Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
File:                     DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json)
Hash identifier:          h9fCDUmfgUe+H02ufPPdzesTDgjnFMAm6v7BlgNwEWk=
Subject key identifier:   E8:B2:56:F3:AE:7C:06:E1:02:2B:68:CC:23:C2:5F:8D:6A:6B:C3:CC
Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
Certificate issuer:       /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
Manifest number:          013D
Signing time:             Sat 13 Jun 2026 05:28:23 +0000
Manifest this update:     Sat 13 Jun 2026 05:28:22 +0000
Manifest next update:     Sat 20 Jun 2026 05:28:22 +0000
Files and hashes:         1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: Y5xUaDNIg5GmQhe2yL9Na0Egqkl/Jo3CmPu/c2n0FEg=)
                          2: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: am92Gr0MD4Jd5/4EoBAS/UqJDGiw/kv6GtuALWW7PUU=)
                          3: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: feWCSr9eRlRlJ3Q0tbYJyvoDzByu6lr0VTjjRj/M/Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
        Validity
            Not Before: Jun 13 05:28:22 2026 GMT
            Not After : Jun 20 05:28:22 2026 GMT
        Subject: CN=6a2cea77-ea69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:39:9e:b9:91:82:a0:39:56:6f:03:5f:23:
                    e9:ba:6e:75:da:fe:8b:e1:65:6f:0d:ba:b8:20:c6:
                    f9:12:6a:9f:c1:f6:5a:96:c7:8a:e3:54:af:ce:db:
                    e1:d3:db:f7:c8:6c:13:62:99:ab:a9:df:a7:3a:0c:
                    e6:d7:de:b9:25:6d:bb:58:fa:35:a3:26:5e:57:62:
                    dc:48:03:7c:93:45:75:83:08:78:90:14:af:3b:c0:
                    6a:02:47:82:32:04:3c:5e:10:09:ef:ca:56:20:2b:
                    67:79:89:9e:ae:d6:8c:f0:51:be:04:dc:de:25:4c:
                    bf:d8:1d:75:0d:86:04:2b:4f:fc:45:46:27:ae:4b:
                    84:04:2b:fc:34:58:67:01:eb:91:ca:19:0a:43:d7:
                    d1:5a:e6:d5:51:c4:23:99:e1:3a:54:9b:cf:c4:2f:
                    fd:9f:52:3a:03:6f:2d:aa:46:32:b8:d7:d2:fc:ed:
                    ac:1a:99:c7:ec:7f:72:d3:ac:21:43:27:53:ff:a1:
                    82:72:d7:34:a5:d5:7b:16:13:ab:ea:d0:ec:2f:5a:
                    74:f1:f2:08:db:ca:f8:5c:a8:fb:74:90:6c:8a:c8:
                    be:f9:ae:a8:d8:2a:f5:eb:46:4e:ba:9c:39:5c:a9:
                    a4:cb:ec:b1:a9:2b:77:3f:1e:57:77:e7:c4:fa:58:
                    7d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B2:56:F3:AE:7C:06:E1:02:2B:68:CC:23:C2:5F:8D:6A:6B:C3:CC
            X509v3 Authority Key Identifier:
                keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:dd:a1:cf:0b:49:98:a8:29:b8:c3:2e:d6:b0:41:ff:91:e0:
         df:87:85:5b:17:27:33:08:a2:9d:c8:90:66:1e:f9:e4:07:70:
         5a:6c:c8:2b:2d:00:b0:e3:1b:3d:ce:88:d4:38:14:ad:f8:7a:
         b1:38:91:00:6a:9d:9e:9e:c3:98:57:67:59:be:06:c9:88:e6:
         a0:a8:bb:1c:22:78:1a:14:39:65:fa:cd:d8:fb:9b:f2:fc:b5:
         3f:35:41:2b:01:d8:3f:cc:66:53:44:96:9b:d9:dc:aa:24:52:
         40:2c:2a:f1:37:8b:d5:f9:cd:17:77:d8:15:ed:7c:a4:70:b9:
         63:1c:c2:e8:f0:67:6c:20:3b:dd:c5:f3:ea:60:6d:11:f7:3f:
         81:51:12:62:1a:5a:a8:26:ae:26:41:0b:d5:b1:6e:9a:18:b5:
         1e:92:58:be:80:ed:54:ea:e7:2b:e6:c2:d0:05:b6:fd:b0:ee:
         eb:df:27:f3:d7:1c:6a:9e:b5:1b:3c:30:32:1d:d0:4d:a3:f7:
         aa:f1:13:1c:2f:af:46:f4:f3:a4:37:47:bb:26:b8:e1:75:78:
         51:03:05:72:5a:0d:6e:8d:52:d8:d7:a8:95:09:bc:50:d0:d6:
         79:43:48:9c:26:c2:20:ba:9e:00:db:a3:61:9f:49:07:17:0d:
         66:39:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:10 2026 by rpki-client