Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
File:                     B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft (raw, json)
Hash identifier:          h8TAbGyG9e8SxX9tjnXjRlD/zvO++c1C3LYojJ9Poww=
Subject key identifier:   79:18:D6:8A:9D:84:43:B3:35:CF:61:D1:22:F8:8A:2D:42:9C:0A:E8
Authority key identifier: 07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7
Certificate issuer:       /CN=A91DA5FD/serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
Manifest number:          0209
Signing time:             Sat 13 Jun 2026 03:05:30 +0000
Manifest this update:     Sat 13 Jun 2026 03:05:29 +0000
Manifest next update:     Sat 20 Jun 2026 03:05:29 +0000
Files and hashes:         1: B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl (hash: R5wymYW1fGACoHSkUBkM7Xaz6zOyag3uAB/JjXTCjzE=)
                          2: 76817340537011EEB43BD523C4F9AE02.roa (hash: 0ifLafqWOWwWoL7f0ErDOICXUX7B6R1i8dJpCuKmRDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl
                          rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA5FD, serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7
        Validity
            Not Before: Jun 13 03:05:29 2026 GMT
            Not After : Jun 20 03:05:29 2026 GMT
        Subject: CN=6a2cc8fa-be6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:19:c8:54:9c:e2:e9:06:62:c0:15:d5:a8:00:
                    54:44:1e:e7:5b:48:03:63:da:97:40:a3:20:cf:46:
                    43:db:c8:74:70:55:2c:da:32:fa:10:35:a8:8e:70:
                    33:2d:fe:2b:a1:be:69:61:b0:b3:db:1c:3a:d6:c5:
                    8e:a0:e2:fb:8f:2b:59:eb:b5:5e:32:ec:37:50:d1:
                    00:b6:23:13:a1:11:d3:b1:05:55:8c:7e:49:96:57:
                    79:36:a1:d3:7e:e4:fa:15:6f:8c:dc:10:0f:23:ca:
                    d6:ec:32:a6:8f:7f:01:34:d7:f5:2f:d8:bc:54:de:
                    a2:66:ce:6c:a1:d0:5d:05:24:3e:b2:d0:d5:34:46:
                    2c:6b:3e:64:c5:c8:75:6d:15:14:56:f4:8b:69:e4:
                    70:2c:20:ea:7e:25:71:2e:f1:a3:6e:7b:7c:e3:14:
                    2b:50:d6:44:31:0a:e1:b6:46:0e:a4:1c:4b:a0:29:
                    fe:97:ba:08:a2:b4:d8:ab:1e:4a:a4:68:72:7d:c1:
                    55:ae:86:0d:21:62:e7:36:70:4b:dd:8c:4c:e2:c8:
                    89:98:4c:e9:5c:31:73:15:eb:a0:f3:23:e6:24:2f:
                    9a:a6:92:3d:a0:8f:63:88:74:b8:a0:b2:37:5f:c6:
                    73:ab:1e:e2:3c:9b:92:5d:d8:9e:f3:34:cd:95:c4:
                    eb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:18:D6:8A:9D:84:43:B3:35:CF:61:D1:22:F8:8A:2D:42:9C:0A:E8
            X509v3 Authority Key Identifier:
                keyid:07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:be:12:b2:0c:cd:51:da:41:e6:97:11:46:18:2b:4f:90:e0:
         b0:fc:d4:c5:5c:00:d0:c8:b8:37:59:58:89:9a:f9:51:fd:13:
         74:fd:15:58:d0:dc:cb:2b:43:d7:f0:1c:02:92:4c:34:88:99:
         8f:3e:2c:22:31:db:f9:8a:01:ef:62:92:71:63:c9:4e:4c:87:
         fa:36:94:0a:db:47:d8:7e:c7:ed:cd:81:08:2e:97:b3:17:38:
         9f:34:42:70:22:26:93:40:d1:b0:44:c8:df:5b:16:57:a0:14:
         d8:b5:c2:f8:88:be:12:7b:72:37:ee:73:42:dc:46:8a:2b:65:
         83:db:ae:23:2b:83:cb:67:72:8c:9a:9a:e2:03:b2:1f:ce:6a:
         b2:a7:47:f9:26:3f:fd:63:76:f5:0d:c7:45:fe:72:ba:eb:30:
         24:f5:6b:eb:ea:7a:1a:c5:43:b6:3d:f3:d9:c2:93:40:34:c1:
         3b:e9:4b:6d:66:3c:0c:49:92:de:84:12:c4:58:ed:6b:b3:6b:
         f7:27:78:f6:d4:7c:33:67:05:b3:be:7a:63:9f:36:00:bc:3e:
         59:3f:47:16:75:36:3a:32:c7:81:82:0c:80:a1:6d:c9:2e:01:
         79:2b:1b:f8:1f:03:29:e0:9f:c0:56:df:76:8a:f6:6c:10:b0:
         2a:fa:a3:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REE1RkQxMTAvBgNVBAUTKDA3NjBDQUVGNUI3MkRGRTVCMDRCNzZEQURGRkFCODY3
QzMwQTk4QzcwHhcNMjYwNjEzMDMwNTI5WhcNMjYwNjIwMDMwNTI5WjAYMRYwFAYD
VQQDEw02YTJjYzhmYS1iZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnxnIVJzi6QZiwBXVqABURB7nW0gDY9qXQKMgz0ZD28h0cFUs2jL6EDWojnAz
Lf4rob5pYbCz2xw61sWOoOL7jytZ67VeMuw3UNEAtiMToRHTsQVVjH5Jlld5NqHT
fuT6FW+M3BAPI8rW7DKmj38BNNf1L9i8VN6iZs5sodBdBSQ+stDVNEYsaz5kxch1
bRUUVvSLaeRwLCDqfiVxLvGjbnt84xQrUNZEMQrhtkYOpBxLoCn+l7oIorTYqx5K
pGhyfcFVroYNIWLnNnBL3YxM4siJmEzpXDFzFeug8yPmJC+appI9oI9jiHS4oLI3
X8Zzqx7iPJuSXdie8zTNlcTr6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkY1oqd
hEOzNc9h0SL4ii1CnAroMB8GA1UdIwQYMBaAFAdgyu9bct/lsEt22t/6uGfDCpjH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTVGRC84QkRBRkVGNDUy
ODYxMUVFODlCMDBEODdDNEY5QUUwMi9CMkRLNzF0eTMtV3dTM2JhM19xNFo4TUtt
TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0IyREs3MXR5My1Xd1MzYmEzX3E0WjhNS21NYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTVGRC84QkRBRkVGNDUyODYxMUVFODlCMDBEODdDNEY5QUUwMi9CMkRLNzF0eTMt
V3dTM2JhM19xNFo4TUttTWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUb4SsgzNUdpB5pcRRhgrT5DgsPzUxVwA0Mi4N1lYiZr5Uf0TdP0VWNDcyytD
1/AcApJMNIiZjz4sIjHb+YoB72KScWPJTkyH+jaUCttH2H7H7c2BCC6Xsxc4nzRC
cCImk0DRsETI31sWV6AU2LXC+Ii+EntyN+5zQtxGiitlg9uuIyuDy2dyjJqa4gOy
H85qsqdH+SY//WN29Q3HRf5yuuswJPVr6+p6GsVDtj3z2cKTQDTBO+lLbWY8DEmS
3oQSxFjta7Nr9yd49tR8M2cFs756Y582ALw+WT9HFnU2OjLHgYIMgKFtyS4BeSsb
+B8DKeCfwFbfdor2bBCwKvqjFg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:08:58 2026 by rpki-client