Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
File:                     rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json)
Hash identifier:          E855uuibZZX4TmCYV+ETVeygcAU0hHDBEaIM60xxYRE=
Subject key identifier:   11:DA:8B:96:E1:2B:47:61:82:99:CF:FC:8D:D1:B0:23:59:4C:8A:2E
Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
Certificate issuer:       /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
Manifest number:          0112
Signing time:             Sat 13 Jun 2026 06:04:04 +0000
Manifest this update:     Sat 13 Jun 2026 06:04:04 +0000
Manifest next update:     Sat 20 Jun 2026 06:04:04 +0000
Files and hashes:         1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: nGN05jliMfbE/qA3pbrCm766BD6P8868QpeYqN8TWR4=)
                          2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: hdlYLSviqdsjiISi2RWRWAEZ34QocD0U9ocvGaJFxhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
                          rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
        Validity
            Not Before: Jun 13 06:04:04 2026 GMT
            Not After : Jun 20 06:04:04 2026 GMT
        Subject: CN=6a2cf2d4-6013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:9a:be:b8:ee:6b:b2:11:76:92:62:3e:9d:91:
                    cd:87:54:1e:a9:d5:d8:57:33:b7:54:5a:e5:9f:d5:
                    8d:1f:a4:e9:29:33:ea:d0:77:b0:70:6a:8c:22:d3:
                    00:be:40:43:0e:69:70:ed:4f:16:04:7e:8f:40:e2:
                    ee:54:e4:29:3a:02:6c:10:f7:24:08:64:b9:ec:58:
                    7c:11:b7:c1:e0:e9:35:7d:2b:f1:81:6f:58:a5:f3:
                    e6:97:79:88:5e:84:b6:7f:fe:c5:6e:22:db:00:e6:
                    5d:d9:9a:a3:0b:24:f6:5c:f2:4e:c3:c2:17:6b:97:
                    85:f3:5c:6c:06:05:8d:99:8e:4c:98:79:1d:8d:4a:
                    47:d5:55:26:10:72:21:a2:b6:29:0d:3a:f7:04:e0:
                    52:36:22:03:db:98:3c:99:e8:84:ae:47:c7:74:76:
                    3e:a1:68:91:1e:de:9b:0f:b9:a8:bb:12:f7:3a:b0:
                    d6:38:c8:14:aa:cc:12:28:f8:b4:72:56:2c:60:63:
                    a6:7c:62:5b:71:ae:9b:b5:9e:e5:04:c7:a1:20:79:
                    e5:c8:70:e6:d5:85:34:a0:15:e4:7c:7e:76:06:fa:
                    bc:88:1c:6e:50:d2:70:28:6f:c7:a9:39:0d:ab:73:
                    9c:66:d3:17:99:09:09:06:23:e0:c8:ef:ff:9f:9d:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DA:8B:96:E1:2B:47:61:82:99:CF:FC:8D:D1:B0:23:59:4C:8A:2E
            X509v3 Authority Key Identifier:
                keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:15:0b:5e:0f:03:7a:ac:b6:03:12:60:b4:0d:8d:c3:89:23:
         6b:00:8d:21:24:75:7e:ea:48:49:b0:31:51:85:c6:b1:71:1a:
         2e:2b:1a:8c:3a:bd:20:fd:9c:37:81:2e:83:61:d1:a4:9b:8f:
         56:98:7a:be:9a:e7:1d:5b:5e:ce:42:ae:23:e9:2f:a4:dc:68:
         e3:97:ae:d4:7e:ce:05:86:bb:49:a5:79:a0:0f:ec:bf:b5:cd:
         a5:43:7e:79:db:1b:b6:23:79:69:b0:f5:22:45:61:f6:94:79:
         b7:63:06:08:43:51:3a:ef:33:51:ac:7c:cc:ad:00:b6:de:0d:
         a9:9b:08:63:4d:0d:1e:67:50:b9:29:a8:d0:75:df:28:25:45:
         9d:37:1f:56:54:ac:4e:81:2b:df:d0:ce:2b:b9:71:e1:4e:f5:
         7d:b2:68:89:9b:76:36:f6:97:b7:a9:7f:d6:0b:72:06:22:ab:
         8e:b4:a9:49:81:8d:29:04:b6:de:c0:2a:5d:3b:23:f3:a8:b8:
         71:96:dd:5e:11:23:61:95:df:80:0f:40:2e:f8:a9:a0:9a:aa:
         b9:9d:09:01:4d:50:a8:0b:68:52:f7:ba:89:fe:fb:b6:18:9a:
         ee:3e:6a:b8:fe:9c:66:3c:6d:4f:35:c8:29:a6:39:e8:68:c3:
         f7:ea:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:24:07 2026 by rpki-client