Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
File:                     CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json)
Hash identifier:          fTGsDet0g6PFIBjrV7Vs6BcBpYvgdrEvfH2UXFhm6Js=
Subject key identifier:   31:2A:03:A3:70:F7:29:3D:FC:18:3A:17:74:59:11:83:1E:38:4D:AF
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Certificate issuer:       /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial:       0291
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
Manifest number:          0288
Signing time:             Sat 13 Jun 2026 01:51:56 +0000
Manifest this update:     Sat 13 Jun 2026 01:51:56 +0000
Manifest next update:     Sat 20 Jun 2026 01:51:56 +0000
Files and hashes:         1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: NeHMtxvsuHd6NDmQJruane3PsLY/QpMU+eS236IDu20=)
                          2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
        Validity
            Not Before: Jun 13 01:51:56 2026 GMT
            Not After : Jun 20 01:51:56 2026 GMT
        Subject: CN=6a2cb7bc-58b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:99:26:31:06:46:55:32:59:39:e7:1a:5b:
                    f5:e2:df:86:0b:01:13:08:38:9b:21:e8:77:1e:a0:
                    e3:43:f3:1f:1c:6d:13:3f:0e:15:9f:00:6c:9c:e0:
                    cc:39:7b:78:fc:e6:26:47:97:27:db:93:a9:4e:ed:
                    29:09:81:ae:19:61:5f:51:7c:c9:46:35:b0:5c:bf:
                    02:b8:ca:a4:5c:d1:9b:ca:ad:4b:65:73:da:e8:d9:
                    bc:73:f3:b2:c8:7b:e9:d8:1f:47:78:17:39:cc:be:
                    32:3c:c5:61:97:92:33:be:74:3e:6c:ba:89:89:f4:
                    45:01:bd:97:44:78:a5:26:95:c4:e7:e6:8e:88:09:
                    59:ba:5c:a3:a0:51:1c:6e:5d:b5:d1:c6:53:15:55:
                    ee:74:dd:f3:53:52:f0:c1:c8:29:39:35:d9:1a:92:
                    bc:a5:dd:6d:5a:21:94:ca:21:f3:d8:45:ac:b7:2e:
                    60:d5:27:57:03:34:f4:c4:84:b5:86:0c:f6:d7:22:
                    5a:02:b8:fb:3a:2c:88:f5:ae:bb:87:fd:15:25:02:
                    aa:1d:dd:ce:5e:43:7d:c3:c1:bb:3c:73:48:48:08:
                    e6:19:f0:a0:b7:95:97:b7:05:3c:ff:72:6a:ab:d9:
                    4b:21:f8:ec:22:69:1c:0b:66:16:47:5c:52:a4:42:
                    86:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2A:03:A3:70:F7:29:3D:FC:18:3A:17:74:59:11:83:1E:38:4D:AF
            X509v3 Authority Key Identifier:
                keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:34:29:58:62:97:34:c0:74:f6:4a:af:c6:b0:fa:78:cb:dc:
         95:5b:e5:2c:07:3c:00:b0:ff:32:ed:b5:00:a7:04:6f:9a:97:
         37:cd:17:13:ac:81:8a:f1:6b:0e:9d:31:f6:e6:36:81:d0:b8:
         f7:28:28:ad:89:a9:12:02:45:a1:7f:66:44:53:ae:1d:ee:b6:
         49:86:9c:61:a9:72:37:c4:57:bd:43:e0:a1:a4:92:9c:72:ff:
         31:57:02:61:c0:49:db:1a:54:82:2e:a4:0a:28:9c:6a:f4:19:
         8d:30:74:cc:82:df:56:56:ff:39:3c:03:76:1f:53:a4:8f:27:
         11:9b:d7:07:ce:69:85:27:d6:a2:19:41:d8:9a:dd:73:f1:29:
         fa:b4:b3:c1:dc:24:4d:dc:8b:03:76:d8:d4:c1:e8:6a:8e:95:
         f7:91:4d:d7:0e:1a:bb:cf:c2:42:2f:0a:aa:da:30:83:8e:d9:
         2d:0b:71:a5:bd:1e:0c:79:61:3a:45:ef:80:0a:ea:06:d7:f6:
         6e:29:57:2c:9e:a4:94:b6:c9:1a:a0:e4:f3:b3:18:c0:03:13:
         d5:63:1c:14:fb:a2:4c:a4:5b:72:32:41:26:18:8a:76:24:1b:
         fc:53:0c:db:22:36:e6:f2:3a:7d:60:b8:d3:c7:9b:4d:76:12:
         41:6f:f7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:39:11 2026 by rpki-client