Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File:                     7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier:          p1sb1nacRUIvs/zcG2btyzvayuAM0t+hhEXTcTkeQmI=
Subject key identifier:   68:F4:3F:B1:0A:AC:A4:1D:6E:49:60:8F:73:EC:23:82:27:CB:78:F5
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer:       /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial:       0BE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number:          0BD4
Signing time:             Fri 12 Jun 2026 19:02:28 +0000
Manifest this update:     Fri 12 Jun 2026 19:02:27 +0000
Manifest next update:     Fri 19 Jun 2026 19:02:27 +0000
Files and hashes:         1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: intdaGfwgtxNYwXvKHB2qB1FVgblvX034DOkjJ9Qsgc=)
                          2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: O+Nxart/msHPIUG+f5HL+a0YYfI1EPFP2HyqAxZNDXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3046 (0xbe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
        Validity
            Not Before: Jun 12 19:02:27 2026 GMT
            Not After : Jun 19 19:02:27 2026 GMT
        Subject: CN=6a2c57c4-f8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:5a:17:3d:c2:81:75:be:cd:3a:e6:3f:20:
                    f3:98:33:25:02:05:4f:31:a2:f5:29:8b:e2:9f:b2:
                    6a:d1:b8:f1:f0:3d:68:89:00:88:47:10:94:fd:4a:
                    06:73:d2:b5:85:57:91:40:86:06:16:84:f7:46:40:
                    0f:f7:e8:ae:d7:e6:24:ed:9e:4f:74:06:20:1b:9e:
                    26:9c:27:3a:77:1d:21:90:64:9a:9f:5b:73:54:ba:
                    22:84:ea:7d:dd:0c:1b:c0:ae:52:7b:59:43:8a:8e:
                    54:4f:b8:db:10:35:66:ef:53:c8:44:b7:b0:b4:bc:
                    33:ba:6f:b5:4f:93:16:80:a2:d4:bb:63:7d:3c:60:
                    d2:83:1f:69:4a:1c:17:03:a2:e7:0e:3f:75:ad:c9:
                    32:c9:83:38:f8:35:ec:c9:54:f9:42:d4:e2:90:23:
                    86:02:01:7c:e1:4b:bd:f9:aa:c3:79:0f:bd:56:d6:
                    a4:80:35:5f:b5:95:85:34:03:97:b7:1e:85:57:2c:
                    fe:92:d0:8d:36:7b:66:4c:5b:82:fd:67:37:50:b4:
                    37:a5:16:b8:68:8f:3b:0f:a7:cf:3b:72:b9:cf:4f:
                    d2:fe:9d:32:82:31:ab:6d:78:14:33:d6:2b:b9:4d:
                    4d:18:42:99:3b:27:d6:c8:b8:28:ee:28:b3:ad:43:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F4:3F:B1:0A:AC:A4:1D:6E:49:60:8F:73:EC:23:82:27:CB:78:F5
            X509v3 Authority Key Identifier:
                keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:d9:6d:00:cd:7d:2d:78:48:be:b7:3e:18:cb:e6:7f:1a:fb:
         c2:ac:b7:a9:f8:72:59:ee:f2:3f:e2:89:10:f2:04:bd:72:41:
         ec:b8:5a:24:15:1a:8b:23:cd:0c:2a:4c:8f:39:e5:1a:ba:08:
         d2:e8:c3:db:c7:f5:ab:a2:1d:f3:0c:c3:e6:21:07:22:49:01:
         b1:78:a4:60:8f:7b:41:15:11:45:a6:a6:42:b5:1d:bc:29:47:
         11:19:b8:8f:eb:8d:5c:29:c7:39:6a:46:00:d1:53:33:f3:fa:
         6c:bd:b8:d8:d1:57:12:cb:ad:aa:7b:cb:7a:42:2c:84:f9:d5:
         05:c4:a1:69:45:82:a7:e7:87:6f:36:e4:a0:b2:74:56:e0:4a:
         33:e9:27:ed:38:27:22:d1:f5:b1:e9:d3:0e:0c:84:7a:bc:7c:
         7f:3c:19:f3:0f:1a:df:3a:44:30:6e:a0:cd:9f:ee:a5:1c:55:
         c6:cb:8d:87:7d:65:cc:ae:88:95:5e:21:29:3e:21:7f:5a:d4:
         40:70:8c:43:8d:12:b6:82:31:e5:f8:c7:f4:9a:ce:49:aa:be:
         81:26:db:d5:d3:8d:eb:f1:11:8b:4b:75:de:44:7c:a9:db:c8:
         d9:a5:45:41:be:6d:19:ec:04:2b:38:56:a5:d9:42:88:82:7d:
         52:76:bc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:20:46 2026 by rpki-client