Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
File:                     ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json)
Hash identifier:          MHaZhURO0IJRn1DUZy8rERmNLbIDNQhCt22LUmGn6wE=
Subject key identifier:   6D:D2:77:35:5D:A8:9E:A2:17:62:87:09:A5:86:0E:62:CA:CC:B5:D4
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Certificate issuer:       /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial:       0268
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
Manifest number:          0255
Signing time:             Sat 13 Jun 2026 02:26:45 +0000
Manifest this update:     Sat 13 Jun 2026 02:26:44 +0000
Manifest next update:     Sat 20 Jun 2026 02:26:44 +0000
Files and hashes:         1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: dCfp7Ws39d5LEiBPA8J+TKG7CObKP/2WGTYCxrHaw+8=)
                          2: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: 4mVa0DqBaCflYNU9bhCT5eYUo2wiGhZvFPJW9PpsrbY=)
                          3: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: vqGdVaaDYf6gNLNH5VIBJ2NRjMzmVVMM9ASsA3cNz2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
                          rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
        Validity
            Not Before: Jun 13 02:26:44 2026 GMT
            Not After : Jun 20 02:26:44 2026 GMT
        Subject: CN=6a2cbfe5-a0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:9d:b8:d2:29:12:2f:5a:4f:38:27:b4:d0:
                    17:98:a1:88:31:ca:f2:62:16:52:38:80:7a:ae:a9:
                    97:05:4c:99:a9:27:5c:0c:26:10:60:27:eb:79:08:
                    fb:13:4d:20:48:df:96:e3:d5:ee:9d:95:81:88:6c:
                    0a:51:c2:98:ec:4e:fb:93:2f:5a:89:bb:02:71:76:
                    ba:35:91:09:a3:6a:f1:d8:6c:56:c1:04:e5:b3:ec:
                    83:af:eb:ce:98:e7:1d:c0:2a:a0:1f:28:eb:c0:dd:
                    02:c0:12:35:f8:49:c6:2c:f6:9d:8c:c4:b6:ae:fe:
                    ab:b8:6a:47:80:20:0a:72:8c:60:2a:23:b6:48:2e:
                    ed:9f:86:05:40:29:5f:31:35:7a:96:b8:e2:d1:ae:
                    4e:76:2e:05:98:09:fa:33:0d:a8:1c:78:1c:14:9e:
                    20:28:cd:5f:9b:d4:01:65:b9:5d:14:df:d1:18:9a:
                    a6:6f:3f:d4:01:92:3b:17:38:3c:28:ad:3f:21:4e:
                    a4:f0:f0:8e:15:7a:09:75:85:c6:e2:bf:e9:9d:11:
                    89:bf:13:ee:3e:0f:c8:51:f2:fc:c9:25:3a:3d:f7:
                    ba:19:f3:99:53:47:ca:01:f5:f2:42:01:38:62:00:
                    ce:ea:76:2f:52:be:d0:4e:5c:04:6e:ab:43:d6:8e:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D2:77:35:5D:A8:9E:A2:17:62:87:09:A5:86:0E:62:CA:CC:B5:D4
            X509v3 Authority Key Identifier:
                keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:35:2d:e8:27:98:b4:70:3b:db:07:ea:cd:cf:53:9a:65:ec:
         61:99:f7:28:70:6f:18:66:82:fd:c9:37:5d:d0:e3:99:dc:aa:
         ff:4c:65:a2:dc:98:46:01:48:f8:66:ee:d3:a2:47:f2:ef:c2:
         9e:0a:23:61:92:9c:94:c6:99:a7:d2:ae:14:95:a1:53:69:f0:
         19:1c:7a:71:22:76:61:1b:72:00:39:6c:79:08:8b:54:48:18:
         cc:b0:f4:bd:ef:fa:f7:ec:88:0d:b8:cb:de:c5:16:74:06:5f:
         47:13:48:41:a6:f8:07:26:62:65:c4:be:87:65:03:80:e2:eb:
         ad:eb:69:14:d1:9d:5d:c9:ef:76:eb:6b:c3:e3:33:0a:c7:bd:
         d2:1a:4e:a6:cc:51:d1:1b:88:e2:79:1f:a7:32:24:d1:72:02:
         92:6e:2e:23:d0:ba:c7:25:ec:aa:96:c1:95:ef:7f:25:f6:72:
         84:42:e8:e3:8b:21:76:3b:10:75:ec:37:75:5b:b4:48:3b:24:
         bf:45:09:d7:ae:1c:87:6c:ed:5a:e1:eb:a7:78:14:9f:d3:c3:
         68:2d:6f:90:e9:9b:b3:15:af:b0:3a:f5:ee:bd:0e:b0:79:39:
         76:ae:aa:d8:47:a1:4f:11:ca:f1:9a:ba:17:e2:6e:d6:2e:07:
         20:99:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:02 2026 by rpki-client