Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
File:                     2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json)
Hash identifier:          t1S+CRHWHSLZNeMqhnm0kQQ1ruN3FReeVwO+unSDYVA=
Subject key identifier:   13:8F:73:26:75:A6:43:74:80:F8:3A:C7:C7:79:46:72:DD:40:83:8F
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Certificate issuer:       /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
Manifest number:          0192
Signing time:             Sat 13 Jun 2026 04:22:00 +0000
Manifest this update:     Sat 13 Jun 2026 04:22:00 +0000
Manifest next update:     Sat 20 Jun 2026 04:22:00 +0000
Files and hashes:         1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: I/mw0S40N34S7nX7TcYncYjr1KhY0uANXcYeVdrFzaU=)
                          2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: EFBskJYMHfJRXujHupPsFrdh1ToDlvL0xJdWDE7eAo8=)
                          3: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: i2+AU5JC1CnIuV2WebgbR1MhXzhp17jyG1HTb2dIKP0=)
                          4: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: EOqSQLbOPrsjZ56mAXCzCp42zP2pW/1hVyLkMumCHLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
                          rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
        Validity
            Not Before: Jun 13 04:22:00 2026 GMT
            Not After : Jun 20 04:22:00 2026 GMT
        Subject: CN=6a2cdae8-33e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:f2:b7:1a:4b:09:e9:8f:5f:67:f4:bc:9e:
                    0a:33:1f:d8:9e:52:77:27:67:e3:e6:de:0d:6b:3f:
                    46:12:b0:1e:4a:76:8f:21:56:87:52:89:2a:43:82:
                    0b:1b:3a:ab:80:f6:7c:59:1a:b7:44:fd:24:3d:e1:
                    ce:51:00:2b:96:ec:69:07:01:46:24:3c:50:4c:78:
                    b5:6c:9a:5d:4d:5f:5a:68:9a:0b:8a:33:38:af:09:
                    ce:9a:6c:fa:ed:69:12:43:f1:ff:70:49:3b:96:74:
                    2b:27:c6:8d:be:3b:15:ec:58:fb:66:9f:fc:dd:7a:
                    98:8c:55:9d:67:91:40:94:c7:42:a7:07:49:ec:f8:
                    71:c8:89:87:11:40:f8:27:5d:b3:36:21:10:93:f2:
                    fd:7d:4a:ff:80:5a:3f:17:c2:b1:b5:0a:66:7a:cb:
                    32:b0:cb:7f:0c:53:22:bc:42:71:06:4b:c2:9e:3a:
                    b7:a3:c2:5d:41:82:30:9f:33:44:d3:a1:b7:9b:3c:
                    3f:cc:27:f5:03:66:22:5a:a5:84:f7:fc:23:a8:71:
                    71:cc:86:c8:1a:2d:59:93:74:d2:6a:ef:d6:f9:29:
                    f1:6e:25:7d:30:86:a3:ae:5f:6c:87:dc:97:52:95:
                    e3:8d:94:e1:db:a8:e4:52:f3:9e:9e:2b:1d:63:e9:
                    53:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8F:73:26:75:A6:43:74:80:F8:3A:C7:C7:79:46:72:DD:40:83:8F
            X509v3 Authority Key Identifier:
                keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:73:87:86:b8:b0:46:78:6b:77:f0:ba:d6:71:fb:cf:b6:23:
         6d:05:d8:d0:a0:f2:1c:57:8c:29:22:aa:5a:15:71:87:af:5d:
         00:9f:13:93:82:53:d9:62:85:0b:a9:bc:72:c5:e0:3a:9e:a0:
         31:a7:a8:b9:25:3c:88:8c:38:90:15:9e:27:f8:33:98:78:5c:
         9d:8b:a7:68:26:07:0f:36:72:db:5a:22:e7:c3:98:b6:cd:77:
         53:df:e9:96:e9:ea:3a:ec:79:a8:9d:68:99:8b:f1:6d:fe:0e:
         42:a2:da:a1:f8:26:df:86:0d:fb:f3:1b:31:43:73:c7:9f:a6:
         0a:6e:3b:f8:3f:aa:ac:49:20:f9:28:0a:d8:03:13:10:d8:a5:
         4e:50:65:76:28:90:cd:5f:a7:27:2a:03:7f:6f:57:1d:47:45:
         27:a4:63:8d:ea:98:d8:98:48:f8:7e:09:eb:e5:23:02:88:3a:
         73:3a:e5:26:22:0c:9f:ce:f0:60:41:75:8a:f1:d2:d9:8d:0f:
         bf:a9:50:1f:50:ea:6a:57:a1:82:3a:bc:b6:a8:d2:b5:d8:35:
         b9:70:09:50:34:48:23:20:c8:d8:5f:92:62:a7:5f:6b:c1:d4:
         3e:1e:a8:f7:62:06:b3:c8:20:37:34:2c:02:ba:ed:cb:0e:f3:
         aa:ce:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:30:38 2026 by rpki-client