Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
File:                     bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json)
Hash identifier:          xQUu5Exvg9p1TV2pSUrfGJUfb04sdILG9q9vbkYs+6w=
Subject key identifier:   19:09:48:2D:49:64:2F:B4:69:9C:08:DD:86:E7:6F:01:E5:5A:C3:B2
Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
Certificate issuer:       /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
Manifest number:          0195
Signing time:             Sat 13 Jun 2026 04:26:43 +0000
Manifest this update:     Sat 13 Jun 2026 04:26:43 +0000
Manifest next update:     Sat 20 Jun 2026 04:26:43 +0000
Files and hashes:         1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: pansmMZ/yn/Y+HpR9s2tD5BrHUjF226K6N7Hk6GFffI=)
                          2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: fTwgf/z1JlaZSIUWhcpYQ8BO2OuYl7hP0D0SmMwZrI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
        Validity
            Not Before: Jun 13 04:26:43 2026 GMT
            Not After : Jun 20 04:26:43 2026 GMT
        Subject: CN=6a2cdc03-5dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:e1:6e:72:c2:01:8c:f2:da:b7:f5:f1:eb:
                    32:2e:c4:38:1c:38:f4:9d:dd:27:20:cf:0f:30:c4:
                    12:cb:56:24:3c:a3:d8:b9:51:37:7f:70:a1:34:ce:
                    f8:f2:e5:75:60:a5:d0:3a:8d:ce:9d:32:36:97:8b:
                    1e:2c:bc:22:4e:f2:55:df:7e:b9:9f:01:9a:19:1e:
                    c0:3e:fc:0a:3d:12:e0:fa:cb:3d:5b:6f:0c:ad:83:
                    8b:11:1d:f1:e2:82:98:61:0a:69:22:ad:6e:ac:73:
                    62:ef:b8:72:19:94:31:d6:62:76:63:ff:8a:79:c3:
                    5b:c7:1a:a0:c1:02:62:35:23:29:fe:ca:95:45:ad:
                    44:83:a0:0b:2a:f0:fe:2a:cc:46:d9:63:6b:bd:4c:
                    f9:a2:42:7a:35:4b:1b:1a:b0:36:2a:fe:8c:f4:10:
                    63:cc:3b:b6:ff:00:08:90:0a:8e:c8:7a:d1:b0:4e:
                    bb:94:ae:9c:7c:ea:2a:e8:61:2c:6d:4d:bc:7b:4a:
                    d6:63:a6:af:6f:9f:d2:56:14:e7:ff:95:f7:5b:b9:
                    41:e3:ba:94:45:47:41:42:53:b9:b5:55:cf:b3:2a:
                    4c:8f:bb:89:e3:cd:3b:f7:b2:10:03:48:76:f1:90:
                    06:4b:e3:39:5e:a3:fa:43:84:16:60:30:a8:7a:46:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:09:48:2D:49:64:2F:B4:69:9C:08:DD:86:E7:6F:01:E5:5A:C3:B2
            X509v3 Authority Key Identifier:
                keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:85:0f:fc:02:2b:cc:ae:43:7c:b7:b1:f6:35:c7:15:61:8a:
         62:19:2f:44:4c:98:5b:6e:4b:10:8e:db:16:2c:90:06:b3:51:
         e5:30:bd:ec:e6:12:82:85:c7:a1:09:7d:c4:43:4b:86:0d:67:
         7e:3b:a8:a8:86:1d:ef:5a:d9:aa:14:30:f5:a0:4a:3b:d3:ae:
         5a:76:3f:0f:9f:28:58:cd:9f:d7:56:d5:87:98:a6:93:a1:13:
         27:3c:ed:4b:18:a8:50:10:1e:5e:eb:5e:8e:3f:23:27:94:67:
         13:0b:72:d7:7c:c1:b1:88:dc:a0:57:c6:86:07:55:bb:a2:a5:
         52:52:24:0c:1a:f6:df:03:ef:cf:9a:c8:b7:e0:1b:45:12:e1:
         20:90:46:fd:08:15:ca:84:f8:ea:3e:e0:27:09:58:88:a3:4d:
         bd:75:71:ef:f3:f1:4e:ff:42:49:27:40:ff:39:59:41:50:b1:
         ef:5a:3d:c2:79:d1:0d:c7:1d:85:8e:8f:c5:d0:78:ea:81:78:
         65:7f:8d:7f:6a:64:e6:86:5e:c5:84:fb:8a:52:3f:bd:87:11:
         05:22:8e:e3:96:6c:0f:20:4f:90:32:93:c2:a6:82:a8:5e:45:
         0d:24:3a:70:d1:60:4c:91:47:47:6d:42:1f:06:1a:be:a8:f2:
         24:65:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:19 2026 by rpki-client