Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft
File:                     b2FOWP6Tat901zb1OS3tX9FrdYc.mft (raw, json)
Hash identifier:          ER1n0VCOtjU+HwhR/f4HdelhSmH6EDlykF1EKNZkgqM=
Subject key identifier:   F5:2F:B8:A2:68:84:8C:D5:72:A0:21:8F:7D:F2:AE:C2:E7:32:D1:5F
Authority key identifier: 6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87
Certificate issuer:       /CN=A91A9B3C/serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587
Certificate serial:       0721
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft
Manifest number:          071A
Signing time:             Fri 12 Jun 2026 22:00:57 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:57 +0000
Manifest next update:     Fri 19 Jun 2026 22:00:57 +0000
Files and hashes:         1: b2FOWP6Tat901zb1OS3tX9FrdYc.crl (hash: CBEhXeMtRfcZmVnfpQapZVIcFIqCWexvMEV0WHrqeZU=)
                          2: 00D8BE5286FC11EB8A95642DC4F9AE02.roa (hash: eh9GvMjf5qcu+nX/IaiauXLKIhr7vcYm5je02WvCPCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl
                          rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9B3C, serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587
        Validity
            Not Before: Jun 12 22:00:57 2026 GMT
            Not After : Jun 19 22:00:57 2026 GMT
        Subject: CN=6a2c8199-2f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:53:5f:5d:54:62:f1:6a:d9:0c:f9:c2:dd:
                    cc:07:9e:33:58:e0:99:96:44:64:2b:93:ed:3f:e7:
                    16:6e:1c:b2:88:2e:74:78:ea:ce:3f:f7:b9:aa:ee:
                    7f:a3:5a:e8:01:5b:a5:69:43:e7:ea:0e:98:1a:68:
                    6c:39:4b:59:d9:54:6b:d9:9c:67:ac:f8:22:cf:c4:
                    9c:5f:f3:d8:e4:4e:2b:aa:21:f0:11:97:ca:80:ad:
                    e1:ba:4f:38:71:02:e3:07:48:96:d8:d7:ad:49:d2:
                    81:46:90:0c:5c:a2:9a:2a:e9:fd:cd:eb:24:0d:05:
                    b6:ce:cb:7b:81:9e:43:be:a7:b5:d9:a0:de:93:d3:
                    c8:2c:2a:b7:27:a2:33:af:43:1b:6e:ef:7b:32:64:
                    cc:11:5e:72:0f:b9:48:0f:70:f4:86:ac:62:91:2e:
                    14:36:dc:23:5b:fa:d3:e7:7b:41:c6:fc:3c:d5:1e:
                    e6:46:46:8b:ca:03:f5:ba:3c:25:33:bc:d4:bc:c7:
                    38:65:a6:07:1d:7b:b8:7c:58:f3:e9:c0:1f:ed:e2:
                    0b:b0:27:db:02:ec:9f:f3:48:43:97:e3:2c:f5:d7:
                    cd:da:43:e7:02:15:1a:e2:cd:ba:4a:03:3b:64:7e:
                    72:2b:bb:68:b7:7d:9c:36:ac:5a:12:82:d7:35:bb:
                    5d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2F:B8:A2:68:84:8C:D5:72:A0:21:8F:7D:F2:AE:C2:E7:32:D1:5F
            X509v3 Authority Key Identifier:
                keyid:6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a2:c8:b1:66:7b:50:47:46:22:36:6c:86:31:4a:0f:bd:8d:
         2e:29:23:3c:45:36:94:d7:dc:03:09:90:d4:d9:d3:d0:fc:fd:
         41:23:64:6e:8b:ba:c3:71:5d:e5:f9:b8:1f:96:d3:29:ea:8a:
         34:1e:f4:6a:ae:69:ee:c7:7a:c8:27:b9:fe:6b:91:1b:0a:68:
         ce:b9:8d:30:6d:8c:c1:74:c5:78:2a:64:1e:7d:5c:cf:80:9c:
         af:7c:69:8e:32:f8:a5:db:9a:14:ec:ca:07:ac:cc:15:83:76:
         33:11:fa:d9:e4:dd:00:f5:bd:6b:9d:00:72:ba:77:4c:b5:84:
         21:da:46:57:d8:8e:bb:f8:a0:8a:bc:67:d5:ca:40:be:93:3d:
         b9:01:2b:0d:bb:57:88:d6:20:e5:54:33:3a:e5:30:af:b7:b1:
         7f:86:92:ea:9f:95:e0:fc:3c:06:72:8a:24:07:ac:99:e4:30:
         13:35:b2:db:9b:25:63:09:87:f7:37:c7:07:f0:e3:d7:ef:6e:
         bb:23:3c:ac:82:68:c7:61:a9:02:cf:3f:2b:08:9e:e4:f4:25:
         56:e3:6a:00:ee:ed:90:8c:29:15:0e:40:e8:7b:88:ac:c2:fe:
         04:06:88:f8:21:57:dc:c1:5d:f2:32:4e:0c:74:ff:a2:da:1a:
         58:15:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:56 2026 by rpki-client