Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
File:                     9oPyIkSMakhd2P7f4encdEIT-jw.mft (raw, json)
Hash identifier:          biUljwTnhapXC3JYdQeByNI7WmOdZdNgWdOVa+MvXhc=
Subject key identifier:   C7:1A:BA:58:C1:DE:2A:CA:AC:97:1C:E7:78:D5:74:18:A1:D5:F4:13
Authority key identifier: F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
Certificate issuer:       /CN=A91A2886/serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
Manifest number:          44
Signing time:             Mon 15 Jun 2026 08:37:03 +0000
Manifest this update:     Mon 15 Jun 2026 08:37:03 +0000
Manifest next update:     Mon 22 Jun 2026 08:37:03 +0000
Files and hashes:         1: 9oPyIkSMakhd2P7f4encdEIT-jw.crl (hash: fTX7j1bPEyfMbQEsgQTKF2qxH9qvIhWUaq6goWAS3v4=)
                          2: 35037C3414DD11F1B12014D7123D8C67.roa (hash: j+SdwyC8ptJD+qecbYia9qa2SzHrIz3dLwQQE297jB4=)
                          3: 9541152014DD11F1B59CF9DA123D8C67.roa (hash: o6jXstt3oz0pLRapDBGquL+NWtwn1qFvviGsBZcW4hM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
                          rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2886, serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
        Validity
            Not Before: Jun 15 08:37:03 2026 GMT
            Not After : Jun 22 08:37:03 2026 GMT
        Subject: CN=6a2fb9af-b1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:4f:4f:39:7a:52:f6:ac:a5:ac:42:c6:89:
                    01:62:de:41:d9:e5:82:bc:e1:fe:01:f5:3f:4e:01:
                    c7:49:06:46:c3:55:e5:44:e2:b8:d6:48:eb:53:94:
                    b9:ee:b9:46:1a:75:c1:14:e9:06:9d:f8:bb:04:b5:
                    c9:ed:a7:39:d6:d1:b8:15:ef:e3:34:1d:34:0b:7d:
                    3b:2f:c3:ba:75:88:fe:60:c7:1c:92:82:04:d7:66:
                    62:3c:d4:17:d2:d2:b3:98:6c:d5:4a:61:b9:0d:b2:
                    3a:a3:29:77:6d:9d:54:ed:2c:4b:79:e3:b0:0b:a4:
                    4a:c3:b5:3b:2c:d8:a6:cc:e7:5b:6c:3a:4b:01:a4:
                    33:3d:bd:15:37:4e:32:41:de:38:7a:5c:13:a2:10:
                    fb:68:92:ce:c0:cf:47:f4:ee:28:cb:9f:82:de:4c:
                    d2:0f:f0:f7:3b:27:a3:65:60:01:be:91:9e:e2:6f:
                    10:f4:67:79:dd:87:18:d0:39:db:e2:48:c9:98:0c:
                    c6:ff:2f:04:b5:e9:6c:06:23:58:20:1a:30:81:19:
                    25:cd:07:4a:98:18:47:d7:e1:0e:aa:3d:82:87:38:
                    2f:76:55:82:24:ec:54:0c:29:45:a7:11:53:f8:da:
                    b6:09:35:b6:05:9e:80:ab:d4:a6:86:a6:87:3d:e0:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1A:BA:58:C1:DE:2A:CA:AC:97:1C:E7:78:D5:74:18:A1:D5:F4:13
            X509v3 Authority Key Identifier:
                keyid:F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:71:91:8e:9b:84:3d:46:ac:d5:05:2b:6e:f6:1a:eb:a4:68:
         84:97:28:79:30:a3:7e:b6:1a:01:a6:61:ad:e4:21:7d:42:4b:
         39:11:f9:95:18:da:b6:06:3a:53:b1:20:4b:91:1b:c4:7f:95:
         a8:78:c7:d2:6f:8b:1c:d4:cc:88:84:e7:21:53:c0:51:59:5a:
         49:10:96:98:01:ae:09:64:8a:cd:e2:c6:7f:7e:ef:4c:32:0e:
         6a:90:dc:9d:18:1e:ff:29:f0:5c:78:b8:b1:89:60:a5:db:37:
         90:04:e7:5a:eb:41:b2:20:49:33:e2:8b:5f:ce:03:fa:65:c6:
         90:b6:ae:d5:a8:72:49:e6:12:2f:60:75:9a:f1:b5:ae:20:af:
         26:ec:b8:c5:5a:fe:59:e6:30:8a:5d:2a:4e:ac:8a:32:5f:e6:
         3a:35:a1:83:4a:e2:aa:f1:a9:91:bc:ee:81:2c:76:ea:02:07:
         1f:5e:bd:5e:da:c2:f1:64:20:8f:0a:4b:0e:82:b2:23:71:cc:
         44:3c:fd:24:e5:66:86:3c:67:d9:d5:37:82:08:20:05:e8:1a:
         a6:f2:be:5e:c4:1e:68:a7:50:02:65:32:81:49:1b:50:aa:5a:
         da:70:86:ff:41:4a:bb:c6:04:c2:ab:00:11:3a:8a:0a:c1:e3:
         6f:98:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:23:37 2026 by rpki-client