Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
File:                     2YRcGequkJIocqDK_QUfFmFPhK8.mft (raw, json)
Hash identifier:          DEJW1ziM2h9Ta5IWl10lH7eyuxPqoUimYpSjDMVBJ1w=
Subject key identifier:   C3:C8:C0:A9:D7:40:A0:2A:B1:C1:C6:06:31:CB:E3:11:9C:D9:34:10
Authority key identifier: D9:84:5C:19:EA:AE:90:92:28:72:A0:CA:FD:05:1F:16:61:4F:84:AF
Certificate issuer:       /CN=A91C6BF0/serialNumber=D9845C19EAAE90922872A0CAFD051F16614F84AF
Certificate serial:       0EDB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YRcGequkJIocqDK_QUfFmFPhK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
Manifest number:          1127
Signing time:             Fri 12 Jun 2026 17:39:52 +0000
Manifest this update:     Fri 12 Jun 2026 17:39:51 +0000
Manifest next update:     Fri 19 Jun 2026 17:39:51 +0000
Files and hashes:         1: 2YRcGequkJIocqDK_QUfFmFPhK8.crl (hash: x9RVQCT2DJOoxdJtETqBOuOpOlL8AV+DWePpmMZ2Rw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YRcGequkJIocqDK_QUfFmFPhK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3803 (0xedb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BF0, serialNumber=D9845C19EAAE90922872A0CAFD051F16614F84AF
        Validity
            Not Before: Jun 12 17:39:51 2026 GMT
            Not After : Jun 19 17:39:51 2026 GMT
        Subject: CN=6a2c4467-9e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:0c:e7:e1:c0:3e:14:1c:fe:d6:b4:6d:20:
                    d6:37:2c:1f:c2:a8:d6:25:66:65:4a:bf:2c:99:b2:
                    98:16:2c:76:d7:bc:bc:94:7b:6f:cd:6d:31:bb:ff:
                    63:5e:b7:b9:16:fc:92:e4:36:72:f3:4a:7e:46:2c:
                    a5:d8:87:e5:42:8f:55:2f:70:3e:e7:87:89:2e:1c:
                    69:fd:7c:24:4c:58:22:19:37:75:ea:f2:18:11:e3:
                    b9:1d:54:96:85:e6:09:86:ed:07:5d:6f:b8:f8:38:
                    dc:65:f3:ae:95:b8:6f:a3:5e:e2:35:ac:1f:f6:78:
                    de:b4:35:07:ee:0e:a4:f3:f0:8f:5f:f7:c1:52:71:
                    be:6c:60:4d:b8:30:70:aa:9a:34:da:63:d7:2f:8d:
                    54:6a:d1:e8:cb:6d:84:f1:34:1d:93:2a:b8:f8:69:
                    5d:01:d6:2d:75:11:a1:c0:b7:a8:4a:aa:04:a7:d3:
                    00:04:ac:a9:37:d5:df:cf:d9:fa:9e:4a:44:16:ae:
                    d5:bc:5d:67:71:88:08:d4:96:c5:91:16:ed:30:58:
                    e0:90:ec:fc:5a:18:e6:62:00:b5:f1:16:a3:00:77:
                    25:52:4d:66:1b:01:df:56:c0:2f:23:8c:4c:d9:10:
                    89:4e:31:e9:11:60:0c:89:95:aa:7a:c8:9d:db:30:
                    a3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:C0:A9:D7:40:A0:2A:B1:C1:C6:06:31:CB:E3:11:9C:D9:34:10
            X509v3 Authority Key Identifier:
                keyid:D9:84:5C:19:EA:AE:90:92:28:72:A0:CA:FD:05:1F:16:61:4F:84:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YRcGequkJIocqDK_QUfFmFPhK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0e:d0:7a:a9:f7:2a:58:77:80:0b:30:e1:e0:fa:d9:fa:26:
         08:df:aa:a9:fb:21:1b:48:62:d6:06:a7:22:a4:f9:08:e8:50:
         19:62:b7:87:5e:d1:29:98:e8:76:c6:5d:6f:62:b2:a5:4b:59:
         a0:fc:c1:4e:0b:33:9c:66:bc:07:d8:39:b6:d5:e4:f0:00:c0:
         61:17:af:17:a8:85:d5:39:63:89:4f:c1:48:ac:d3:4b:79:d5:
         00:a3:49:bf:65:c3:c5:4f:59:0d:e7:87:00:d2:11:ca:1b:b3:
         a8:07:60:b8:8a:cb:82:55:eb:71:f8:eb:57:3b:ae:65:fc:52:
         a9:b8:5f:d3:5e:71:07:66:3e:50:1b:46:14:f0:18:9b:7a:14:
         3b:35:c7:de:3a:8e:8d:73:d3:7c:c6:98:15:92:42:ee:87:bd:
         19:e3:96:12:13:b8:4f:1a:32:e4:82:5b:3d:74:12:c7:65:e8:
         56:33:9c:8b:1c:54:79:f9:de:cd:df:ba:d3:75:c1:bb:3b:be:
         15:cf:5a:f3:2f:bd:70:af:b5:96:4b:45:f8:43:bb:4f:58:a7:
         83:db:20:7f:2a:42:1b:8b:6a:79:b6:0d:bf:4b:ae:21:54:36:
         09:5a:5b:b1:cb:7b:28:59:6f:4c:5f:75:84:a3:38:dd:b1:7c:
         23:87:f1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:22:59 2026 by rpki-client