Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
File:                     nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json)
Hash identifier:          zJr1UXce/LAsYsCDOV0prD+Bj0OVBqv4lJT6jBxKZn4=
Subject key identifier:   F6:B2:69:48:55:DE:6A:DB:7D:89:8A:30:AF:4B:AC:3D:B3:F8:9B:A9
Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
Certificate issuer:       /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Certificate serial:       0E02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
Manifest number:          0DE6
Signing time:             Fri 12 Jun 2026 17:50:19 +0000
Manifest this update:     Fri 12 Jun 2026 17:50:19 +0000
Manifest next update:     Fri 19 Jun 2026 17:50:19 +0000
Files and hashes:         1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: e9+YSB2Zog2p3og5vfrCjuEcGHdAnbxB5l+znZL3c2g=)
                          2: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: /XXsn5P+CzGOi6w4JWRUAkj1a3bzJJfkjs3Rtf98gFg=)
                          3: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: CG6vYgZ1e3/8dZN64pHrnStSPG3URxAwT0J40lVEYis=)
                          4: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: z7n2Ro4Gkp0kvswymZ3NmSJNOHu0kHCX/BYv3spailI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
                          rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3586 (0xe02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
        Validity
            Not Before: Jun 12 17:50:19 2026 GMT
            Not After : Jun 19 17:50:19 2026 GMT
        Subject: CN=6a2c46db-d253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:68:3d:7a:8c:a5:b2:6f:19:24:0c:d9:15:
                    99:1e:84:1b:e7:db:8e:32:f8:b8:b5:4b:5c:36:aa:
                    c0:78:61:84:c5:96:01:88:28:a3:0a:3a:3f:42:ed:
                    54:c7:00:89:2d:23:5d:8d:5c:a7:cf:d7:c2:42:6c:
                    aa:06:d7:12:64:b3:5c:d4:13:ff:b8:21:3f:8f:ce:
                    6b:a7:77:96:c9:a1:9c:27:1f:1c:cf:1c:d0:8a:ab:
                    f5:2a:1d:2b:5a:d5:05:a0:cc:4b:b1:1c:18:18:68:
                    46:b3:ef:0b:3f:99:04:f1:74:03:ec:de:11:26:40:
                    4e:d3:dd:30:68:df:2a:34:d9:7d:d0:01:2e:b2:9e:
                    d3:0a:7d:d4:90:50:03:ff:e2:53:20:ea:29:32:7e:
                    49:50:8d:e7:f7:09:46:35:a4:af:23:28:d8:cb:eb:
                    5b:c9:b0:89:57:3b:a1:46:bb:4c:97:e3:4a:9e:57:
                    bc:2e:20:38:e8:c8:60:ce:dd:c6:c4:86:63:e4:fe:
                    67:2a:a0:59:79:05:29:70:f8:6c:69:c0:a8:35:dd:
                    c0:ba:d2:cb:68:b4:b2:e3:c2:0c:86:f4:55:da:1c:
                    49:48:e3:6e:3b:b4:93:a6:bb:04:a5:58:20:d2:54:
                    58:ae:44:65:4e:42:10:7b:8a:ce:51:f1:ab:52:20:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B2:69:48:55:DE:6A:DB:7D:89:8A:30:AF:4B:AC:3D:B3:F8:9B:A9
            X509v3 Authority Key Identifier:
                keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:e6:2f:e6:47:c7:00:df:f5:13:b8:51:2b:bb:90:ee:52:
         82:8f:6b:7e:32:36:2b:ab:e8:a0:a0:c7:e7:67:84:e0:19:3b:
         59:6d:b5:22:90:2c:21:cb:4f:0d:bb:5d:e3:c4:9e:f1:bb:aa:
         c3:dc:fe:57:e2:35:da:69:a6:eb:1c:9a:0d:f5:9d:02:46:01:
         86:d0:07:a1:7c:db:ea:86:df:47:bb:1b:eb:ff:ad:26:da:bd:
         53:2f:d8:ad:82:23:e0:8c:d2:d0:ca:46:99:43:7c:ee:72:ca:
         50:ca:e5:3f:81:f4:08:32:d4:80:c3:27:69:30:39:56:08:3e:
         49:25:36:da:ac:1a:78:33:c6:76:42:64:25:99:3e:7d:db:b2:
         b4:8b:12:65:fd:8c:aa:a4:14:08:eb:26:23:81:dd:61:aa:d2:
         ff:40:c1:58:20:93:45:cf:4a:05:47:15:bb:e7:28:92:be:28:
         26:fe:18:6c:f0:50:3b:17:3a:72:42:1d:7d:e2:08:dd:a8:8e:
         84:ee:7f:bb:ff:19:64:fd:e6:c3:dc:4b:b1:7f:c5:cb:39:e9:
         c1:e0:21:fa:3d:a6:40:36:c2:d9:ae:76:fb:cc:23:a6:84:7a:
         4c:44:bb:01:72:a2:18:d4:1b:03:83:d9:58:89:e6:d8:e5:5d:
         bb:1b:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:58 2026 by rpki-client