Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
File:                     0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json)
Hash identifier:          pBlhCU6HK+Sq9HFVJg7AZ1DS0wLkHmZMhDgbmfWa/9A=
Subject key identifier:   D9:56:DB:6D:C7:39:36:42:72:C4:56:A5:C2:83:6E:BC:40:E3:AE:61
Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
Certificate issuer:       /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Certificate serial:       1B3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
Manifest number:          22FD
Signing time:             Fri 12 Jun 2026 15:53:52 +0000
Manifest this update:     Fri 12 Jun 2026 15:53:51 +0000
Manifest next update:     Fri 19 Jun 2026 15:53:51 +0000
Files and hashes:         1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: iJcugXNnnKP+zvXr0fZCEOYtAH8FwpJmaiYDkmTVDX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl
                          rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6970 (0x1b3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
        Validity
            Not Before: Jun 12 15:53:51 2026 GMT
            Not After : Jun 19 15:53:51 2026 GMT
        Subject: CN=6a2c2b90-e7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:12:9d:49:27:00:d9:db:e9:18:d4:67:80:
                    a9:bd:58:8b:d5:6f:ea:44:11:bd:88:c2:f8:b0:22:
                    b4:a0:c6:0f:4d:9c:5d:61:24:3c:4f:b9:6a:c9:7c:
                    d9:36:7a:1c:da:8c:7f:05:bc:f4:dc:d0:ca:e8:b0:
                    95:ca:22:ce:68:1c:50:98:5c:2a:30:81:c0:46:13:
                    4c:74:25:21:b1:99:42:ad:91:99:12:38:85:27:cb:
                    90:54:a3:ea:ea:24:08:85:79:6f:09:1f:fe:c4:47:
                    68:5c:f3:10:6d:7b:71:4a:80:97:d8:e2:15:fc:14:
                    34:78:8d:59:05:25:7a:45:18:9b:ee:c1:dc:cb:03:
                    c3:ae:d0:ba:ec:1e:a1:7b:88:0d:7d:b0:4f:d1:66:
                    43:03:6e:26:b7:e4:3a:d7:6d:6a:6a:0f:84:d4:b0:
                    91:7d:c2:94:39:53:1e:86:41:52:c1:23:c6:14:a3:
                    93:10:f5:fe:2e:aa:0a:1d:58:12:a7:43:b4:f5:d8:
                    33:35:2c:a1:0f:bd:3b:5d:99:d6:67:bc:34:1c:11:
                    7f:db:35:01:59:e2:1a:23:92:40:46:d5:30:03:21:
                    41:bf:bf:ac:a4:3b:82:10:10:43:e1:d7:d2:56:d5:
                    ea:98:fb:df:6b:6b:8c:3e:78:17:7a:30:64:54:41:
                    10:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:56:DB:6D:C7:39:36:42:72:C4:56:A5:C2:83:6E:BC:40:E3:AE:61
            X509v3 Authority Key Identifier:
                keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:40:a3:37:70:02:bc:5b:c1:70:34:7a:4e:0e:87:bd:3a:98:
         df:24:27:ee:0e:ef:46:97:5a:da:6c:e3:ce:5b:17:42:2d:4f:
         10:7e:8a:7f:a0:5a:47:22:3f:02:9c:ff:f2:f4:8b:bf:d9:7f:
         68:48:2e:34:35:14:34:d9:06:ce:f5:14:93:84:a4:09:52:2f:
         44:e8:e8:d4:c3:66:38:60:f5:9b:21:53:23:de:63:56:c6:ee:
         c3:8a:8c:b3:df:fb:9a:90:47:59:96:46:ed:c1:8f:80:55:a8:
         d3:cd:df:db:70:92:e2:fc:d4:b9:ca:fe:66:63:fa:21:85:40:
         99:3a:33:60:56:e0:e8:be:14:8a:ce:c0:21:f6:54:94:55:67:
         11:1d:f5:01:1c:e9:de:a7:cd:dd:67:5c:f9:f6:36:5f:9e:23:
         09:7a:1d:26:43:8d:34:ed:59:5b:2c:41:46:ef:e4:c4:2b:1c:
         a8:9b:92:00:fd:6f:d2:77:66:3c:08:b0:62:8d:41:c5:4a:05:
         6e:c8:c7:64:0a:93:d6:c1:b4:1d:1b:8b:9a:92:6f:0b:4a:ab:
         59:26:eb:7e:b4:ef:be:f9:7c:ab:17:1f:be:01:79:ac:82:3f:
         6a:17:52:c6:c4:c1:c6:96:d5:93:84:ff:99:1b:c9:88:a7:bd:
         f4:a1:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:53 2026 by rpki-client