Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
File:                     cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json)
Hash identifier:          3sU1Tw+dbWviv2Uo295WzkgGpKgRHOZuhyxFcy0PzMY=
Subject key identifier:   B1:ED:6E:F3:3E:83:FC:67:3D:05:E4:95:91:E0:60:6C:63:F7:87:F8
Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36
Certificate issuer:       /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
Certificate serial:       0D64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
Manifest number:          0D5B
Signing time:             Fri 12 Jun 2026 17:58:19 +0000
Manifest this update:     Fri 12 Jun 2026 17:58:18 +0000
Manifest next update:     Fri 19 Jun 2026 17:58:18 +0000
Files and hashes:         1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: DQIYeCJvAgV6m7y3KmDJtCl/t8RWfR3UaTla3H9dZyI=)
                          2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: FgkzVKONq3CKLOrwQ7vibERQJu7ifecHOE3C3Y19pHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl
                          rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3428 (0xd64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
        Validity
            Not Before: Jun 12 17:58:18 2026 GMT
            Not After : Jun 19 17:58:18 2026 GMT
        Subject: CN=6a2c48bb-02ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6c:8e:03:6a:43:19:fc:f6:0e:cd:9a:e8:c9:
                    d5:ea:53:db:fe:41:2a:7c:d8:cd:3b:6f:fd:29:b3:
                    c5:38:bc:bb:d5:b1:f4:9c:c0:b0:ec:61:60:dc:25:
                    2d:73:44:89:75:08:0c:3e:14:9f:30:c2:ae:a2:62:
                    18:b4:2f:19:33:4d:e6:15:67:9e:21:f6:d1:75:0a:
                    97:fb:43:72:3b:5e:1c:8b:8e:47:2d:a9:35:7c:47:
                    f2:6d:22:74:67:fd:0f:16:c7:8d:e0:d0:a6:ef:77:
                    68:11:7c:12:74:84:8c:3a:b6:6a:6c:d4:41:dc:86:
                    16:f7:d7:a4:db:d5:72:74:41:0b:6e:df:4f:12:a4:
                    69:1b:b2:b8:82:ef:47:ea:07:93:03:98:8c:e9:e6:
                    d9:9e:d6:4d:84:11:85:52:1b:0d:bb:2f:72:e5:01:
                    42:37:71:0e:b5:30:f1:f8:b6:57:b4:ce:f0:0f:a3:
                    6e:eb:64:aa:17:24:2a:43:d4:b8:13:ae:0b:ac:7e:
                    2e:3b:e7:5f:41:24:09:19:09:b5:9b:c9:07:38:4f:
                    fe:85:71:f1:10:58:53:dc:41:d6:85:91:7b:a3:62:
                    82:7e:f2:77:46:0d:bf:f0:2e:45:36:94:13:0b:36:
                    3d:27:a2:92:21:f2:d7:50:ac:70:77:2d:ee:d0:dc:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:ED:6E:F3:3E:83:FC:67:3D:05:E4:95:91:E0:60:6C:63:F7:87:F8
            X509v3 Authority Key Identifier:
                keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:67:c1:1b:03:2e:f4:bb:f8:45:b3:77:1d:cf:d1:c7:47:4c:
         ad:7d:16:2b:cf:13:8e:78:8d:e6:95:ad:89:ef:e4:d9:cc:fe:
         fe:e3:15:34:16:53:f5:db:30:22:9a:55:50:e0:78:be:4b:89:
         1f:14:b3:3d:6f:73:5f:03:35:70:3d:76:c5:00:1c:20:f7:28:
         1d:df:8c:b5:5e:b9:a3:e0:e7:f1:f0:ff:8e:eb:c9:49:71:c4:
         61:6a:71:60:ba:0f:5e:98:8d:70:8d:ce:d2:2b:b4:c2:43:b6:
         39:2f:37:d6:dc:c9:29:4b:32:c5:70:99:d4:5c:4d:17:37:a5:
         f1:e3:44:d3:f0:d3:bd:3e:a1:b8:c8:64:03:ae:f8:b4:a4:49:
         c5:73:e3:80:4b:b4:cd:1d:24:d8:5b:25:79:5b:9b:0d:aa:b6:
         6a:83:16:c3:ae:78:72:c8:54:f0:66:7b:cd:24:f4:d1:3c:ab:
         ae:86:e6:17:b3:0e:bf:29:25:ec:ad:6f:5c:de:98:e7:9b:ac:
         85:f7:39:2e:f8:55:8b:d6:e9:d3:29:ec:71:fd:62:e4:2c:47:
         7c:b1:68:43:29:a3:35:74:a5:ee:39:ce:9b:d7:17:63:6d:74:
         4f:65:55:f8:a6:14:dc:d1:7c:a4:fe:7e:03:44:de:99:f6:63:
         a9:32:86:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:14 2026 by rpki-client