Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
File:                     9IjcYHyL28iy8lnlOSk-EQeDPa0.mft (raw, json)
Hash identifier:          pOX5hZjOUQglbanSx+YNI9VFVduW16p1GprVImwcgd0=
Subject key identifier:   AC:4A:0E:3C:CB:C1:8A:CF:C6:D5:06:38:72:EF:B3:02:39:8F:E0:4A
Authority key identifier: F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
Certificate issuer:       /CN=A91DDB11/serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
Manifest number:          11
Signing time:             Thu 11 Jun 2026 11:25:17 +0000
Manifest this update:     Thu 11 Jun 2026 11:25:16 +0000
Manifest next update:     Thu 18 Jun 2026 11:25:16 +0000
Files and hashes:         1: 9IjcYHyL28iy8lnlOSk-EQeDPa0.crl (hash: BcTlgoZ/bWqqKhUIRS62D42FgAbYoTN+G86a10wyzxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl
                          rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDB11, serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
        Validity
            Not Before: Jun 11 11:25:16 2026 GMT
            Not After : Jun 18 11:25:16 2026 GMT
        Subject: CN=6a2a9b1d-956c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:7e:4b:15:03:9b:0f:fc:57:d7:01:e3:24:
                    99:16:8b:36:ca:1b:9d:4a:65:3d:25:da:2f:8e:73:
                    98:be:b9:ed:b6:ad:17:7c:de:45:1d:44:24:f6:19:
                    79:59:e1:e0:33:73:03:5d:1a:2b:fc:c9:77:a1:4b:
                    f6:6e:df:32:df:01:d5:ed:4e:60:d8:98:48:4e:41:
                    0b:5a:fd:b4:5d:e2:5d:44:c7:f4:70:a8:eb:a8:6a:
                    02:1e:62:03:4d:c5:4a:39:ee:8f:75:05:d5:b3:cb:
                    23:22:b9:5c:74:fa:f0:90:2a:d2:c4:44:91:a2:12:
                    50:8e:c3:84:81:37:85:8c:f3:08:e6:bc:94:91:c1:
                    b3:53:d7:fc:c8:50:ca:23:dd:f1:c3:b2:d6:76:7d:
                    ad:e2:34:fd:89:3d:6c:e5:ce:91:10:95:fa:a3:11:
                    5e:6e:17:9d:6e:bb:a4:aa:df:6d:4c:db:3d:25:6a:
                    a1:a8:30:4d:67:d7:88:59:df:3b:3b:87:da:66:19:
                    ee:25:38:c8:b1:25:70:59:42:95:71:1f:e8:de:41:
                    9d:32:9d:70:be:3b:6f:62:53:e3:f5:bf:33:f9:4d:
                    f6:d0:58:47:8c:28:43:ac:cb:c7:28:ad:ee:c3:92:
                    fd:e0:5f:36:cc:9d:b1:8e:a6:07:81:6c:84:ca:be:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4A:0E:3C:CB:C1:8A:CF:C6:D5:06:38:72:EF:B3:02:39:8F:E0:4A
            X509v3 Authority Key Identifier:
                keyid:F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:12:64:8f:83:06:b2:9d:1e:0b:5d:62:6e:c7:8f:f9:a2:e1:
         cb:d2:19:78:e4:bc:93:5b:f3:05:8e:03:a4:ef:4a:7b:e5:8c:
         b9:a0:e5:ca:23:4c:c0:5d:75:4b:ed:b6:6a:ae:7b:4b:a3:32:
         fe:31:0b:1c:ae:ba:4c:f5:1d:66:d3:b5:6a:0a:1b:47:60:bb:
         43:40:28:68:50:de:50:81:7d:e6:62:3f:9a:59:3b:45:d6:6a:
         a3:c7:a4:c5:94:11:6e:ab:ec:01:71:a2:f0:81:04:9d:9a:70:
         ab:fe:22:60:68:09:51:eb:4e:1d:0c:83:15:a5:fe:ad:5d:fd:
         61:42:ac:fd:18:17:42:4d:13:59:4f:3b:6b:11:cb:a6:49:63:
         54:84:e9:58:e5:ef:0d:46:11:2d:e0:a9:ec:25:23:a5:f2:d5:
         29:4c:06:18:01:f5:70:65:6d:49:f4:04:63:3c:3d:99:6e:45:
         0f:17:d6:a3:42:6e:0e:12:2a:6a:a8:56:e5:4a:fd:7f:92:23:
         3a:f5:88:16:3f:4d:32:4e:1b:43:ca:5a:bf:9a:b9:95:9a:94:
         18:a9:0c:d6:c8:bf:2e:11:0c:1d:0d:f3:e7:31:6e:dd:a3:4c:
         1b:ee:0b:cf:a5:a8:ab:da:62:f6:5b:00:bd:76:a6:f8:b8:2c:
         38:63:4a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:23 2026 by rpki-client