Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
File:                     9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json)
Hash identifier:          X/NtHVM8Sk3XlMPyTrMsgI7ZWNbGEO90MH1wHkBYtl4=
Subject key identifier:   30:D8:83:EA:6E:13:96:45:97:E1:A0:69:0D:05:91:E8:6C:C1:E5:03
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Certificate issuer:       /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial:       0F86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
Manifest number:          0F72
Signing time:             Fri 12 Jun 2026 17:29:43 +0000
Manifest this update:     Fri 12 Jun 2026 17:29:43 +0000
Manifest next update:     Fri 19 Jun 2026 17:29:43 +0000
Files and hashes:         1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: qsbtPn3KkkmXWoJ+N8A/KyCAwfwPtAB5HduiZy7fZuw=)
                          2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: xeSp+ee2o5QPG9Bonf7PC8aiLXnBIzPrcdEWH1qZB/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
                          rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3974 (0xf86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
        Validity
            Not Before: Jun 12 17:29:43 2026 GMT
            Not After : Jun 19 17:29:43 2026 GMT
        Subject: CN=6a2c4207-3ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:36:a5:97:99:d5:65:6f:42:49:c9:b8:2b:
                    d3:66:b0:a0:5a:72:10:f1:52:e2:c1:ca:fe:57:15:
                    f9:f4:c7:b2:a6:e2:1b:da:2b:3d:0d:25:4a:9a:a2:
                    5c:74:95:d4:06:97:90:45:41:85:13:81:bf:16:f4:
                    e8:9c:fe:2a:0c:00:b1:f3:d8:0b:d3:df:6b:a2:b7:
                    50:24:a9:8e:4b:53:5e:c7:3f:73:15:9d:16:8b:fe:
                    c0:2f:2f:a2:7d:3c:c9:62:79:75:97:be:46:27:c4:
                    48:eb:91:a2:22:78:09:6c:80:b8:50:45:e3:d0:8c:
                    1e:04:76:55:ec:b7:57:81:83:7e:39:05:7e:33:6e:
                    17:3f:60:3c:36:22:7f:99:5c:2f:07:fe:93:64:cc:
                    f2:02:92:e8:5f:a4:8a:2b:d1:45:e7:61:62:4b:61:
                    c1:3f:ba:bb:92:3c:dd:52:55:9d:03:6a:31:85:54:
                    99:a8:b3:19:38:04:fc:2f:64:26:03:9f:ce:be:73:
                    20:d4:0e:9d:68:33:58:2a:38:52:03:44:e9:a5:f5:
                    62:f5:bb:fb:ad:51:16:dd:be:ee:38:a8:4c:f9:b4:
                    1a:9f:ca:45:0c:a1:78:20:e7:37:b8:c2:be:51:8e:
                    09:8f:80:d2:3a:41:46:e0:63:45:68:31:f0:09:f6:
                    42:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D8:83:EA:6E:13:96:45:97:E1:A0:69:0D:05:91:E8:6C:C1:E5:03
            X509v3 Authority Key Identifier:
                keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:77:3e:ea:14:41:01:26:68:0d:c3:e4:b7:46:2b:62:62:0d:
         60:56:12:c6:82:14:b8:9c:4a:4f:dc:fe:12:f2:c9:a5:29:97:
         16:f7:a2:9c:48:91:37:ee:3a:7d:f9:bd:1c:2e:dc:97:43:b1:
         d1:dd:9a:f0:23:dc:3b:05:1a:24:4e:77:08:16:ed:a9:2c:91:
         0a:bf:73:a7:48:4d:21:4f:2b:e9:89:2f:4d:66:4f:80:95:e8:
         bc:b3:ca:51:b8:18:4b:ea:1a:d5:fa:43:3c:48:44:5a:c7:52:
         a3:a5:d9:46:14:c4:64:ca:d8:46:7f:07:06:69:2e:92:85:62:
         c0:95:43:af:e8:ce:1b:9f:ba:d6:e7:d7:26:b3:51:f4:4f:7d:
         0c:15:00:ad:8a:bc:6a:23:9b:8f:16:42:a4:a6:c9:8e:3d:01:
         75:dd:24:5f:0f:f4:a7:63:ee:2f:44:c6:3d:9f:08:1e:45:ee:
         d5:d8:11:ee:60:94:c0:a0:95:17:d0:fb:95:12:2c:11:a4:60:
         dd:66:d3:d3:47:24:1d:f7:02:0a:b7:14:b9:b0:f6:63:8e:c9:
         1a:52:93:d5:23:76:fa:13:44:4a:43:3e:d5:5f:78:76:32:18:
         61:34:7b:12:9c:71:9b:7c:79:7d:ab:99:23:5f:c0:5d:21:26:
         b0:41:c6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:24:52 2026 by rpki-client