Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
File:                     du8ZOVeobWTTw83rngdGdG70KQo.mft (raw, json)
Hash identifier:          cy0sIu3y3mJiII9YkZxTcOZjR9BSPdvggEofoQOUdwk=
Subject key identifier:   1F:C4:63:12:48:F1:38:15:BA:02:6E:1B:1E:FE:3D:FC:FE:F1:E6:74
Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A
Certificate issuer:       /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
Manifest number:          01BF
Signing time:             Fri 12 Jun 2026 19:54:08 +0000
Manifest this update:     Fri 12 Jun 2026 19:54:07 +0000
Manifest next update:     Fri 19 Jun 2026 19:54:07 +0000
Files and hashes:         1: du8ZOVeobWTTw83rngdGdG70KQo.crl (hash: OW6tUAL8ZB+tdVPXagm1wVWeOYcuqshh3nwUk4EGZt0=)
                          2: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (hash: lwkdt0p18j+EGoMj/NlkIlwaZeWIUPoZjTEhgtn7WSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl
                          rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C40D6, serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A
        Validity
            Not Before: Jun 12 19:54:07 2026 GMT
            Not After : Jun 19 19:54:07 2026 GMT
        Subject: CN=6a2c63df-a579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:cd:a3:69:bf:f2:30:ab:d5:a5:da:18:29:
                    e2:62:3f:c0:18:74:38:fd:9e:4f:20:34:40:9d:48:
                    a6:92:3c:de:b3:4e:44:38:4a:78:dd:43:f7:77:c8:
                    0f:ac:46:8a:93:0c:bf:ac:7a:29:50:1c:77:98:0a:
                    ff:6c:05:6b:f5:bf:52:99:a0:6b:b1:30:bf:df:08:
                    e4:97:fe:9a:e9:e1:9a:19:ec:14:20:d8:1f:9a:f0:
                    d1:25:93:52:98:31:4c:11:5b:01:eb:8e:b1:7a:75:
                    eb:9c:66:1f:34:3d:c6:cf:a3:be:41:c2:aa:b2:28:
                    22:0e:06:9d:20:78:0c:a5:08:8e:0a:70:50:88:cf:
                    83:ac:a9:ca:13:60:b1:9f:ab:d0:19:ed:67:90:30:
                    fa:59:c9:60:0d:18:90:13:c6:e4:63:43:e1:1e:7c:
                    1f:4d:2c:7f:d2:ed:c2:be:57:03:af:84:89:74:f7:
                    75:79:e9:06:ff:10:53:df:04:d4:3d:de:76:c4:89:
                    dc:24:64:ab:7e:62:03:5c:52:e1:81:be:b5:a9:64:
                    c3:04:65:11:00:14:59:74:b3:2b:b7:d9:74:d7:10:
                    3f:8d:89:6d:e4:25:99:29:f1:7b:80:db:b0:87:25:
                    98:dd:97:7e:b4:db:92:7c:f2:0a:27:1e:d5:9d:9b:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C4:63:12:48:F1:38:15:BA:02:6E:1B:1E:FE:3D:FC:FE:F1:E6:74
            X509v3 Authority Key Identifier:
                keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1f:47:f3:7d:15:9c:58:dc:fb:06:4b:63:db:7e:d8:db:50:
         d9:a2:e4:aa:ad:cc:8a:94:cf:59:db:c5:be:68:a1:62:46:1e:
         e5:3e:70:c3:7f:81:19:4b:06:c6:5b:ca:69:1b:b6:ce:dd:b1:
         13:a9:1f:48:8d:f0:61:bc:aa:2b:9a:0b:61:14:01:4c:1b:c9:
         3e:c6:a1:d8:1a:56:c3:14:48:f7:01:7c:e1:e1:91:44:97:04:
         3b:2b:7c:0e:1c:38:fc:fc:fc:c2:4a:82:85:58:ec:cc:63:95:
         e9:7a:03:d1:6e:f8:ce:72:be:4d:ed:ae:bc:98:d3:ce:20:8e:
         94:b7:0a:06:9a:98:10:b0:61:c4:11:f8:bc:ce:d3:47:ff:88:
         ef:5c:f9:32:0a:d2:96:17:5b:46:c3:20:a2:e3:3f:6e:6f:03:
         54:60:53:01:d3:fc:e8:b6:3f:b5:07:05:b7:23:2a:a0:29:b2:
         88:d3:90:c0:2e:58:12:e8:f8:3d:4c:e3:0d:ab:97:e6:ea:4c:
         bb:a1:9a:7b:58:03:4e:2c:42:b5:0d:80:46:51:c9:83:13:d6:
         34:2b:0a:10:6f:0f:0f:58:5e:ab:dc:83:52:17:86:79:a9:6a:
         cd:62:9d:a3:b2:86:a9:e7:f1:fc:7f:e6:0d:a0:a4:b8:43:42:
         c1:0a:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:33:58 2026 by rpki-client