Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File:                     ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier:          X8agDmQTv1HZmdk6QmMQ7S0786xqRx79OZ+wEKfb8kg=
Subject key identifier:   13:D6:58:8E:9C:31:DD:07:21:F1:FE:C0:24:F8:B9:D0:7D:E5:D5:AC
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer:       /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial:       0A56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number:          0A4A
Signing time:             Fri 12 Jun 2026 19:44:30 +0000
Manifest this update:     Fri 12 Jun 2026 19:44:30 +0000
Manifest next update:     Fri 19 Jun 2026 19:44:30 +0000
Files and hashes:         1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: R+XEbIaQMChKGtPXQoVRvzOcxYGGMmtU4yCGAr3sFow=)
                          2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
                          rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2646 (0xa56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
        Validity
            Not Before: Jun 12 19:44:30 2026 GMT
            Not After : Jun 19 19:44:30 2026 GMT
        Subject: CN=6a2c619e-6aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:a2:67:1e:17:ca:60:0c:b5:5f:c2:0b:da:
                    4b:0a:72:86:59:0c:20:8a:fc:d8:21:47:6a:6b:d8:
                    51:09:b4:97:2d:72:b4:7f:88:fb:95:88:26:d4:cf:
                    65:1e:7b:a0:d3:d7:af:45:af:f5:31:8c:a5:6d:f8:
                    9a:fc:40:69:ae:80:ef:e4:9e:c8:6e:ad:9b:02:1f:
                    f0:c5:95:b9:ae:93:a9:2f:71:0a:ec:d8:42:32:82:
                    cb:6e:25:5e:ea:05:cf:f0:34:31:44:49:5d:b9:ed:
                    1c:7d:82:a1:db:b2:c6:e7:78:3d:cc:3b:80:00:0c:
                    6f:70:a6:de:5e:0d:89:d5:31:0f:f0:8f:6d:7a:61:
                    1a:3c:46:4c:19:34:1e:fa:3f:e7:cd:2b:d8:c8:4f:
                    56:08:4a:a4:d5:92:aa:e7:00:60:ad:d7:17:fd:1b:
                    89:05:89:bc:23:54:b1:d1:3c:09:c6:17:d4:2a:04:
                    1d:20:4e:6f:36:f0:2d:cd:37:e7:a9:f3:53:11:90:
                    20:d5:5e:7a:15:dc:9c:ce:9c:47:38:03:1f:37:ba:
                    86:e7:62:2b:ba:6a:fe:72:63:7a:be:cd:6f:e1:50:
                    20:75:53:61:82:f7:0b:3c:ca:25:8d:98:40:8f:9c:
                    84:aa:b4:77:a4:95:d0:a7:78:01:88:01:ae:5d:c1:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D6:58:8E:9C:31:DD:07:21:F1:FE:C0:24:F8:B9:D0:7D:E5:D5:AC
            X509v3 Authority Key Identifier:
                keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ab:7b:9b:64:43:b9:7f:6d:ca:63:d7:1b:66:b4:6f:49:65:
         dd:9a:9e:38:c3:61:7f:25:7c:10:15:6f:3e:34:78:40:42:d3:
         d0:6d:a7:47:51:d4:41:31:e3:82:d9:d2:0e:03:34:ec:c3:40:
         27:e0:72:ce:18:e8:18:a0:5a:7c:d9:17:6e:30:c5:73:8f:44:
         3a:9e:e7:e4:18:40:9a:86:79:bc:b0:51:20:19:b6:b3:b1:05:
         d8:82:23:41:6f:4b:a7:44:e2:e8:26:6b:b0:1e:ca:06:43:b6:
         2a:c3:60:47:de:04:37:79:bb:69:da:6d:bf:26:11:ad:d2:84:
         09:1f:bd:4a:df:f1:af:b3:57:79:81:fa:cd:45:c9:d5:8f:97:
         ca:b2:87:0c:de:f9:0e:05:0f:f9:79:44:04:9b:b1:e6:26:d4:
         c9:1a:ba:dd:17:03:cf:1d:fb:4a:07:31:37:d6:55:02:b1:aa:
         26:d2:32:7a:39:f6:c6:95:0d:92:92:8d:4f:bf:71:36:9c:0c:
         a5:5b:05:75:9a:42:c8:8c:1a:d5:70:b8:6d:cd:8d:d2:e4:36:
         43:af:ca:6b:3d:5a:3c:f9:fb:77:69:4a:56:8c:e2:9d:12:e3:
         3c:21:13:33:a8:55:ca:4c:ad:4c:87:ad:ed:b2:d6:2d:ab:19:
         7a:75:3a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:20 2026 by rpki-client