Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
File:                     MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json)
Hash identifier:          boAY98TZTV+DtBsuw6pCIq8/l9/q/Po1PsUIwNC6g9A=
Subject key identifier:   8C:D8:7F:F3:FF:74:84:D3:EF:1B:77:C4:74:05:94:39:A7:FB:22:79
Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
Certificate issuer:       /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Certificate serial:       12D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
Manifest number:          12CF
Signing time:             Fri 12 Jun 2026 17:00:46 +0000
Manifest this update:     Fri 12 Jun 2026 17:00:46 +0000
Manifest next update:     Fri 19 Jun 2026 17:00:46 +0000
Files and hashes:         1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: j5uOvPlOOc0hat8r3/Eh2494rGROVJP9b3/d05sXPl0=)
                          2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: M8bvGDd0ZBYR9yE/jwui6k77lrbOCgZ6YWG7elpbG8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
                          rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4825 (0x12d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
        Validity
            Not Before: Jun 12 17:00:46 2026 GMT
            Not After : Jun 19 17:00:46 2026 GMT
        Subject: CN=6a2c3b3e-45be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:87:a3:88:18:a6:b3:17:0c:ac:4a:30:1b:4e:
                    52:21:fc:a9:cc:85:27:85:c9:2f:cb:8e:13:33:ae:
                    c1:7f:93:b8:d1:fc:ce:a5:87:7e:5a:78:95:56:2e:
                    23:dd:1e:3c:d5:53:86:e2:ae:08:a6:c6:bb:ce:d2:
                    b5:0a:ad:e5:41:a5:10:33:eb:9b:2e:5d:e4:02:f6:
                    fa:ec:81:39:b8:60:45:a2:40:f3:bf:b3:8a:42:42:
                    ff:eb:48:e7:e4:02:64:da:c1:0f:3a:db:2e:b0:64:
                    8a:01:0a:6b:2b:26:8e:31:5d:df:6c:0b:55:39:56:
                    7a:d4:31:65:26:c3:93:c8:62:e0:50:8a:3e:36:9b:
                    b6:7d:5c:7b:4c:25:66:ba:5f:30:8f:21:e3:34:0a:
                    bc:4d:1e:df:07:1c:c1:6b:bd:02:16:01:a7:54:62:
                    09:a5:5c:9b:d9:f9:e3:bb:fb:be:4f:88:ea:28:a9:
                    b4:ab:65:a5:4e:cb:fa:2e:1b:51:e8:2f:4c:6d:a1:
                    d5:df:4c:a6:28:4d:7e:c2:a1:29:d3:fb:02:cb:80:
                    aa:24:2a:6f:67:f3:94:e5:cd:f5:cc:71:b3:ee:ab:
                    2b:06:6d:0b:53:ed:9b:13:e7:31:64:c5:c2:78:8a:
                    6c:5f:9f:aa:34:b6:e2:da:7a:6a:2b:fc:82:02:2e:
                    e6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D8:7F:F3:FF:74:84:D3:EF:1B:77:C4:74:05:94:39:A7:FB:22:79
            X509v3 Authority Key Identifier:
                keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a6:17:ff:86:4c:e1:41:84:43:3b:b4:81:65:94:94:69:5f:
         1f:47:a3:89:31:97:17:df:f8:45:78:c0:5c:8b:dc:4d:19:15:
         56:99:34:ac:1a:17:24:b1:2c:bc:64:02:fb:51:cc:f0:5d:85:
         cc:f2:06:26:09:5c:0c:08:a5:fc:a6:8e:e8:92:e9:c2:cb:16:
         89:75:0f:c0:52:60:00:00:56:7e:78:38:c1:06:a1:f4:49:dd:
         36:00:bc:60:12:ca:b2:36:22:43:b9:de:7d:58:62:e2:c1:1a:
         06:cd:14:56:62:42:db:96:da:6e:2d:fc:e7:ea:dd:4a:79:72:
         a7:e7:4b:0d:3d:e3:ab:54:3a:90:df:55:d9:d3:40:90:bd:3f:
         ab:94:e0:8b:f0:af:9c:8c:af:67:7e:75:ec:1c:0c:60:b0:3b:
         b2:c8:b1:7b:9a:08:ee:f3:cd:9b:d0:0a:4b:e4:ce:1d:95:df:
         f8:1c:55:69:f2:53:c5:f8:b6:07:cc:b6:09:4d:c5:05:99:88:
         0a:72:b0:5f:39:c3:ac:cc:11:b1:1b:b3:50:ed:f1:af:18:c7:
         25:06:14:19:8c:c0:9f:28:1f:09:e4:50:4d:92:fd:0d:c6:67:
         5f:ea:38:aa:74:3f:8d:3d:ac:a6:cd:31:90:e8:d9:93:59:9c:
         9d:1d:cd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:55:04 2026 by rpki-client