:0e:35:a3:
                    df:fb:41:cb:63:63:d6:5c:70:b9:27:92:a7:81:6a:
                    0b:62:f1:75:9b:a7:81:6b:03:a3:a1:60:5d:58:95:
                    fd:69:7d:30:19:5d:96:5f:9b:5b:7d:15:a0:29:e1:
                    c2:b5:1a:d9:a6:2c:a3:50:31:c6:1e:b8:61:71:c1:
                    dc:50:31:27:a7:82:28:df:db:64:5a:d3:a6:6a:aa:
                    55:54:56:b5:8b:c0:44:35:d7:95:04:a8:3b:16:6a:
                    f5:d9:35:9e:4b:6b:4f:c0:c4:50:75:87:cb:c7:05:
                    7c:58:2c:34:6a:1d:4f:15:29:f5:f9:74:be:fc:b8:
                    05:da:54:ba:7b:fd:84:19:a8:bb:41:da:b8:5a:03:
                    52:d1:16:fb:a3:bd:38:a1:c1:4a:12:be:66:c7:5c:
                    f2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:75:42:2F:E5:8E:BB:23:66:E4:7F:C5:0E:C2:FD:E1:DD:E4:25:77
            X509v3 Authority Key Identifier:
                keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b1:e1:dc:c9:ed:52:4d:c3:f2:42:0c:d8:0d:11:57:28:7d:
         7e:25:3a:85:19:de:3c:d6:da:2a:04:b9:06:0a:bd:8f:f1:dd:
         ed:59:f2:30:1e:63:48:95:93:aa:9a:d0:3b:d5:c3:46:53:6f:
         d6:b0:4b:67:59:63:90:40:97:3c:b5:68:d1:80:14:a0:9b:bc:
         7f:ba:c3:ca:ad:45:18:95:93:33:97:41:b4:c7:8b:78:7a:e4:
         04:d0:61:a1:66:7c:97:e3:13:b6:cd:f1:57:d7:d8:42:89:08:
         c8:22:0f:a9:dc:ac:d5:b3:64:50:e4:4c:58:af:d4:c2:8b:f8:
         c7:0b:9c:94:83:a8:7e:06:09:21:55:ca:37:f8:33:eb:39:fd:
         69:70:8b:21:c8:bb:65:bb:4f:4a:f2:a8:18:96:ae:cd:5f:59:
         1e:ae:68:4d:5a:a7:e3:b8:5d:3c:ad:6e:ca:14:85:5a:a6:64:
         e3:ea:5b:73:ed:bb:a1:0d:6a:00:aa:91:fb:05:04:48:bc:90:
         cf:89:87:f8:8e:af:bf:92:0e:18:7a:e3:d3:6e:19:5a:e7:d1:
         58:d8:bb:d9:f4:47:00:93:df:32:e6:c0:e2:17:d3:90:11:d9:
         1a:3c:21:a1:d6:4d:e6:a9:c7:e7:d9:74:ff:da:c6:ab:bf:5c:
         4a:72:58:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:45 2026 by rpki-client