Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
File:                     9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json)
Hash identifier:          Wd+CWxmfhB5/8zcK8zl30eQVjWX6ozUUHa0J48Ymwc4=
Subject key identifier:   99:77:15:71:46:78:66:9C:E0:50:4E:AA:44:9C:00:98:39:44:E1:9B
Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
Certificate issuer:       /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Certificate serial:       368B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
Manifest number:          35FF
Signing time:             Tue 02 Jun 2026 14:23:17 +0000
Manifest this update:     Tue 02 Jun 2026 14:23:16 +0000
Manifest next update:     Tue 09 Jun 2026 14:23:16 +0000
Files and hashes:         1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: PQbHEBcBvOTCP+dj/fadn4Qvx2r4b8VT26iKbAKNy2o=)
                          2: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: TBlyYgM+DcvFNapT40yw9if/xNsl7LZqhEtq12uGiME=)
                          3: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: S5zCvB1C6JfQINJasEPZi7XNeuOQmEGs2c56d+Kw5Mw=)
                          4: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: sqiE/uLgZvQuA5aRiKo0PL0079tzeNC+Wydytf6zOrI=)
                          5: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: EqtETornrjuBXG0deVGQTGhQLRaMgo2akZ1GXGnFWxA=)
                          6: 1A938A72619D11F0B4D0AB3BC4F9AE02.roa (hash: jKzQbg9WKOQNob9UElPhMaLUY02yHChdAbg8QnRVcoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl
                          rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 14:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13963 (0x368b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
        Validity
            Not Before: Jun  2 14:23:16 2026 GMT
            Not After : Jun  9 14:23:16 2026 GMT
        Subject: CN=6a1ee754-dc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:ea:9d:27:68:5d:77:0e:af:d5:44:a1:43:
                    54:9d:00:97:88:31:2a:44:af:cb:1e:14:38:b5:41:
                    08:4d:5b:92:b3:a6:1f:89:8b:5c:ea:a2:ca:0e:a5:
                    e4:e7:e0:c0:b1:59:9d:4f:8d:ce:f4:cc:95:ca:98:
                    c6:a2:26:06:5c:12:03:ac:6a:6b:ac:74:68:c5:89:
                    d9:12:3d:57:16:96:89:ff:2c:f7:ff:33:10:ae:2f:
                    b6:c3:f2:7e:fb:4c:0a:4c:74:2e:6d:30:7a:b5:98:
                    1c:aa:2a:12:d7:07:3f:7a:92:26:4d:38:11:3d:0b:
                    0c:81:c5:09:b4:85:0f:bf:c8:87:97:c9:24:51:4a:
                    b0:a3:ac:14:41:62:27:d2:a5:9e:49:b1:0b:bc:11:
                    59:b0:24:54:14:5c:34:a6:ac:0b:03:ba:5e:84:5f:
                    0b:2a:b5:c9:6e:aa:ae:93:6a:d1:d5:8e:bb:c5:2a:
                    75:d1:b3:ae:d8:ef:22:87:37:63:ca:dd:8d:1b:be:
                    92:1a:bf:20:9a:b7:b0:05:b3:75:86:0f:64:81:be:
                    af:7c:39:f2:29:84:8f:df:19:46:a2:a9:20:d5:66:
                    99:75:66:81:53:20:f9:97:b9:93:0a:ff:ab:9b:bc:
                    39:bb:39:a3:2b:c2:64:3d:be:99:92:3b:5a:ba:8e:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:77:15:71:46:78:66:9C:E0:50:4E:AA:44:9C:00:98:39:44:E1:9B
            X509v3 Authority Key Identifier:
                keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:94:4f:0e:61:9e:0e:e5:9f:f8:c2:d3:bb:a9:6e:32:26:76:
         f4:f7:04:d4:57:24:e7:48:77:b2:2f:f0:3f:1b:91:18:de:0f:
         28:1d:cb:1c:7e:e1:16:14:7e:8d:ae:40:fe:3f:81:84:20:e2:
         1b:21:b3:68:44:94:3f:bc:db:77:c9:0e:53:6f:62:db:2b:ad:
         29:7c:a0:90:cb:ab:7b:7f:fe:66:30:94:e9:51:4b:e4:02:fe:
         fe:e9:0d:6b:a8:22:a0:50:05:4e:48:d4:10:33:c0:7d:72:b6:
         49:37:63:86:12:17:3c:db:d3:ce:7a:bc:ad:61:7c:99:de:08:
         a3:87:a5:50:1b:6d:5e:e2:1e:76:d2:49:87:c6:76:e9:c9:64:
         84:70:ff:69:b2:ec:1b:b0:ae:4c:3e:60:70:bb:20:b9:1d:00:
         36:1a:9c:ff:49:43:5c:90:9f:92:3a:01:3d:87:b9:bf:68:bd:
         a3:9c:2b:02:aa:1a:a7:28:9e:8c:cf:5c:d9:6f:e0:30:81:bc:
         0f:2e:51:a6:3a:72:ea:93:67:1f:16:ba:15:27:8c:9b:91:86:
         ce:60:51:ba:01:1b:00:0a:76:f8:8b:31:7c:5f:53:5e:81:86:
         4e:74:4d:5a:84:89:80:c6:d5:a8:51:f6:25:49:de:9e:89:a1:
         16:25:87:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:32:30 2026 by rpki-client