Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
File:                     W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json)
Hash identifier:          qg6EyPWP8Y25GwcnCw2pXBGLSY8IrcrJqD/1JmI242U=
Subject key identifier:   DA:D2:08:87:63:F0:BA:73:AD:BF:11:B3:58:29:DE:A2:E5:26:90:CB
Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
Certificate issuer:       /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Certificate serial:       0996
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
Manifest number:          098D
Signing time:             Fri 12 Jun 2026 20:02:49 +0000
Manifest this update:     Fri 12 Jun 2026 20:02:49 +0000
Manifest next update:     Fri 19 Jun 2026 20:02:49 +0000
Files and hashes:         1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: AgwvfguD/0KA4ckvUmDAJqB8YQ1/GVZaQkDYbvaQwcg=)
                          2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: jJBBqp0n1dcla2CfO5nioVw0ckuTS67twgXm6uBPlv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2454 (0x996)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
        Validity
            Not Before: Jun 12 20:02:49 2026 GMT
            Not After : Jun 19 20:02:49 2026 GMT
        Subject: CN=6a2c65e9-bd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4d:fd:c1:61:36:de:fb:34:3f:f8:68:1d:f4:
                    b0:f9:2b:08:68:66:db:68:a9:68:2d:c3:6e:50:4d:
                    c1:45:ec:61:14:00:0d:88:3d:5c:e2:cc:d7:f6:f2:
                    97:c5:b0:34:22:39:c7:59:6f:44:6a:a4:07:2c:e4:
                    6d:62:bf:63:52:9a:eb:d3:3c:15:2e:4c:df:a8:23:
                    f0:78:d3:f1:32:ff:9c:33:c8:e0:62:c2:ef:3b:05:
                    10:1c:04:22:31:1c:4f:07:fa:1d:05:3c:5b:7c:25:
                    59:37:2b:3d:c3:5e:2c:40:26:44:bc:d4:d3:ec:0e:
                    6b:fd:10:82:1c:bf:96:e0:6c:8d:23:a5:8a:c1:e2:
                    59:82:4b:2d:31:03:c5:ab:44:0c:50:a7:0c:f0:ab:
                    78:5d:5e:df:94:4b:9a:2e:63:99:00:b7:9e:ab:f8:
                    4d:c5:65:4a:c6:54:25:32:27:52:e3:33:32:8d:8a:
                    e9:f0:b4:de:15:fb:eb:11:5f:6c:91:77:6c:3c:6c:
                    22:86:c0:39:96:64:fa:39:61:0a:dc:dc:5b:84:76:
                    2c:dc:cb:df:1b:ff:12:6c:82:b6:5d:d6:b0:8a:cd:
                    d5:f3:2a:99:d8:1c:cb:09:1d:64:a3:6b:9e:b6:c9:
                    1d:5e:69:c3:e4:fa:1b:fc:41:52:60:10:1f:13:c7:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D2:08:87:63:F0:BA:73:AD:BF:11:B3:58:29:DE:A2:E5:26:90:CB
            X509v3 Authority Key Identifier:
                keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:58:44:ad:2c:64:14:f2:d0:01:83:25:1d:a5:5c:cc:f7:a4:
         91:cc:78:5f:7f:be:88:f6:25:45:fc:69:4f:90:e2:70:40:d8:
         46:11:e0:8f:83:9d:c9:3f:e8:b0:87:c7:4d:e8:f0:30:66:df:
         53:c4:f7:bb:fb:d7:19:4a:26:44:3d:7d:07:46:2b:82:4f:14:
         fa:74:fc:7e:0d:30:f5:10:da:1c:f9:da:12:b6:23:24:c2:2c:
         9a:75:9e:27:ad:55:95:37:ae:1e:c0:8a:4a:b3:8f:2d:dc:78:
         46:39:f4:07:ed:36:70:c1:ae:a1:a3:5e:bd:1b:71:a6:10:8f:
         ef:22:5f:93:44:cd:f6:a3:56:1e:9a:49:5f:9c:ac:c0:e0:2d:
         0d:69:1d:f1:b9:87:05:85:0a:25:56:8d:27:ef:b8:19:76:80:
         c8:71:a8:f3:dd:88:03:2b:96:ee:57:b0:e8:a1:d7:fc:ab:62:
         d2:48:7d:5f:bd:27:bd:58:8a:f4:cc:49:1f:41:5e:3c:23:cf:
         29:ca:ca:37:b5:53:d1:39:87:8b:33:5e:88:a9:c5:38:09:76:
         d7:1a:73:b7:f1:43:ac:4e:63:67:5f:29:3e:2f:2a:cd:94:b9:
         b8:60:58:cf:61:17:23:5d:39:89:72:7e:31:da:cd:24:aa:eb:
         47:f0:cb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:19 2026 by rpki-client