Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft
File:                     2cZrDkILkTQXPVU9FqoLFGt3R3M.mft (raw, json)
Hash identifier:          SXrQ0ygdzQa9D04p8FuoRPkZi96JfkFfZkQPqebhWEc=
Subject key identifier:   86:5C:97:6B:83:4B:F5:B6:18:BC:08:98:F7:86:78:AC:53:A5:01:09
Authority key identifier: D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73
Certificate issuer:       /CN=A91B9B0D/serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773
Certificate serial:       071C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft
Manifest number:          0713
Signing time:             Fri 12 Jun 2026 22:02:39 +0000
Manifest this update:     Fri 12 Jun 2026 22:02:39 +0000
Manifest next update:     Fri 19 Jun 2026 22:02:39 +0000
Files and hashes:         1: 2cZrDkILkTQXPVU9FqoLFGt3R3M.crl (hash: Z17Qhkudn764XXMETItYY2G5hMkgnHbHv7Ni1SwgEsY=)
                          2: E0147FC48AB811EB92252D18C4F9AE02.roa (hash: 8HuI6yxWa1nS2qzAi58P3BL+IKSitnw2yYjxmsq1lXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl
                          rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9B0D, serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773
        Validity
            Not Before: Jun 12 22:02:39 2026 GMT
            Not After : Jun 19 22:02:39 2026 GMT
        Subject: CN=6a2c81ff-a0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:92:dd:7d:7e:98:a0:5d:93:4c:58:ef:14:b4:
                    26:ad:5f:9f:9e:a3:38:f6:e5:bc:42:db:3f:94:df:
                    dd:1f:62:a9:81:ac:60:fb:ac:9f:6f:a2:4f:a0:a0:
                    f1:1d:f5:3d:ce:27:42:33:20:04:54:9e:65:f0:55:
                    a3:6d:69:88:86:34:4c:56:32:7a:6e:38:16:45:c6:
                    37:88:88:69:c0:39:b7:29:c1:10:af:3d:4f:9a:0c:
                    2a:aa:9c:50:f5:d6:81:68:0c:a7:6b:4e:6f:08:d0:
                    d7:e8:b7:0e:a5:09:42:1f:cc:af:4b:ed:1b:7b:c4:
                    5c:b4:7b:68:95:e2:cd:6d:40:94:21:b0:6b:17:b0:
                    61:68:b2:1b:72:e6:79:8f:08:98:f5:bc:c3:fd:b6:
                    4f:67:5e:df:00:47:d5:80:94:17:55:66:d0:71:88:
                    7e:48:69:20:b1:f2:1a:02:76:22:31:a8:a6:0f:ac:
                    58:6d:de:2d:ec:00:48:a0:7c:c3:42:98:29:94:62:
                    77:d0:d4:5a:f1:b8:a4:63:5d:ba:c0:4f:d9:5a:ea:
                    80:17:b5:f0:5d:26:3a:7e:df:bf:1d:ab:5f:c2:fa:
                    fa:19:35:72:40:f1:70:d6:13:42:cf:b7:d8:47:a2:
                    ba:48:64:35:4e:53:04:f7:17:d8:36:87:ce:c7:41:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:97:6B:83:4B:F5:B6:18:BC:08:98:F7:86:78:AC:53:A5:01:09
            X509v3 Authority Key Identifier:
                keyid:D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4b:90:17:36:9c:ab:5a:2f:0f:f9:9f:25:d0:2c:29:2f:fb:
         24:dc:64:ac:12:37:86:bc:00:d6:13:ec:6d:50:d7:cd:01:af:
         49:24:f1:e9:2c:38:e7:5e:4e:33:19:ee:19:9d:c9:6d:f5:f4:
         a4:88:ea:b3:c4:e6:a6:da:01:c2:0a:a1:4c:17:27:61:2a:f9:
         8b:49:9b:69:0a:e0:ed:da:20:c4:e9:e6:14:57:d5:f0:99:57:
         54:6d:fd:36:a8:2f:2d:8a:4a:06:07:12:cd:15:66:ea:d1:6d:
         dd:37:5a:b9:cd:c2:e0:24:56:96:74:34:59:6b:fc:6f:3a:98:
         f3:1a:b9:fe:fa:24:94:58:c7:aa:84:30:d3:da:ce:41:c0:2d:
         4d:d9:fa:8e:fc:8b:12:16:7b:8a:22:f7:b9:89:84:a9:3e:bc:
         db:6e:81:68:e1:f9:37:74:07:2f:41:4f:2d:05:51:4e:ff:46:
         30:24:0b:6a:cb:62:8c:f5:e8:8e:3d:1f:8b:34:68:a6:00:b2:
         3c:ca:19:6c:ff:2c:5f:c9:75:bc:bf:d7:ba:00:f9:6d:5e:8d:
         a1:9d:59:f9:91:c1:12:2f:11:b6:54:76:c9:34:c1:85:24:f6:
         fc:86:16:15:26:61:81:ac:d2:ef:9d:98:fd:b6:ba:c9:d4:a7:
         38:2a:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:31 2026 by rpki-client