Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
File:                     8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json)
Hash identifier:          RxhDa4c7cjN3RIMGd+5mG90K6eRTLZcpqPAHzY5DdOw=
Subject key identifier:   EA:37:6B:7B:6D:D3:AE:AD:2E:D7:29:9B:FD:E7:E1:02:71:D4:B4:90
Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
Certificate issuer:       /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
Manifest number:          51
Signing time:             Sat 13 Jun 2026 08:25:00 +0000
Manifest this update:     Sat 13 Jun 2026 08:25:00 +0000
Manifest next update:     Sat 20 Jun 2026 08:25:00 +0000
Files and hashes:         1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: fT3RSm2nyjskV1r8mts7490WW23OBZ+TiPDIs7sjAp8=)
                          2: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=)
                          3: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
                          rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
        Validity
            Not Before: Jun 13 08:25:00 2026 GMT
            Not After : Jun 20 08:25:00 2026 GMT
        Subject: CN=6a2d13dc-f6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:15:2c:7b:7f:09:e1:ef:35:79:4a:e2:35:
                    58:cf:b3:f9:92:e2:19:4b:a3:e3:ab:00:53:c0:ca:
                    8d:fc:99:d2:fe:e5:25:2f:6b:39:43:a4:bb:72:23:
                    e4:53:18:c5:7c:c4:9d:12:94:f3:1c:bc:02:c8:20:
                    a6:52:44:d3:3f:8d:0e:5d:39:ce:7f:e3:21:62:18:
                    c0:36:1a:dd:2c:0f:ef:04:f8:3d:d7:d2:3e:6e:4a:
                    40:71:c7:65:ca:9f:29:d3:aa:5b:e0:b7:2b:b1:a5:
                    e4:ee:84:c6:d5:d3:50:92:11:5e:88:af:2b:8e:92:
                    ae:ca:7c:ee:42:12:da:b1:5e:f8:8e:3a:82:08:c0:
                    b1:a8:a3:3d:d2:88:f1:ff:16:06:d4:98:1b:7f:eb:
                    3d:73:00:c9:20:3e:3f:88:32:80:b7:a5:40:48:c4:
                    dc:78:fd:5b:4a:4f:a8:9c:cf:25:6f:00:6a:6c:92:
                    2a:f6:5a:85:76:2b:6e:c1:72:84:4a:a7:9c:9a:2c:
                    72:45:a5:72:b1:53:d9:1f:d0:be:2e:09:3d:ec:14:
                    5c:76:2b:f1:47:45:63:6d:9f:e6:a2:31:af:1d:1a:
                    c1:d8:70:34:79:60:f3:4b:19:a0:9d:b3:6a:b8:c5:
                    e4:40:46:ff:13:9d:7e:86:ed:4b:db:e2:45:aa:7b:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:37:6B:7B:6D:D3:AE:AD:2E:D7:29:9B:FD:E7:E1:02:71:D4:B4:90
            X509v3 Authority Key Identifier:
                keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:9e:8f:a6:19:94:d6:c0:08:c9:2b:4c:a5:f2:bd:fb:4c:04:
         e9:5e:3c:4f:79:1e:d7:7f:47:c0:62:cf:21:6e:8f:bd:2f:3d:
         ef:48:00:98:1d:18:b3:d7:6b:71:1d:9c:61:61:ea:dc:38:fe:
         ce:f7:92:5f:b8:63:a4:09:b9:01:33:42:6f:77:1e:50:9a:94:
         9f:85:d6:a6:b1:96:91:96:65:ef:42:2b:7f:25:2e:f6:e5:df:
         6b:b2:8f:d5:f8:2a:44:0e:a4:01:29:d5:60:4d:75:0a:8a:a2:
         06:4e:bb:8f:17:17:b5:d3:d0:a8:ea:cd:70:52:d0:e0:46:5f:
         8a:2b:e2:71:50:e5:58:76:6d:ae:78:78:14:16:c0:d5:bc:87:
         44:ea:0b:57:12:c5:d7:ce:eb:01:c0:35:c5:2e:52:71:6e:1a:
         84:52:88:b8:c7:b5:8c:da:4e:50:e5:f1:33:e1:80:4f:2e:4b:
         9f:b4:6e:72:4b:f2:85:ca:3f:fb:8d:0e:b1:41:d3:d4:85:2b:
         f0:45:de:2d:18:c1:28:ff:cb:a0:db:22:46:00:61:b9:45:a5:
         3a:ea:ec:83:33:58:47:1d:8b:cd:92:43:c6:f4:43:b5:89:fa:
         ae:8a:23:6d:27:83:c0:d1:5f:ee:85:5f:5a:bf:89:87:d0:ed:
         42:37:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:38 2026 by rpki-client