Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
File:                     2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json)
Hash identifier:          3ICMwlgNFG2i6BpUTZsExYdpQcURTT5GgPwzE/Wea9w=
Subject key identifier:   23:D8:E6:B2:C1:0E:77:60:64:F6:B5:49:03:2F:A9:2F:36:F0:39:3F
Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
Certificate issuer:       /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
Manifest number:          026C
Signing time:             Sat 13 Jun 2026 02:30:13 +0000
Manifest this update:     Sat 13 Jun 2026 02:30:13 +0000
Manifest next update:     Sat 20 Jun 2026 02:30:13 +0000
Files and hashes:         1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: VqGzp7DP4uoZtXWpbWQhVK/w7SV5bapMjBaS+UjAMS0=)
                          2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: TG2ohJNYEaDsDYNDfYYhx+nUq/BWPbtnOzSvkzV8QmA=)
                          3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: 8KKDSMBlMVX3WIkFvdZMkpRJGKyqonScIIf8lT6mmuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
        Validity
            Not Before: Jun 13 02:30:13 2026 GMT
            Not After : Jun 20 02:30:13 2026 GMT
        Subject: CN=6a2cc0b5-090b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9f:97:7a:d2:da:5e:98:32:c1:4c:2b:6e:b9:
                    46:4d:10:56:ed:b8:69:a4:b1:3a:74:65:90:a8:ab:
                    c9:04:3e:54:b7:27:74:d2:61:25:73:c0:37:ef:28:
                    88:5b:ac:03:84:b6:6f:f4:b9:78:2e:ee:ee:f7:26:
                    6f:9a:f0:06:78:d3:86:7b:25:25:5d:a6:fc:bc:ca:
                    41:09:6e:27:0a:be:bb:6c:dd:fc:a3:be:20:30:7c:
                    f1:74:a0:b0:4d:de:51:bf:14:66:1f:21:06:c5:c7:
                    63:31:3d:04:4b:74:e6:87:fe:b3:7a:19:0e:45:71:
                    05:4c:51:3c:71:95:81:15:86:10:42:bf:03:8f:aa:
                    e1:76:7b:21:4b:b5:5a:b6:22:96:b0:56:dc:12:8f:
                    c0:dc:67:5c:3a:f8:13:dd:ba:1b:0e:c4:ab:d6:8c:
                    bb:3d:92:c3:2a:a6:c0:5a:47:0e:f0:a4:55:8a:30:
                    a2:db:ba:ea:51:c1:13:a2:26:ca:dc:4a:52:cb:1f:
                    71:91:ac:19:5f:d4:82:a9:b3:43:a1:16:f6:c6:86:
                    f8:78:56:38:32:5b:57:10:be:66:39:9d:c3:9f:1f:
                    96:04:53:ee:5c:b1:03:4d:8f:07:c4:93:fd:52:2a:
                    5b:54:ae:8a:6c:b8:76:77:e4:e5:89:c7:b2:90:66:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D8:E6:B2:C1:0E:77:60:64:F6:B5:49:03:2F:A9:2F:36:F0:39:3F
            X509v3 Authority Key Identifier:
                keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:69:65:6c:b7:6b:39:4c:5a:20:90:fa:e8:c6:d4:2f:fe:4a:
         e0:77:6a:ac:ae:b9:93:21:bd:79:26:67:f9:05:f8:b3:b8:65:
         db:c4:3a:fb:e2:9e:f4:14:4e:72:1b:4d:22:b8:4b:86:f7:8b:
         ce:38:ae:10:7e:1d:bf:bd:ae:63:9d:c8:27:02:94:37:0d:ca:
         c8:18:22:f6:07:64:9e:c8:45:88:7d:8b:7a:bf:3a:0d:65:23:
         50:f5:e5:25:53:08:db:1c:86:e4:5d:83:25:7b:a7:b0:61:9b:
         de:b1:f6:5f:fb:8e:73:ec:b7:61:de:b2:f8:ef:8f:7b:a8:49:
         32:30:ce:41:64:27:73:6d:60:3b:d4:23:15:59:41:35:d1:a9:
         b1:ae:8e:3f:cf:28:4e:f3:aa:90:2b:c5:89:84:71:d8:43:c6:
         93:d5:b8:bc:bd:b8:da:7b:a5:41:e2:d6:6e:17:59:b3:6f:27:
         18:bf:7c:03:e3:35:bc:84:6c:ae:04:0c:e0:0c:63:1d:61:6e:
         44:3c:00:54:47:32:4e:a9:f4:60:4c:03:b3:ad:80:6a:88:e4:
         3d:00:84:c0:ab:85:1e:66:68:13:cb:81:d6:e5:4c:71:f2:80:
         f4:16:3e:00:27:bf:80:75:e7:83:63:66:6b:d4:00:5b:7e:a8:
         2b:10:43:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC
NjQ0MTM3MTcwHhcNMjYwNjEzMDIzMDEzWhcNMjYwNjIwMDIzMDEzWjAYMRYwFAYD
VQQDEw02YTJjYzBiNS0wOTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtp+XetLaXpgywUwrbrlGTRBW7bhppLE6dGWQqKvJBD5Utyd00mElc8A37yiI
W6wDhLZv9Ll4Lu7u9yZvmvAGeNOGeyUlXab8vMpBCW4nCr67bN38o74gMHzxdKCw
Td5RvxRmHyEGxcdjMT0ES3Tmh/6zehkORXEFTFE8cZWBFYYQQr8Dj6rhdnshS7Va
tiKWsFbcEo/A3GdcOvgT3bobDsSr1oy7PZLDKqbAWkcO8KRVijCi27rqUcEToibK
3EpSyx9xkawZX9SCqbNDoRb2xob4eFY4MltXEL5mOZ3Dnx+WBFPuXLEDTY8HxJP9
UipbVK6KbLh2d+TliceykGaL1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCPY5rLB
DndgZPa1SQMvqS828Dk/MB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4
N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq
SGY3UnhDcnZVVVMyUkJOeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABWllbLdrOUxaIJD66MbUL/5K4HdqrK65kyG9eSZn+QX4s7hl28Q6++Ke9BRO
chtNIrhLhveLzjiuEH4dv72uY53IJwKUNw3KyBgi9gdknshFiH2Ler86DWUjUPXl
JVMI2xyG5F2DJXunsGGb3rH2X/uOc+y3Yd6y+O+Pe6hJMjDOQWQnc21gO9QjFVlB
NdGpsa6OP88oTvOqkCvFiYRx2EPGk9W4vL242nulQeLWbhdZs28nGL98A+M1vIRs
rgQM4AxjHWFuRDwAVEcyTqn0YEwDs62AaojkPQCEwKuFHmZoE8uB1uVMcfKA9BY+
ACe/gHXng2Nma9QAW36oKxBDxg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:28:01 2026 by rpki-client