Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
File:                     Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json)
Hash identifier:          p+vRHuJ2WJ5UkbAKn67NHe71wNwxaXpYqGxNgx0jchw=
Subject key identifier:   96:3F:E9:90:B3:38:F2:0F:14:29:25:FF:57:02:2B:B1:F7:A1:F8:F0
Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
Certificate issuer:       /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
Manifest number:          0156
Signing time:             Sat 13 Jun 2026 05:03:40 +0000
Manifest this update:     Sat 13 Jun 2026 05:03:39 +0000
Manifest next update:     Sat 20 Jun 2026 05:03:39 +0000
Files and hashes:         1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: uELEHbyFY0vXsNgwWTnpMEnW2dlGrshodhReIIgmDZY=)
                          2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: xjdj17TdvEDkLf9+p3eEDDKwL+UFS4OGM0bjJjQEXIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
                          rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
        Validity
            Not Before: Jun 13 05:03:39 2026 GMT
            Not After : Jun 20 05:03:39 2026 GMT
        Subject: CN=6a2ce4ac-08e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:8a:a1:b2:26:c6:64:bf:6d:5d:4d:6b:0b:
                    4b:00:8d:9e:1c:50:3c:fe:66:95:69:10:76:82:5c:
                    1c:bf:81:d4:e5:77:cf:2d:77:c8:fb:80:df:f6:52:
                    3a:82:a2:29:c1:60:fe:02:6f:df:9b:91:a9:51:a9:
                    76:59:6b:80:44:e7:7e:e2:6e:2f:21:7c:11:91:c3:
                    ed:75:06:3b:a4:d7:7b:7c:87:42:12:73:53:41:af:
                    e8:1d:f9:6c:53:cd:44:d3:ac:a7:19:a4:82:ae:4b:
                    6f:0c:ef:67:50:75:be:77:e6:13:ff:8c:73:6e:9d:
                    cf:1e:e1:84:f9:b1:87:58:b2:9d:af:87:ce:f8:4f:
                    95:de:1f:40:b9:dc:1f:04:ba:51:57:58:f0:6d:29:
                    a6:f5:21:0a:00:e7:57:34:47:11:3f:62:cb:d1:03:
                    8c:1e:5a:fa:6f:c0:ab:ca:f7:b8:6a:07:30:43:d7:
                    6c:4c:45:a4:aa:35:09:17:84:8a:41:9a:1a:e3:0d:
                    fb:ca:6a:5f:2c:ae:b3:33:c5:ea:44:db:46:50:7b:
                    13:41:0e:be:13:35:99:ae:5a:2b:d1:8e:57:9d:05:
                    5a:ae:78:89:3c:fa:a9:e1:7d:d0:c2:8f:15:9a:1c:
                    f4:c4:c8:05:0b:a4:38:05:56:d7:6f:cc:a4:93:80:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3F:E9:90:B3:38:F2:0F:14:29:25:FF:57:02:2B:B1:F7:A1:F8:F0
            X509v3 Authority Key Identifier:
                keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:bc:a5:22:a6:b5:3b:7f:7b:d3:43:5b:9f:29:8d:ee:ae:e2:
         10:25:90:df:b4:8c:73:bd:3f:57:bd:06:ab:2b:b5:c0:37:cb:
         b1:44:88:26:c2:98:75:da:d2:cb:3a:d7:82:ae:3f:3c:20:d4:
         77:5e:a0:25:d4:8c:a0:f6:0d:07:64:37:7c:a9:af:fd:a6:c8:
         4d:97:65:eb:d3:3e:ff:cf:ac:41:02:ff:9f:1b:64:83:6a:63:
         61:81:b7:e8:7d:9b:76:3c:d7:5e:a2:39:94:c5:9e:9b:c6:e2:
         c9:df:19:14:4f:e8:40:55:2f:d0:d2:9f:5d:70:9c:a6:58:03:
         d8:ef:f7:1f:7e:79:de:ee:8f:d0:71:49:a9:6a:3f:22:76:16:
         4f:ff:00:31:c1:cb:9f:ea:b6:34:2b:25:e5:33:86:52:9e:d0:
         11:86:fa:6d:44:37:75:b6:aa:60:ae:05:c2:8d:b5:11:e6:21:
         83:82:c2:f3:91:77:e5:5e:8e:97:bc:6e:3d:53:f3:66:7d:6b:
         8b:d5:99:dc:d5:dd:5e:03:3f:30:d6:3d:2d:15:fd:3b:11:fe:
         bf:3c:f2:87:98:6d:68:24:80:c2:c3:e5:41:02:87:d1:05:da:
         4f:7b:ac:0e:16:65:57:5a:45:70:06:cd:6c:39:6d:97:a7:54:
         c2:5d:25:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY3M0IxMTAvBgNVBAUTKDE1Q0Y1MERCNTJCMEYxMkYxQTZFM0IzOTYzM0Q0ODJF
MDlDRkUzNUMwHhcNMjYwNjEzMDUwMzM5WhcNMjYwNjIwMDUwMzM5WjAYMRYwFAYD
VQQDEw02YTJjZTRhYy0wOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IuKobImxmS/bV1NawtLAI2eHFA8/maVaRB2glwcv4HU5XfPLXfI+4Df9lI6
gqIpwWD+Am/fm5GpUal2WWuAROd+4m4vIXwRkcPtdQY7pNd7fIdCEnNTQa/oHfls
U81E06ynGaSCrktvDO9nUHW+d+YT/4xzbp3PHuGE+bGHWLKdr4fO+E+V3h9Audwf
BLpRV1jwbSmm9SEKAOdXNEcRP2LL0QOMHlr6b8Cryve4agcwQ9dsTEWkqjUJF4SK
QZoa4w37ympfLK6zM8XqRNtGUHsTQQ6+EzWZrlor0Y5XnQVarniJPPqp4X3Qwo8V
mhz0xMgFC6Q4BVbXb8ykk4CV9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJY/6ZCz
OPIPFCkl/1cCK7H3ofjwMB8GA1UdIwQYMBaAFBXPUNtSsPEvGm47OWM9SC4Jz+Nc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi84MTJGMjEzNjVE
RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhTOGFianM1WXoxSUxnblA0
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjczQi84MTJGMjEzNjVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhT
OGFianM1WXoxSUxnblA0MXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtLylIqa1O39700NbnymN7q7iECWQ37SMc70/V70Gqyu1wDfLsUSIJsKYddrS
yzrXgq4/PCDUd16gJdSMoPYNB2Q3fKmv/abITZdl69M+/8+sQQL/nxtkg2pjYYG3
6H2bdjzXXqI5lMWem8biyd8ZFE/oQFUv0NKfXXCcplgD2O/3H3553u6P0HFJqWo/
InYWT/8AMcHLn+q2NCsl5TOGUp7QEYb6bUQ3dbaqYK4Fwo21EeYhg4LC85F35V6O
l7xuPVPzZn1ri9WZ3NXdXgM/MNY9LRX9OxH+vzzyh5htaCSAwsPlQQKH0QXaT3us
DhZlV1pFcAbNbDltl6dUwl0ltw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:25:44 2026 by rpki-client