Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
File:                     d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json)
Hash identifier:          bUxXpF6iiw5gc4TGH1x9bKmpdAwSPvzW7KnQLBTz17s=
Subject key identifier:   B2:A6:0A:B9:BE:80:0A:30:B2:38:A1:C3:BC:9C:90:8C:17:04:9D:43
Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
Certificate issuer:       /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
Manifest number:          0112
Signing time:             Sat 13 Jun 2026 06:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 06:01:12 +0000
Manifest next update:     Sat 20 Jun 2026 06:01:12 +0000
Files and hashes:         1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: k/QfttTjbwN1QZy8ec4dsZ8c2xlOjkMfyEndQ+/REBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
        Validity
            Not Before: Jun 13 06:01:12 2026 GMT
            Not After : Jun 20 06:01:12 2026 GMT
        Subject: CN=6a2cf228-1a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:7e:18:80:88:92:03:80:41:45:57:40:14:
                    5e:f6:38:9c:b1:6f:35:a0:54:18:c1:b9:35:17:ef:
                    59:e9:2f:d6:98:da:02:b1:cc:3e:75:34:e5:45:11:
                    60:d1:a2:d4:3b:11:32:5a:5f:b5:c9:12:14:6f:b3:
                    d9:b3:da:3d:fc:8b:6e:71:67:d3:89:05:64:3f:c8:
                    e3:33:1e:75:27:ee:72:0b:9e:8d:d7:3a:ad:f1:aa:
                    93:d7:e5:15:5f:8f:7d:0c:c2:ce:e6:08:b8:99:d9:
                    db:b7:b6:5c:67:e2:bb:d8:db:af:69:cb:79:11:9e:
                    ed:1f:ab:5b:c0:a0:16:4c:6d:d5:96:12:49:da:45:
                    7e:1a:a5:f8:3d:46:ab:a3:c8:e1:32:ba:6c:67:52:
                    6e:83:9e:5b:16:96:5a:87:b7:43:59:18:0f:c2:71:
                    06:34:81:0b:58:a4:70:1b:73:45:02:df:b4:e6:1a:
                    7f:69:52:57:ec:15:f1:6f:38:ec:cb:a5:1c:cb:6f:
                    46:06:f0:27:21:89:19:82:e6:23:ef:76:d4:6d:0d:
                    b6:8d:9c:66:72:fe:1c:d4:2a:00:27:7f:71:03:52:
                    ff:e1:9a:a3:1b:a8:f0:96:45:d6:a0:31:ee:d5:0c:
                    e4:4d:9d:16:6f:9c:6d:b4:58:2c:40:dd:95:a4:2a:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A6:0A:B9:BE:80:0A:30:B2:38:A1:C3:BC:9C:90:8C:17:04:9D:43
            X509v3 Authority Key Identifier:
                keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:cf:4f:98:8c:e2:13:da:5e:23:b1:0e:e0:12:d1:19:b6:f4:
         b9:b9:31:cb:d0:9a:e9:43:ce:9c:9d:b2:ed:ee:1f:6f:96:47:
         6f:e2:a0:35:fc:2d:b8:f7:24:ec:ab:5c:95:0b:66:41:60:8b:
         a7:12:3a:6a:f6:e8:33:b1:00:7f:15:82:63:65:6a:de:2a:e8:
         2e:3e:63:af:db:86:bf:53:1c:0b:e3:08:02:fa:6c:17:e5:dc:
         a3:38:0e:26:99:d2:a6:82:ba:39:20:14:26:7a:ed:45:5a:cc:
         b7:8a:5e:aa:23:8d:87:0f:e2:45:27:c9:f2:8d:75:62:d4:06:
         94:e1:b6:bd:56:f4:ce:a9:3d:dc:39:c1:f3:cd:1e:de:8c:9d:
         df:67:aa:3e:ed:d2:66:88:96:7e:2c:20:74:3a:22:84:e1:c1:
         31:77:4b:fc:cf:6e:be:69:4f:fc:60:b8:b3:2c:bc:51:fc:12:
         b2:69:6d:55:e2:96:25:e8:3d:eb:2a:56:ad:ec:55:3a:ee:fd:
         14:c1:e4:be:27:0a:aa:c4:a4:69:65:5f:ee:49:ba:e7:fa:6c:
         84:1b:12:9a:0f:f8:18:53:6b:6e:fd:a3:91:04:31:9b:79:b1:
         af:43:f0:db:d1:4d:13:cc:56:b0:e5:32:1b:e5:50:48:38:09:
         65:77:99:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:49:47 2026 by rpki-client