Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
File:                     JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json)
Hash identifier:          uBMoK+fRlQuV0ZdwmHs8Gw9kzUkDlcUGMQBlHd2n0D4=
Subject key identifier:   34:FD:E3:6A:2B:C8:A5:47:96:01:E7:FF:4C:61:18:0F:6D:D8:B5:5A
Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
Certificate issuer:       /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
Manifest number:          01D6
Signing time:             Sat 13 Jun 2026 03:39:11 +0000
Manifest this update:     Sat 13 Jun 2026 03:39:10 +0000
Manifest next update:     Sat 20 Jun 2026 03:39:10 +0000
Files and hashes:         1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: 4lsYDdUHmnsR4OUMzG56MYrp2VXXGlJ/eMZ0uAF1XfM=)
                          2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: 4YSK+iaPKx3acIazhk09lsImhU6+yUHomcj+4pCQSC4=)
                          3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: UpXQLmw7cYNYgQoy2FdAYqD1shDQWt+tw0L6PWQgH4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
                          rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
        Validity
            Not Before: Jun 13 03:39:10 2026 GMT
            Not After : Jun 20 03:39:10 2026 GMT
        Subject: CN=6a2cd0df-2e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f7:b7:d2:ce:98:45:9c:e4:73:38:cc:b9:07:
                    77:c8:c1:16:1f:f3:d2:c6:66:29:13:69:be:f5:5a:
                    d5:1e:ec:76:70:77:9b:1c:e0:d9:0e:28:fc:1e:fc:
                    70:43:cf:f5:83:f9:88:e3:e7:d4:f0:4e:7c:98:ee:
                    d3:52:10:e0:5f:d3:64:84:ea:61:03:83:d8:f8:44:
                    cd:27:92:e5:89:79:29:64:55:b1:c4:f1:c3:79:3c:
                    ad:d7:dd:29:1b:f8:0b:3e:5d:1f:7c:06:03:ca:30:
                    17:cc:27:38:fb:9a:37:0a:c5:54:52:b7:5a:70:4a:
                    2d:0a:ee:a8:ad:20:43:ac:15:eb:48:80:7e:44:e0:
                    f0:fc:89:78:89:9c:5b:66:ef:71:64:0d:32:ca:3f:
                    9d:84:cd:0b:42:33:2d:cc:3b:91:16:9c:03:27:3f:
                    01:d9:8f:4f:e3:b9:eb:b7:f8:ab:72:a4:56:9f:a7:
                    75:41:82:c0:6c:82:c6:01:a5:6c:42:5a:22:0a:2b:
                    c1:7b:b3:b6:61:46:b3:01:1c:27:e0:42:82:ca:7b:
                    12:06:3d:2a:88:58:2f:f8:d4:0b:7b:66:de:a1:e7:
                    1f:2c:42:5a:8b:7e:8a:87:a6:4c:a7:ae:2b:ff:b3:
                    b3:8d:1b:62:64:77:9b:f3:4d:2d:b8:d5:2e:ff:15:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FD:E3:6A:2B:C8:A5:47:96:01:E7:FF:4C:61:18:0F:6D:D8:B5:5A
            X509v3 Authority Key Identifier:
                keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:68:1d:53:c8:9c:64:09:d2:82:08:e5:6f:8f:0f:3f:f4:79:
         bc:b0:af:45:47:d4:7c:7f:c8:82:3a:99:e1:cc:83:17:9b:11:
         75:67:fa:9b:fc:ca:d5:42:63:12:10:5a:f5:91:47:31:1b:21:
         5d:66:0e:5b:40:41:ce:5a:58:9d:7b:b2:be:97:5f:4a:0e:e7:
         7c:d1:d1:6e:d6:e5:dd:3f:0a:87:ea:a3:f0:f3:ae:dd:4e:7d:
         d0:47:ea:c6:a8:41:3d:ad:04:ea:ce:ae:02:46:6f:cb:bb:5a:
         79:a6:0a:7f:d1:7a:7f:ed:e5:61:b1:1a:32:1c:79:3f:e6:d6:
         09:ff:54:51:40:39:20:71:63:95:06:50:4c:34:6e:63:0e:6a:
         dc:74:cc:c9:dd:ca:12:ca:d3:b4:6d:df:21:e8:d0:40:13:3e:
         60:8d:55:ed:18:26:14:b1:e4:27:61:f8:9b:ba:91:0c:f3:c7:
         fa:5d:90:43:dc:37:01:e0:3c:39:69:c0:37:4a:e3:a8:fa:83:
         92:bb:36:da:32:20:35:98:20:cb:ed:9c:d4:70:0a:0b:47:cb:
         8b:2a:14:43:37:ba:c1:b5:5b:95:5d:96:3c:d5:73:e0:25:fe:
         50:43:96:73:91:e5:4b:c9:bb:47:72:1b:78:e8:0e:a4:6b:78:
         11:c0:e1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:49 2026 by rpki-client