Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
File:                     l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json)
Hash identifier:          k0Th3UhHU27veCp2S2J+SZNjWDKfh3aHdwUYek9BqGs=
Subject key identifier:   83:BF:74:18:58:3C:36:D0:8B:20:86:55:9D:10:91:78:09:1F:C7:F1
Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
Certificate issuer:       /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Certificate serial:       0C14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
Manifest number:          0BF2
Signing time:             Fri 12 Jun 2026 18:55:16 +0000
Manifest this update:     Fri 12 Jun 2026 18:55:15 +0000
Manifest next update:     Fri 19 Jun 2026 18:55:15 +0000
Files and hashes:         1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: vDiAc3IdiUUKgavB1uFLPGbt5ttECBva26G6U9PwKIE=)
                          2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=)
                          3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl
                          rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3092 (0xc14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
        Validity
            Not Before: Jun 12 18:55:15 2026 GMT
            Not After : Jun 19 18:55:15 2026 GMT
        Subject: CN=6a2c5614-803c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:09:72:c6:15:4f:dc:16:b4:57:e1:35:29:
                    57:e1:fd:a9:0a:1a:75:8a:ef:ac:30:c4:b3:7c:a4:
                    14:7b:4e:80:9a:60:0f:cf:cd:7b:61:3e:8d:b2:eb:
                    2b:58:bc:e5:af:12:53:65:a1:39:cf:d6:1c:49:d5:
                    9e:45:d1:5d:40:9f:9e:4d:66:b5:0a:0c:00:b7:29:
                    93:8b:cb:5b:74:d0:b6:26:4a:8d:fd:eb:89:56:f6:
                    80:9a:f6:8f:81:2f:a5:78:76:10:e1:b1:e5:17:e9:
                    5f:a9:04:93:b2:b6:ab:ad:2a:fb:63:14:5c:12:ac:
                    c4:a0:0f:e9:6d:8f:cd:97:77:a7:f8:57:7b:e4:d2:
                    a1:c7:2d:f3:46:b3:86:ef:7d:25:b3:4b:44:07:a1:
                    a9:c6:c1:b5:98:64:7d:02:3c:ba:26:11:c8:95:c8:
                    ef:51:0c:e4:54:f2:a4:be:d8:06:12:c6:4b:6b:e3:
                    ab:77:fb:eb:4e:7e:7c:0b:ba:b7:8f:0b:40:48:98:
                    58:56:cc:8a:4f:10:31:b9:e8:1e:95:41:14:ba:fc:
                    bf:3a:e9:91:88:0b:44:9f:23:c6:87:fb:38:dd:79:
                    c0:1a:79:58:73:13:61:0a:2a:ec:10:f6:09:95:9b:
                    8b:a8:f2:40:a6:92:cd:0d:39:3d:2f:1e:06:ea:b8:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BF:74:18:58:3C:36:D0:8B:20:86:55:9D:10:91:78:09:1F:C7:F1
            X509v3 Authority Key Identifier:
                keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:21:5e:9e:f9:61:09:23:6b:a7:46:a7:74:1a:28:93:ba:e0:
         db:2a:a4:72:78:2d:9b:e7:ea:68:bf:bd:67:8a:e9:d4:b2:77:
         64:e6:63:b3:a4:a5:32:27:90:d1:cd:73:92:48:a9:4f:4d:48:
         a8:74:6a:18:4e:29:17:d7:ff:5c:c9:4d:c7:b7:5f:18:6d:bf:
         06:1a:12:51:bd:9d:69:a6:61:20:60:f9:ff:79:c1:fd:31:45:
         22:92:64:73:f3:e8:8e:5c:80:10:fd:8a:fa:5c:b9:90:10:4d:
         6a:11:de:d1:a7:c4:74:93:67:1d:6a:aa:72:e9:4b:11:fb:f7:
         1c:dd:07:ca:ac:c4:07:f4:9f:b2:3a:d9:97:ea:aa:f6:87:a7:
         c4:fb:f8:9f:3b:2a:ef:a6:02:fe:b2:f3:1b:ab:35:37:6c:ac:
         d4:c9:83:6c:12:5e:e0:84:ce:f1:45:e7:c8:c5:8a:a9:c7:23:
         24:61:b4:00:67:55:3d:37:15:4c:5b:e5:38:ee:95:97:db:83:
         57:5b:a0:76:78:be:5a:a2:74:aa:17:b7:b2:cc:f8:43:10:2d:
         8a:81:83:b9:ad:c0:27:08:8a:8d:1b:1f:59:4e:fa:52:e0:d8:
         92:7e:e2:3d:f3:e2:77:51:7f:45:e6:29:23:bb:9c:0e:2c:6e:
         84:37:89:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:43 2026 by rpki-client