Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
File:                     7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft (raw, json)
Hash identifier:          DTnCg93XSh7SQgncJUTE3E+dqlMPIVuCRGZduQjGRP4=
Subject key identifier:   D7:8F:14:5D:C4:4C:E2:F4:EA:38:E4:A1:8C:C3:7E:D8:2E:B9:7C:AE
Authority key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C
Certificate issuer:       /CN=A91BAA24/serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
Manifest number:          D3
Signing time:             Sat 13 Jun 2026 06:50:33 +0000
Manifest this update:     Sat 13 Jun 2026 06:50:33 +0000
Manifest next update:     Sat 20 Jun 2026 06:50:33 +0000
Files and hashes:         1: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl (hash: toTqCfiR3CpH34rUs2y3hToL0lAh3+lM1hdM0+nZMII=)
                          2: 28C2D6002BCB11F0A99C1E60C4F9AE02.roa (hash: wZY9Z53hRF1cqshdzTDBoy+lSHOx94QEX/gy6wO+8wM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl
                          rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
        Validity
            Not Before: Jun 13 06:50:33 2026 GMT
            Not After : Jun 20 06:50:33 2026 GMT
        Subject: CN=6a2cfdb9-4637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:c2:c8:b3:fc:bb:1c:b3:db:47:8d:e4:a0:
                    6d:95:4b:df:7a:72:06:fb:10:96:15:13:c1:84:08:
                    9e:04:a9:f1:ca:3e:0c:6b:a5:9e:5a:70:07:8d:45:
                    09:3c:00:98:3c:d3:bc:f9:8c:48:1f:f9:d2:5a:40:
                    96:b7:c4:77:da:94:c7:ea:73:a0:3a:30:e6:88:66:
                    ae:d8:43:58:35:68:70:6b:bf:56:7f:11:eb:3e:46:
                    62:94:87:c1:e7:07:8a:59:46:3e:8c:0a:d8:d3:86:
                    2f:14:60:f1:b8:aa:f7:1a:9e:35:8c:32:b8:28:df:
                    03:a0:42:92:a2:f3:5c:9a:1b:3d:08:1e:2c:c7:31:
                    f5:9a:c6:5b:48:8f:77:47:51:1f:34:09:bc:18:e0:
                    75:c4:ff:f3:03:42:f9:61:a2:c3:ce:27:01:d8:ff:
                    26:b1:a1:c8:da:c5:10:ee:08:41:8e:9a:53:b5:78:
                    9c:96:0f:d2:4e:52:bf:d9:82:48:cc:00:5f:8c:3a:
                    2a:60:69:13:08:d7:d9:ca:a7:63:29:70:b9:f4:c7:
                    f6:9d:1d:2c:5b:dc:3d:48:42:ee:d9:95:84:f2:3e:
                    fe:7d:5c:1c:df:4d:fc:c2:4f:1e:b5:d9:d2:75:ed:
                    d8:ac:40:dc:c0:aa:a2:0b:ee:38:5b:46:0b:9f:c9:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8F:14:5D:C4:4C:E2:F4:EA:38:E4:A1:8C:C3:7E:D8:2E:B9:7C:AE
            X509v3 Authority Key Identifier:
                keyid:ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:8d:a6:12:75:20:80:b2:31:71:cf:c5:b1:38:ec:f9:98:2a:
         a3:b7:ee:76:00:12:50:22:87:8f:a8:6b:c8:14:c0:b6:1b:5f:
         dc:2c:72:f3:00:29:ae:9b:eb:a3:e8:36:f5:ad:6d:a3:c1:68:
         ec:6d:db:2e:39:d5:f6:4e:8b:6d:4e:9e:d9:5e:3e:c3:b7:68:
         0f:d3:cf:b8:5e:f7:62:77:7b:7b:78:24:14:d3:cf:3c:71:0b:
         56:d4:03:cd:31:88:a7:72:64:0b:4d:32:6b:a7:93:0e:24:d1:
         49:71:5f:f3:a8:ec:8b:7e:1a:fc:44:8b:cd:63:87:7e:f5:6c:
         b7:fc:8c:12:88:1b:a8:4b:b4:20:bd:29:1c:13:09:a5:6d:5e:
         00:99:07:0b:d9:a9:a6:71:26:18:4f:75:7d:c1:4a:94:c1:e4:
         69:5c:54:b3:62:3e:e9:9d:e4:5d:28:0e:89:22:af:e9:0d:74:
         1e:09:de:f3:6f:1d:95:ec:86:5b:aa:0a:dc:f6:42:40:75:16:
         e6:cd:70:03:7a:11:1e:bf:fd:08:9d:22:5d:1e:30:c1:41:24:
         2f:36:eb:a0:e5:0f:9a:02:3f:dc:1e:ac:16:0b:62:e7:06:4a:
         6b:ae:0c:98:4a:32:62:df:89:6b:47:b4:7b:30:a2:fd:50:dc:
         3b:fc:96:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFBMjQxMTAvBgNVBAUTKEVENzJDNzE2QkMwQUY1OUQ0MzA2MzIzRkJBQTQ3NEJE
NEI0REU3MUMwHhcNMjYwNjEzMDY1MDMzWhcNMjYwNjIwMDY1MDMzWjAYMRYwFAYD
VQQDEw02YTJjZmRiOS00NjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAspfCyLP8uxyz20eN5KBtlUvfenIG+xCWFRPBhAieBKnxyj4Ma6WeWnAHjUUJ
PACYPNO8+YxIH/nSWkCWt8R32pTH6nOgOjDmiGau2ENYNWhwa79WfxHrPkZilIfB
5weKWUY+jArY04YvFGDxuKr3Gp41jDK4KN8DoEKSovNcmhs9CB4sxzH1msZbSI93
R1EfNAm8GOB1xP/zA0L5YaLDzicB2P8msaHI2sUQ7ghBjppTtXiclg/STlK/2YJI
zABfjDoqYGkTCNfZyqdjKXC59Mf2nR0sW9w9SELu2ZWE8j7+fVwc3038wk8etdnS
de3YrEDcwKqiC+44W0YLn8mVFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNePFF3E
TOL06jjkoYzDftguuXyuMB8GA1UdIwQYMBaAFO1yxxa8CvWdQwYyP7qkdL1LTecc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUEyNC8xNzM5QzM1QTJC
QzkxMUYwQjhCRTNGM0JDNEY5QUUwMi83WExIRnJ3SzlaMURCaklfdXFSMHZVdE41
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdYTEhGcndLOVoxREJqSV91cVIwdlV0TjV4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUEyNC8xNzM5QzM1QTJCQzkxMUYwQjhCRTNGM0JDNEY5QUUwMi83WExIRnJ3Szla
MURCaklfdXFSMHZVdE41eHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiY2mEnUggLIxcc/FsTjs+Zgqo7fudgASUCKHj6hryBTAthtf3Cxy8wAprpvr
o+g29a1to8Fo7G3bLjnV9k6LbU6e2V4+w7doD9PPuF73Ynd7e3gkFNPPPHELVtQD
zTGIp3JkC00ya6eTDiTRSXFf86jsi34a/ESLzWOHfvVst/yMEogbqEu0IL0pHBMJ
pW1eAJkHC9mppnEmGE91fcFKlMHkaVxUs2I+6Z3kXSgOiSKv6Q10Hgne828dleyG
W6oK3PZCQHUW5s1wA3oRHr/9CJ0iXR4wwUEkLzbroOUPmgI/3B6sFgti5wZKa64M
mEoyYt+Ja0e0ezCi/VDcO/yWEw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:56:19 2026 by rpki-client