Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft
File:                     NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json)
Hash identifier:          IZd9exP3kbzDqjS+Zg5g75FfiN/wZKL5ILlqeqBLprI=
Subject key identifier:   3F:22:4A:6A:D0:E5:EB:09:CD:A2:CE:9B:60:84:A6:4D:38:C9:5B:DE
Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85
Certificate issuer:       /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft
Manifest number:          BD
Signing time:             Sat 13 Jun 2026 07:37:04 +0000
Manifest this update:     Sat 13 Jun 2026 07:37:03 +0000
Manifest next update:     Sat 20 Jun 2026 07:37:03 +0000
Files and hashes:         1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: CHNmaRkWnBzFEZrcE0jgaHDcrU+XVTGirAFSHXn8+l0=)
                          2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: jnh0hd9BJeU6DriRSa5jcG1pBk63GyyVkCh16HHy3wA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl
                          rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385
        Validity
            Not Before: Jun 13 07:37:03 2026 GMT
            Not After : Jun 20 07:37:03 2026 GMT
        Subject: CN=6a2d08a0-30f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:0d:0c:8e:2a:0d:40:fc:4d:85:32:27:af:
                    b3:b3:c4:ce:b0:be:21:d3:cb:d7:e0:32:a5:68:58:
                    57:e4:0e:45:0d:01:f7:4b:d3:dc:08:9c:ef:1c:b6:
                    43:87:b2:79:16:71:fd:b4:30:03:fa:28:cd:63:ba:
                    af:7b:d7:04:86:76:f8:03:bf:c3:c4:72:d8:12:5f:
                    df:f2:9e:d0:51:83:90:82:2a:83:a1:77:62:49:f5:
                    c4:f2:05:1f:ba:86:28:3f:72:aa:3e:97:0f:2c:ec:
                    f4:80:31:2f:4f:86:9d:47:7d:73:6b:9c:b7:78:2a:
                    be:64:9f:8e:8c:38:d5:51:86:62:f9:6d:a6:1d:e9:
                    e7:20:c5:3f:cd:31:03:6a:a3:3d:ee:d0:fd:40:70:
                    05:99:6a:fe:a6:4d:bf:4a:97:82:d6:ac:39:a6:fd:
                    31:8c:02:34:63:5e:fa:f2:08:1c:0c:09:b6:f0:c9:
                    6e:0c:1e:75:c9:75:a9:a2:ef:52:d0:7e:28:49:59:
                    d5:20:49:4b:b1:fa:a3:cb:92:5c:bf:ec:85:fb:d4:
                    4a:71:b0:0b:9d:25:6e:dc:4b:0f:94:da:67:fc:ee:
                    c8:c1:61:50:96:11:fb:d6:5e:45:7c:df:33:14:31:
                    a9:28:4c:37:ca:73:c8:df:2f:c3:49:08:f9:38:35:
                    c5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:22:4A:6A:D0:E5:EB:09:CD:A2:CE:9B:60:84:A6:4D:38:C9:5B:DE
            X509v3 Authority Key Identifier:
                keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1e:61:fc:da:01:8f:74:76:32:63:fb:33:81:21:b4:ad:0e:
         cf:90:96:25:24:0b:3a:0b:9e:75:92:6b:29:7e:73:f1:47:0b:
         be:ef:d7:f1:98:6b:e9:c3:5d:d9:43:dc:8f:cf:b1:ae:0e:4f:
         0a:bc:2b:a8:ce:b1:16:48:30:a3:ce:6f:a1:6c:23:82:08:c2:
         45:c2:00:eb:28:d4:3a:12:db:b9:0c:c4:e5:08:29:b8:5a:2a:
         9b:7d:dc:35:1d:a8:7c:a7:89:52:b7:d2:69:76:0b:5a:2b:ea:
         de:25:4a:41:9a:2b:8a:31:64:75:7e:2e:94:52:58:3a:d7:a3:
         5f:46:b0:4c:f9:64:0a:5e:bc:4e:9b:37:8e:d2:8e:8b:ff:01:
         31:5c:8e:bc:0b:0c:ac:4a:dd:f4:f1:05:39:3d:48:f0:5b:8c:
         f5:6b:24:b8:dd:71:e6:6c:27:ae:e0:1e:80:f9:58:cc:d4:84:
         63:ca:b4:27:53:bb:28:60:37:27:19:f3:2e:ea:9d:b2:80:a8:
         a8:35:f6:f1:64:3d:68:f0:35:d4:9d:1f:1c:e1:4d:25:2d:a2:
         ef:40:90:35:66:a2:41:56:e9:81:8f:0c:38:da:32:17:95:8c:
         92:c3:67:1c:5e:8a:61:00:0a:0c:79:5a:95:fa:e6:7e:de:6d:
         7e:7d:83:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:17 2026 by rpki-client