Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
File:                     D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft (raw, json)
Hash identifier:          8Lt1sVBklfxr9NYE3WvV7wG/ZQlmDL748zmeeGwUR+w=
Subject key identifier:   13:B7:FF:90:CB:FE:A7:91:12:75:9C:9D:DA:4A:B5:36:B0:89:96:04
Authority key identifier: 0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34
Certificate issuer:       /CN=A91A7C68/serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
Certificate serial:       0299
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
Manifest number:          028A
Signing time:             Sat 13 Jun 2026 01:56:36 +0000
Manifest this update:     Sat 13 Jun 2026 01:56:35 +0000
Manifest next update:     Sat 20 Jun 2026 01:56:35 +0000
Files and hashes:         1: D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl (hash: fqH7SQfVFidDusFnk/EuR3UDY6T6ep9IBPbPjkz++5g=)
                          2: BC72661A972911ED8CBCA476C4F9AE02.roa (hash: ijHVWHANYsNS9d5u+2L0OG/TAcPXhYDdTjzMH7Olj0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7C68, serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
        Validity
            Not Before: Jun 13 01:56:35 2026 GMT
            Not After : Jun 20 01:56:35 2026 GMT
        Subject: CN=6a2cb8d4-8942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:0b:05:20:3e:8e:3d:63:4c:a7:a0:e1:52:
                    e2:21:bd:aa:22:31:22:0a:fb:0e:47:f7:e1:11:82:
                    7d:af:79:26:0b:d9:43:39:ad:4a:cb:e0:4e:c3:89:
                    16:3d:7e:c2:03:97:1a:0a:e6:fb:df:74:da:25:26:
                    51:4f:c4:d6:5f:71:69:ba:9d:24:de:cc:cd:1c:2f:
                    31:04:66:dc:bd:cd:77:76:9f:0a:4c:96:21:b1:87:
                    4d:3c:0d:fe:a7:4a:fb:75:75:bb:4a:ac:5a:19:fe:
                    3b:f6:21:54:aa:37:a5:36:07:a2:9f:e5:32:b3:5b:
                    50:22:59:16:71:1d:de:7b:d6:bd:30:f4:c1:4c:e6:
                    61:49:28:90:b1:e5:e8:69:b2:9d:08:28:18:00:0f:
                    fd:18:aa:61:6e:70:c3:a2:7b:b6:cf:86:53:f2:5d:
                    4c:05:7e:d4:a5:6d:b8:76:f0:2b:61:b1:cf:55:20:
                    36:c0:80:3c:bd:93:51:b8:53:72:67:c4:8c:8b:3b:
                    14:e6:83:c1:e8:d5:aa:d3:74:2b:bb:26:4f:9d:df:
                    03:9a:d5:cb:9f:5a:9f:9e:58:a9:82:11:cc:ce:14:
                    ba:4d:02:cb:c5:39:a9:69:8b:75:22:a9:85:7a:b5:
                    86:2d:58:0e:e0:f1:66:29:27:bf:bd:45:8a:be:3e:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B7:FF:90:CB:FE:A7:91:12:75:9C:9D:DA:4A:B5:36:B0:89:96:04
            X509v3 Authority Key Identifier:
                keyid:0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:54:1a:eb:04:c2:e3:e5:56:20:ef:43:7f:ca:07:c1:a7:c5:
         77:90:a4:a8:6d:ed:eb:44:07:88:4c:17:0b:ea:d2:5a:08:15:
         a6:61:1e:cc:90:14:b5:03:17:ef:82:19:1a:e3:7b:e8:c3:2d:
         c6:d6:13:a3:84:61:f8:d0:bd:62:c8:ec:de:32:12:37:01:50:
         6d:14:8d:a0:64:47:44:b9:85:16:5b:e6:71:31:55:02:8b:cc:
         a1:5e:e1:26:35:a0:25:73:77:76:46:ae:41:38:b9:77:03:70:
         4b:01:b6:aa:4d:bb:95:ae:48:88:80:64:ee:79:14:cf:6f:50:
         0a:40:49:c6:ac:b9:42:ff:55:fa:f7:07:4b:0e:ca:b0:cd:eb:
         a6:3c:26:f6:ae:2d:44:9f:b0:d1:ec:de:f4:dc:0c:9b:fa:ba:
         49:9e:31:a0:65:3b:2e:03:d7:ec:70:fd:8c:15:91:3a:fb:3e:
         41:d5:25:f9:0e:ef:52:17:80:31:ee:89:bf:a5:05:19:da:42:
         0b:b8:6a:fa:11:54:89:36:a2:93:ad:2a:62:0b:65:58:f9:8d:
         29:28:5f:b2:bb:9c:1b:f7:a2:79:2e:55:2e:54:0e:64:74:0b:
         04:1e:ea:6d:93:1d:71:be:85:73:87:6e:66:5e:2b:14:93:e7:
         fe:80:47:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:54:42 2026 by rpki-client