Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
File:                     3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json)
Hash identifier:          yKEDBDRhm8NgjXEskUUU2Vbw3lYQvTCzhIHE2tPazvo=
Subject key identifier:   CC:EE:8C:69:50:A8:08:26:B8:FF:AB:9A:87:81:68:C3:5F:C6:0F:A0
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Certificate issuer:       /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial:       0BEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
Manifest number:          0BDA
Signing time:             Fri 12 Jun 2026 18:58:32 +0000
Manifest this update:     Fri 12 Jun 2026 18:58:31 +0000
Manifest next update:     Fri 19 Jun 2026 18:58:31 +0000
Files and hashes:         1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: n4kNLy5u1bX+f5t6LQ3z2HEkAvJCSrQQfh+qU3a6Jyc=)
                          2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: ygGwfR0Fy0GYr4xDIiSFtgwRtiLp/q0solcHFJQ7qpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
                          rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3050 (0xbea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
        Validity
            Not Before: Jun 12 18:58:31 2026 GMT
            Not After : Jun 19 18:58:31 2026 GMT
        Subject: CN=6a2c56d7-e81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7e:96:7e:cf:87:38:e1:4a:0b:cb:f8:b6:da:
                    86:15:c2:ce:e6:0b:07:e8:d7:05:f9:cb:25:ac:1b:
                    86:e4:73:57:7d:18:a5:7c:62:32:23:79:02:35:6b:
                    1f:7c:53:33:ae:e4:dd:17:5d:e9:4f:79:fa:b8:24:
                    1b:79:49:91:1e:fd:f8:e2:e5:19:56:dc:a7:7c:5e:
                    19:01:40:e6:65:72:4d:eb:5b:04:0b:f2:3f:64:f4:
                    63:c1:ec:85:c1:7b:d0:31:9a:d6:78:a6:a0:9f:82:
                    0b:05:1e:35:95:13:0b:de:02:ca:ae:56:5b:2d:17:
                    1a:da:21:22:3f:3d:bf:4a:de:d4:c0:5e:40:e5:08:
                    3b:fb:6d:f5:7b:6d:61:7f:cc:c0:ae:4c:27:de:06:
                    78:f6:c8:0f:55:e4:79:b8:49:a6:99:81:dc:27:8e:
                    ad:b0:be:8d:a9:0f:1b:44:55:a2:1d:9f:33:81:15:
                    84:6e:4c:b9:39:c7:67:95:e8:85:06:d4:c8:04:3e:
                    c1:3e:df:d7:c3:86:a5:df:43:8b:d1:ab:55:fe:38:
                    12:14:7f:14:c3:14:e2:ad:6e:59:ef:5a:11:80:bc:
                    c6:19:23:cc:18:90:90:23:fd:b8:dd:8c:b0:b6:57:
                    12:f9:91:ae:fe:82:9a:e9:db:db:6f:5b:74:ca:d7:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EE:8C:69:50:A8:08:26:B8:FF:AB:9A:87:81:68:C3:5F:C6:0F:A0
            X509v3 Authority Key Identifier:
                keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:cc:ed:35:92:de:77:5d:aa:1e:de:18:8c:4b:25:4b:22:
         98:db:69:9d:f7:f9:50:20:5b:1a:35:52:fb:29:9d:c8:0c:37:
         f8:e7:40:55:ad:d8:72:17:a0:cd:21:70:c3:ab:f2:1f:ec:4b:
         ac:1e:0d:27:42:95:91:28:f4:29:f9:32:6d:bc:a6:ef:cd:fc:
         0f:3a:80:41:ef:0c:4f:67:39:ef:93:fc:2d:ee:f4:86:24:73:
         46:6c:a7:17:bf:84:aa:ae:f1:1c:53:64:22:c6:73:7f:94:d4:
         57:14:5f:d2:36:5e:0a:2d:12:bb:3e:64:7d:b3:af:a4:14:08:
         e0:23:79:06:90:51:7a:4e:7f:52:b1:1c:b9:40:72:36:a6:3e:
         10:44:c3:1a:42:c0:02:22:1c:0c:d0:c9:3d:2b:75:07:72:11:
         e5:43:ce:f0:ea:6f:3e:45:10:e4:7e:e5:f0:e7:30:12:28:1b:
         b4:46:d2:86:36:07:63:14:7e:69:d0:1e:ba:9d:13:df:b3:5d:
         dc:b2:9b:9b:db:82:30:93:f0:7e:0f:9c:ec:ac:d2:a8:07:a2:
         a9:3c:f3:11:01:91:92:96:71:53:96:93:88:29:41:63:da:8b:
         c0:3c:14:9c:3f:35:fa:c5:22:5c:33:55:3c:b4:65:df:8a:9e:
         df:a7:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:28 2026 by rpki-client