Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
File:                     SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json)
Hash identifier:          HI9lW2aobGFd58LOf2vUU/CAPDQ30iIHMyy7mDs8MPY=
Subject key identifier:   8F:4C:8E:9B:31:93:D8:D7:C9:A8:FC:9D:D2:7D:1A:1B:A2:D5:4D:28
Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
Certificate issuer:       /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
Manifest number:          6A
Signing time:             Sat 13 Jun 2026 02:30:16 +0000
Manifest this update:     Sat 13 Jun 2026 02:30:15 +0000
Manifest next update:     Sat 20 Jun 2026 02:30:15 +0000
Files and hashes:         1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: 2vP22WLQLrDQPb6w20O7cyX86ud2bYP/GmcdeDfLZRk=)
                          2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 3OV5G0MzOx3A7cffbPL2mxy1J9i86/E4uGYCDCcUs/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
        Validity
            Not Before: Jun 13 02:30:15 2026 GMT
            Not After : Jun 20 02:30:15 2026 GMT
        Subject: CN=6a2cc0b8-e416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:29:73:23:4c:f3:6f:4a:07:90:f7:1b:b6:45:
                    97:be:c9:25:4f:8b:98:9e:9f:a0:d5:cb:01:8c:c8:
                    6e:aa:69:29:4e:fb:1c:9b:5e:a4:5f:d8:c1:69:77:
                    a1:eb:58:00:28:58:5a:de:0f:ea:1d:7e:82:45:a1:
                    da:07:d6:d7:0a:dd:1f:18:b5:85:dd:1e:84:d4:f7:
                    d9:c5:c9:e5:a6:4a:00:c6:c7:72:4e:99:20:da:19:
                    99:d5:66:c2:ca:6a:66:ab:84:6d:78:f4:cb:6e:98:
                    f4:be:d7:a7:ba:e3:ca:cb:de:35:13:2c:8a:52:27:
                    24:ce:ce:09:3b:83:41:5d:6a:00:d0:03:4c:28:00:
                    5d:88:9b:36:bd:18:3a:df:f1:01:55:83:4c:9a:7f:
                    49:51:5c:c0:96:f3:7b:c3:bd:2f:cc:83:ef:d5:cc:
                    61:4a:b4:49:87:73:3f:8d:ef:74:db:e9:f0:bb:fc:
                    30:45:4d:1d:04:e5:8a:82:59:f2:3f:7e:21:a1:89:
                    fa:f2:91:7f:c9:3f:f9:38:60:17:cf:85:b1:aa:f5:
                    68:ca:18:66:f1:16:eb:81:55:7a:39:8a:4a:73:a0:
                    57:24:ba:aa:30:59:da:3b:33:9e:f7:d5:56:f4:d4:
                    5e:5a:1e:d2:c5:40:0c:2a:fa:de:53:2c:ad:c6:c1:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4C:8E:9B:31:93:D8:D7:C9:A8:FC:9D:D2:7D:1A:1B:A2:D5:4D:28
            X509v3 Authority Key Identifier:
                keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ff:b3:e5:c9:6c:c6:fa:03:a9:d9:06:d8:92:e6:71:91:f4:
         fb:32:f5:da:1d:c5:0a:0b:a3:79:52:75:46:62:6f:86:9b:6b:
         57:cf:85:a8:0f:ea:b0:d3:0f:26:fc:f5:24:d9:a1:c7:6b:f7:
         05:3c:96:e7:34:0c:c3:52:64:cb:07:e9:2f:7a:31:ee:3b:6c:
         2a:33:ed:ef:74:bc:25:8a:57:e1:49:98:61:99:10:b7:5e:86:
         f2:bf:d6:4a:ba:9a:cf:36:84:5e:b7:c4:5d:d4:a4:0a:9e:ff:
         f3:11:c4:db:e8:59:d0:82:0a:e4:be:5f:7c:7e:0b:d2:39:2b:
         f6:b7:cb:e9:83:9b:c2:b6:c7:eb:73:ba:0f:14:67:04:21:19:
         a6:77:aa:8a:7a:e0:16:69:f1:e4:b9:9d:c1:3e:c7:16:2f:62:
         8e:b9:25:11:c9:3c:2d:66:8f:2d:cb:1c:12:c4:65:1c:2e:d7:
         c8:70:03:be:76:01:32:07:83:1d:49:4c:c7:18:9e:04:82:52:
         8d:e0:91:11:2d:d0:59:5e:cd:32:70:07:47:7b:b0:ca:53:ab:
         5c:7e:fa:41:b5:91:08:11:30:15:7f:b6:22:c9:8a:62:d1:ff:
         82:44:e6:d7:73:98:b1:ba:40:4f:76:f8:c1:ac:19:53:38:7a:
         15:c1:bb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:19 2026 by rpki-client