Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft
File:                     IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json)
Hash identifier:          Y/zNyKTMN8EFJ7AcF9yzd3EbuOGyCsuqLCrvUXowM7Y=
Subject key identifier:   5F:37:6A:EC:D8:75:3E:2A:98:EF:6F:F0:5B:FC:6B:A7:32:E0:61:B1
Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59
Certificate issuer:       /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft
Manifest number:          011B
Signing time:             Fri 12 Jun 2026 17:30:28 +0000
Manifest this update:     Fri 12 Jun 2026 17:30:28 +0000
Manifest next update:     Fri 19 Jun 2026 17:30:28 +0000
Files and hashes:         1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: FFM7a4qI4/ios671A8ox4reCvKVvzQh3M1Ww+kvqqmw=)
                          2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: akLA24IwRVeRV87VrcCP9mJOdJA7ntWRSTCaXT2ZWc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl
                          rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859
        Validity
            Not Before: Jun 12 17:30:28 2026 GMT
            Not After : Jun 19 17:30:28 2026 GMT
        Subject: CN=6a2c4234-0536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:16:40:b9:68:2e:a1:76:25:5b:aa:33:b1:40:
                    56:32:4d:3e:5b:7c:95:ff:d0:98:49:8a:51:76:df:
                    f0:e9:cb:7b:28:eb:d7:07:2f:5b:81:29:bc:b5:96:
                    a8:77:e7:29:da:48:46:be:53:e5:30:73:e3:b3:20:
                    20:f6:cd:a0:d7:0b:24:6c:46:2f:30:35:81:41:e7:
                    78:34:a1:2c:d4:28:24:78:c8:52:ec:eb:71:0e:e2:
                    5e:8a:b6:73:9a:55:2f:29:40:2f:e0:25:31:a0:f3:
                    53:7c:0a:15:91:03:27:f3:f2:f8:7a:d3:16:59:7f:
                    de:6d:d5:19:22:d3:c9:3b:ed:5c:cb:a0:ce:4f:da:
                    fe:de:77:30:69:60:c2:b9:46:7c:e1:f5:88:e0:c9:
                    b4:23:98:c7:9c:6d:38:7a:73:54:ba:35:38:a1:0c:
                    a2:de:2b:90:fe:64:1a:54:7d:82:2f:8c:ae:92:c3:
                    a2:27:8b:f8:da:4a:55:cb:8d:27:de:50:01:5b:79:
                    bd:51:97:9b:5f:6b:8d:7a:4b:a5:96:92:c4:d4:01:
                    77:41:90:a4:55:45:76:68:72:d6:e4:06:4e:a6:34:
                    7e:5b:39:f4:65:77:05:bc:3f:8d:d0:40:00:36:b8:
                    d2:ca:b4:68:d1:4a:9b:3f:bc:18:93:2a:b9:18:4c:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:37:6A:EC:D8:75:3E:2A:98:EF:6F:F0:5B:FC:6B:A7:32:E0:61:B1
            X509v3 Authority Key Identifier:
                keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:12:86:e4:1c:0d:2a:87:64:d2:f0:17:67:e4:2f:ca:f8:b8:
         95:cf:2f:1e:84:2e:ea:8e:74:cd:d4:be:27:9e:f6:92:92:84:
         6d:c9:a2:a9:c0:49:b1:d3:36:bf:22:76:0c:11:da:80:b5:4f:
         bc:7e:f8:19:a3:c8:ed:42:b5:3b:c8:95:c5:ec:66:93:60:65:
         3d:9a:45:7a:63:48:26:7a:5f:02:f4:72:da:8e:66:a0:b0:11:
         28:08:eb:2f:35:28:bc:0b:dc:3a:a4:aa:c6:6b:ab:2e:04:a6:
         4b:4d:f8:00:75:1d:c4:d7:a3:43:df:73:73:ec:52:ca:25:7a:
         5c:a7:98:83:1c:74:cd:de:6f:b1:1d:45:6d:81:5e:c4:41:87:
         b1:df:3e:70:a4:c0:19:44:d8:3f:c1:2f:f1:32:ea:f8:4d:85:
         01:b0:a4:b4:38:8e:fc:23:8d:03:2b:83:8f:01:69:e8:14:a1:
         cd:52:b4:78:0c:8c:23:25:0b:97:9a:20:0a:35:5a:9c:56:1e:
         22:09:98:b1:f2:a3:94:8e:99:32:80:fc:20:60:c1:09:15:0f:
         f3:40:33:39:8a:39:b6:6c:08:5c:f5:48:b5:7a:ca:dd:84:26:
         d6:20:62:13:a4:1d:34:e4:25:7c:7d:93:e7:ab:a4:57:cc:50:
         3b:60:59:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:27 2026 by rpki-client