Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
File:                     dDFnWL6MokPEalI5oF7P8EkIOTc.mft (raw, json)
Hash identifier:          i3s3FCw6gbGsyrxGnU4nxB37W+jALdSdmubkWaKrJJo=
Subject key identifier:   70:32:B7:A9:32:81:0D:7E:5E:C5:94:3C:4A:C2:DA:EA:A1:A8:2F:28
Authority key identifier: 74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37
Certificate issuer:       /CN=A91968B6/serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
Manifest number:          4C
Signing time:             Sat 13 Jun 2026 08:25:55 +0000
Manifest this update:     Sat 13 Jun 2026 08:25:55 +0000
Manifest next update:     Sat 20 Jun 2026 08:25:55 +0000
Files and hashes:         1: dDFnWL6MokPEalI5oF7P8EkIOTc.crl (hash: xVPRoYsl7UESvWcVH4zXsGgJB/f9D8GL3JToJPj0uwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl
                          rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91968B6, serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
        Validity
            Not Before: Jun 13 08:25:55 2026 GMT
            Not After : Jun 20 08:25:55 2026 GMT
        Subject: CN=6a2d1413-8385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:e2:7f:b2:39:c5:b8:a4:83:fe:1f:57:14:
                    e3:3e:08:52:f1:82:7f:6e:fa:4e:46:b8:68:2f:c1:
                    06:ca:d9:8c:39:55:b5:68:fb:69:14:0e:39:ca:5d:
                    f7:dd:43:ee:4e:32:53:56:68:7c:ff:6b:78:4f:dd:
                    d6:8b:d0:9a:17:98:38:4f:c6:0a:46:81:f8:78:07:
                    eb:00:59:f5:fc:d4:c0:68:03:51:db:67:f1:18:0f:
                    3f:f0:ad:dc:e7:26:03:7a:9d:ed:37:4b:12:0f:4d:
                    4f:ba:3c:6c:91:83:b2:dc:2c:7a:83:78:a2:7c:19:
                    b6:50:50:57:d1:b3:e1:18:ac:28:a6:f2:56:29:3e:
                    e6:a7:90:e5:f4:e9:28:e2:4c:9c:69:1c:1a:2a:31:
                    2c:3d:ae:d0:5c:e5:12:88:02:69:4b:dd:c5:f8:e7:
                    95:f0:89:96:e3:23:94:66:41:9d:62:e2:89:f2:f9:
                    5a:05:5c:c4:0d:cf:19:49:4d:fe:b0:df:d0:35:9c:
                    fe:44:ff:00:46:60:4e:7b:85:41:b4:ff:cc:b4:22:
                    30:de:46:e6:f8:07:7d:00:7e:96:3c:18:8e:72:d6:
                    33:77:e5:dc:50:08:75:b4:ba:ac:87:38:67:95:b8:
                    67:4e:06:cd:10:31:e9:91:90:3c:3b:d2:58:65:73:
                    53:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:32:B7:A9:32:81:0D:7E:5E:C5:94:3C:4A:C2:DA:EA:A1:A8:2F:28
            X509v3 Authority Key Identifier:
                keyid:74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:99:73:25:0e:29:ab:02:4a:f8:45:2d:7d:85:78:69:69:b9:
         b6:d2:9e:34:5e:35:04:81:04:8c:21:78:92:e2:29:82:6a:3e:
         24:ea:fe:21:45:21:a5:34:e4:59:00:2f:57:86:18:6c:39:ef:
         80:9c:76:62:1e:5d:4a:42:2a:8f:91:b3:ea:06:88:8a:95:f6:
         cd:b5:dc:13:e1:12:96:4f:63:1d:e5:a9:e1:51:78:89:69:65:
         43:89:7d:f0:83:f0:00:73:30:0d:7e:ea:14:26:11:93:86:58:
         6a:77:b9:52:80:5d:c8:73:b5:bf:2d:c7:9f:b8:6a:39:66:2b:
         1e:a9:7f:26:fc:08:35:5f:86:9d:20:c6:e8:50:cc:c9:1a:49:
         f3:05:bc:8c:3b:74:fd:f1:d6:6f:39:a4:b1:30:54:4e:b3:24:
         7f:30:74:f9:18:c0:a3:ce:61:67:ab:23:2c:3e:d0:b9:43:01:
         ff:1f:36:aa:03:c3:70:db:e5:41:b0:33:63:31:fb:9e:cb:d6:
         2a:42:48:dd:8a:28:e3:b9:83:61:4b:86:de:f1:7a:45:fc:b5:
         f0:9d:b2:9a:d2:5c:4e:1e:8e:ca:88:17:a2:29:46:6f:aa:ae:
         ed:e9:5b:c1:cd:5d:23:44:95:1e:f1:7a:a0:9e:be:cf:13:06:
         53:fa:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:35:24 2026 by rpki-client