Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
File:                     SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json)
Hash identifier:          XTsiZvrpWiDFgXukB9cvtHmCZnl2vtYcmJATq4tLynE=
Subject key identifier:   C1:E0:B9:61:4E:E4:0E:CF:B4:EA:83:8C:16:28:B0:3A:8A:51:EA:37
Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
Certificate issuer:       /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Certificate serial:       03C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
Manifest number:          03BA
Signing time:             Sat 13 Jun 2026 00:40:40 +0000
Manifest this update:     Sat 13 Jun 2026 00:40:39 +0000
Manifest next update:     Sat 20 Jun 2026 00:40:39 +0000
Files and hashes:         1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: 6I7gbqtWz7wksILEAb4okkXdnZNP3zOVaFN1UDiWydg=)
                          2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: 8Hg/6bEHVG5wm6bRNXZ2MyaYHSXk0DkxhouM2LKNEnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
                          rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
        Validity
            Not Before: Jun 13 00:40:39 2026 GMT
            Not After : Jun 20 00:40:39 2026 GMT
        Subject: CN=6a2ca708-7287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:50:90:0b:ab:bf:4c:c5:b1:d1:cf:69:fc:f1:
                    2f:92:fd:06:38:07:d5:cf:a1:59:39:3b:63:7a:60:
                    78:58:32:7a:38:88:0a:c5:48:14:31:57:38:f7:7e:
                    da:d0:33:a3:b1:48:e4:67:53:9c:70:6c:07:dc:13:
                    46:11:78:d3:90:b9:d4:29:76:0c:7b:90:45:e0:09:
                    ff:90:14:3d:b2:b4:45:17:4c:ee:ed:c1:28:82:e1:
                    ee:c7:23:e3:61:b6:b2:4d:4f:db:71:4c:d4:92:0c:
                    b8:ad:9b:3f:9b:cc:e7:ee:36:01:f2:0c:66:14:b4:
                    20:41:8a:08:00:d4:df:26:8a:b8:68:31:64:1f:35:
                    6e:06:c5:bf:d3:42:45:78:37:83:11:36:ab:bf:e6:
                    67:b3:5b:72:1c:10:4b:ba:30:ba:ca:9b:48:d1:3b:
                    82:af:46:0c:b9:03:94:3f:a7:be:c5:9a:18:22:d8:
                    dc:98:45:47:75:80:d5:92:8e:34:7e:09:95:56:12:
                    78:2a:e3:b7:2a:89:cb:1b:e5:fc:92:a5:de:3b:d2:
                    ae:63:0e:f4:5c:fc:8f:ed:a3:c5:c9:1c:4a:da:9f:
                    35:95:3e:e9:2c:48:df:bd:31:e3:5d:5a:8a:01:1b:
                    b7:6f:3e:72:f1:9b:53:de:20:39:03:e4:c4:0a:03:
                    8f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E0:B9:61:4E:E4:0E:CF:B4:EA:83:8C:16:28:B0:3A:8A:51:EA:37
            X509v3 Authority Key Identifier:
                keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e9:34:5a:41:36:4f:8c:4d:7d:66:bb:4c:a4:09:48:d8:33:
         17:aa:6a:cf:02:2b:13:b1:50:70:77:c5:37:ed:98:f2:f6:62:
         33:4a:a8:5a:a8:ae:5d:0a:a6:99:45:63:2c:ba:5d:a2:88:a4:
         16:0e:f5:98:74:48:8f:b3:3f:c1:00:8c:a8:e2:4a:e0:d4:1e:
         bd:2b:b8:f4:e7:3e:a2:73:80:b7:64:21:51:2f:66:96:a9:82:
         9e:0f:c4:4a:18:fe:16:19:61:f0:00:d0:98:87:36:f0:63:68:
         69:e1:29:8e:41:6f:e0:38:0c:95:85:b6:71:1e:90:6a:6a:23:
         8e:4d:19:67:d1:c4:d4:d9:42:2c:9c:bc:cd:4a:9b:30:52:4b:
         f2:26:8d:d0:a9:e5:f5:13:74:1e:be:e6:4f:cc:dc:f6:8d:68:
         94:ab:9d:a7:82:ea:4e:8a:f6:fe:a3:2d:92:f8:08:b2:5c:6b:
         09:d1:93:76:ab:be:8c:05:99:63:4b:e9:bf:c8:e2:dc:d2:42:
         09:8b:93:f5:86:64:2d:d8:ce:9e:6e:e0:a2:0f:bb:a7:65:2e:
         90:bc:03:61:ca:9f:36:89:9f:ed:29:20:58:39:39:8f:cd:77:
         e3:3a:95:e9:2c:a4:90:1e:75:96:b7:0c:b6:c0:3c:6c:2f:f9:
         fd:54:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:11:26 2026 by rpki-client