Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
File:                     DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json)
Hash identifier:          Dmk7GQozrr/wlNEWZo2euAg5CkQkalCL3FuXLlLCb0s=
Subject key identifier:   6E:B2:08:A4:85:49:3F:2B:2F:1F:B2:1A:32:CE:D4:20:DC:84:DA:00
Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
Certificate issuer:       /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
Manifest number:          F0
Signing time:             Sat 13 Jun 2026 06:29:18 +0000
Manifest this update:     Sat 13 Jun 2026 06:29:18 +0000
Manifest next update:     Sat 20 Jun 2026 06:29:18 +0000
Files and hashes:         1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: y9kUJf19DUn+xl1iaxLqYtdMjINTKdSwbPK/hbbccAA=)
                          2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: R8smImtHPkQX7G+nBf5PC7cAGT+ubkBObp2FM3F8pkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
                          rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
        Validity
            Not Before: Jun 13 06:29:18 2026 GMT
            Not After : Jun 20 06:29:18 2026 GMT
        Subject: CN=6a2cf8be-0b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:9f:69:4b:c6:39:3c:69:42:24:40:35:bf:
                    3f:56:15:28:fa:d4:b2:bd:8f:f4:a8:7d:1f:f7:6f:
                    de:74:90:40:cb:56:66:22:ee:e0:ac:db:bb:5a:68:
                    eb:c5:08:42:ce:ea:d4:79:c1:ff:c8:3c:54:0d:2c:
                    98:f7:3f:7d:50:fc:ac:16:4c:3c:69:a6:c5:10:e5:
                    68:66:5e:6b:81:2d:bf:b1:85:58:76:27:2d:15:9d:
                    5d:3b:f4:94:84:fe:39:3d:54:a9:e0:47:b8:df:f0:
                    29:d5:d7:59:bf:22:34:fb:8b:44:1a:4f:91:79:12:
                    3f:5e:b8:1e:40:9c:5a:3e:64:78:f7:29:c2:f1:60:
                    45:b1:55:79:2b:28:39:f7:83:da:1d:d6:c1:c5:02:
                    ef:16:a9:d2:73:5d:a4:df:af:a8:3d:ac:dd:8e:d2:
                    cb:90:01:c6:fa:2b:43:a3:4e:63:25:58:85:61:63:
                    aa:1f:33:72:ca:48:d9:56:3f:1e:a7:8f:dc:f0:a6:
                    97:bb:72:5c:87:3e:76:c7:7b:cb:1a:73:c3:98:2c:
                    d9:78:b0:f6:c0:c7:95:ea:83:dc:af:be:58:68:3f:
                    2a:c3:1c:97:7e:80:d7:47:76:5b:ae:40:d4:2f:f3:
                    7c:af:4e:fa:16:0b:5d:8b:e8:aa:1c:ed:77:1b:45:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B2:08:A4:85:49:3F:2B:2F:1F:B2:1A:32:CE:D4:20:DC:84:DA:00
            X509v3 Authority Key Identifier:
                keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:0a:6b:c9:97:b6:09:c3:e1:73:82:00:af:2a:f3:43:2a:8e:
         15:c5:8c:bd:b3:cd:51:5b:79:07:00:2b:eb:76:f8:6a:42:05:
         13:6f:25:29:01:b4:1d:2a:3c:2e:00:90:ce:d6:6a:5e:7f:ea:
         00:f6:a4:91:66:15:ac:0e:d1:0b:96:f4:d7:70:35:c6:68:89:
         ee:1e:0b:b2:b1:56:84:cd:8c:81:0b:59:89:df:cc:d9:1f:49:
         c3:39:a7:8d:ca:09:65:0e:96:8c:5c:1d:37:4d:6c:bd:c9:4b:
         fb:0a:a6:d9:94:c0:7f:37:a7:32:10:c0:b5:57:cf:4b:3a:3a:
         64:f6:73:30:1f:a6:6c:61:02:17:bb:60:bd:aa:e0:0d:bc:f5:
         e4:42:5a:c5:17:e7:c7:d3:86:79:77:bf:e3:50:44:50:13:95:
         3b:67:9b:49:ff:a8:83:b4:62:82:24:f1:6a:d7:81:1c:df:b7:
         73:23:b4:4d:0b:20:88:f2:08:f2:54:22:45:b1:f7:6c:b8:7b:
         c9:df:65:12:65:ed:8a:98:61:91:c3:3b:37:af:fd:ab:fc:d4:
         e9:18:44:4f:9f:aa:2c:98:cf:3c:9c:dd:7e:17:70:7a:1e:76:
         c6:a3:fc:e8:31:68:60:4e:f2:a0:b6:d5:72:22:a4:cb:b7:77:
         82:8d:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:58:50 2026 by rpki-client