Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
File:                     o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json)
Hash identifier:          3jiQ3CF1CmJPGFxTEgnnsA6hUa18GLnWLG0ilwfeOC0=
Subject key identifier:   73:A1:0A:49:03:07:0D:2C:68:CE:89:12:F9:CC:7F:4D:D4:35:C9:30
Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
Certificate issuer:       /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
Manifest number:          F9
Signing time:             Sat 13 Jun 2026 06:20:10 +0000
Manifest this update:     Sat 13 Jun 2026 06:20:10 +0000
Manifest next update:     Sat 20 Jun 2026 06:20:10 +0000
Files and hashes:         1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: ptfn1xCyzX4w6TEApLsv/oB14Xa9GMENSNn9rDHFxPA=)
                          2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: VpW1ss/FISZUa4YxltnTH36k8qN9hgV+vDjB+vqrTUU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
                          rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
        Validity
            Not Before: Jun 13 06:20:10 2026 GMT
            Not After : Jun 20 06:20:10 2026 GMT
        Subject: CN=6a2cf69a-0503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:27:50:02:b4:76:df:ea:6f:64:0a:d0:0c:
                    df:7c:20:43:a8:fe:ef:11:6e:35:6c:44:e2:af:de:
                    f3:e6:af:22:b4:43:d5:00:81:f8:24:54:3c:a5:ee:
                    f3:3d:04:4a:db:b2:2c:c5:2a:36:f4:db:cf:25:f2:
                    ac:fd:51:00:07:aa:36:fb:d6:c3:2e:4d:ae:dc:ff:
                    87:d9:f3:28:2a:e2:43:3b:e5:49:cf:42:d8:e3:4b:
                    97:c9:92:97:ff:00:79:4f:fa:3b:44:33:ee:3d:9f:
                    24:e0:52:17:df:76:b3:67:23:1f:1a:0b:56:44:f5:
                    e0:5d:ac:fc:c5:47:92:2e:36:cb:81:66:97:4d:64:
                    b0:fe:54:75:e8:6e:eb:76:2f:9d:d6:8c:47:4a:52:
                    2b:92:fa:cc:97:3a:7e:20:16:b2:27:19:d8:b1:36:
                    76:7e:41:1d:57:81:35:0c:eb:27:27:ae:72:69:86:
                    1a:03:5c:dd:28:3d:f9:7a:ef:8b:16:d2:72:80:12:
                    e2:70:b5:26:d8:5d:b6:6b:b0:12:9d:38:b2:a1:92:
                    8a:ac:15:dd:2f:6d:f2:89:4c:bd:09:3e:57:b4:1e:
                    27:32:47:d9:20:be:72:a0:79:2f:09:5e:7c:31:ae:
                    04:15:75:9e:4e:c0:62:33:fc:f5:48:3c:7f:80:d4:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A1:0A:49:03:07:0D:2C:68:CE:89:12:F9:CC:7F:4D:D4:35:C9:30
            X509v3 Authority Key Identifier:
                keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7b:75:ac:91:b5:d9:6a:00:50:b0:e3:a4:88:3b:ce:1a:d3:
         f6:3e:2f:a0:75:a5:e7:f7:79:56:c4:56:1f:23:8f:6d:86:b2:
         48:27:49:d5:f0:f9:40:38:d1:af:64:7d:bb:0a:b9:b4:9b:4b:
         2e:54:06:e4:fd:db:da:67:cf:f9:bd:32:05:9b:3d:8a:0a:3c:
         67:11:ad:bd:f2:d5:21:9f:2b:9b:03:45:25:ee:a6:bf:d9:5a:
         ab:42:4f:bf:09:0f:16:29:5a:bd:4f:5a:ec:97:06:45:ae:c5:
         52:47:99:88:9a:6d:9e:1c:5e:0e:d1:e4:37:65:29:94:ac:71:
         c2:c5:fc:0f:93:f7:fc:c3:b8:ec:48:8a:d6:40:44:46:42:bf:
         8d:99:d6:67:2f:e3:50:a3:a7:70:c3:f7:2e:0f:f0:63:94:79:
         4b:e5:a0:d0:92:c0:97:cb:33:3d:9c:d7:84:c3:1f:72:dc:91:
         9c:0c:16:79:ac:de:91:47:dd:86:16:71:dd:bd:2b:5d:c4:95:
         fd:b2:62:ca:c4:b8:f7:30:66:b7:94:c6:57:d1:ac:ac:e4:93:
         f8:45:ed:95:ce:8d:69:ba:2a:ae:a7:6d:21:32:d3:ea:80:00:
         13:a4:37:a3:d7:55:af:17:17:13:c1:df:cc:f1:c7:49:ad:27:
         22:4e:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:40:16 2026 by rpki-client