Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
File:                     2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json)
Hash identifier:          B9ZFfkY6iKp+H8J3U+2sSzX3rXG8m9F2mLmfKVLGOU8=
Subject key identifier:   CD:6A:EB:06:D4:A6:A9:02:E8:33:05:33:4C:CF:CE:C0:79:16:DD:94
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Certificate issuer:       /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial:       1811
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
Manifest number:          17EB
Signing time:             Fri 12 Jun 2026 16:31:40 +0000
Manifest this update:     Fri 12 Jun 2026 16:31:40 +0000
Manifest next update:     Fri 19 Jun 2026 16:31:40 +0000
Files and hashes:         1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: fJRxFzN60IsoG2KtnvRaLWQhEoe9qd6tsdeF/3u1xgk=)
                          2: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: axL4DxRLdN4w1oidCM91AwY0+Ml6Zzq4wlYIpZ72Alw=)
                          3: EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa (hash: 1ifr0yn5rYOREwHuBa/9PEbXr1t4wQIXYEhnH3YZcdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
                          rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6161 (0x1811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
        Validity
            Not Before: Jun 12 16:31:40 2026 GMT
            Not After : Jun 19 16:31:40 2026 GMT
        Subject: CN=6a2c346c-2f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e6:31:87:55:e7:8d:a2:b7:2b:88:a9:22:d0:
                    74:1f:00:30:b2:de:a6:2c:39:9e:79:7d:08:b0:34:
                    6f:af:86:85:4e:76:95:31:93:c2:0e:af:6f:a8:8c:
                    f4:7e:b1:d2:3a:36:d1:15:d2:fd:f6:5f:ab:8b:33:
                    39:0e:b9:dd:24:a6:68:d8:9f:f2:ed:92:1d:91:dc:
                    ca:cb:75:87:a1:b5:58:a6:d1:40:ed:ab:1d:03:7a:
                    31:7a:44:df:0c:a0:4a:7f:44:75:0d:a7:41:de:b5:
                    91:48:80:f4:14:e1:65:b4:6c:c6:00:06:07:d1:ba:
                    14:b0:85:90:3a:39:a4:e1:e0:41:f2:f5:c0:02:13:
                    45:ff:4c:67:62:6f:16:72:34:a6:4c:e1:ee:af:2b:
                    de:58:37:38:7f:1c:66:a2:c7:04:f8:96:11:4a:7c:
                    e9:dd:9c:8d:c4:b4:3d:20:67:fd:d4:23:4a:52:65:
                    34:50:b7:93:63:08:25:8e:d5:77:ef:64:bd:c2:99:
                    ee:27:78:99:fc:06:c7:ee:7e:4c:39:6b:39:2c:b0:
                    81:75:2a:fb:a5:4a:0e:8f:85:83:be:0c:39:a0:f4:
                    9b:4b:13:e3:35:df:81:52:59:88:7f:36:18:e3:ca:
                    a1:27:80:ad:ef:80:e6:bf:c0:56:e7:6c:30:57:4b:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6A:EB:06:D4:A6:A9:02:E8:33:05:33:4C:CF:CE:C0:79:16:DD:94
            X509v3 Authority Key Identifier:
                keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ea:69:df:e8:41:27:aa:2b:a7:79:20:5e:51:3a:65:17:01:
         8a:b9:1e:c2:2e:38:ac:97:11:45:b0:09:74:55:d3:82:54:8a:
         37:dc:68:d5:30:75:5e:31:a7:58:40:90:94:f8:ae:ed:5a:5c:
         e7:7b:fc:9b:82:83:94:39:6c:cd:89:c3:05:e9:95:62:91:dc:
         a6:81:12:07:0e:83:e8:9c:e3:84:28:a1:a8:d7:bf:85:d5:8e:
         69:af:aa:68:39:f2:7c:29:1f:f7:3c:9e:4d:09:7e:4d:c3:9d:
         28:59:3a:bb:7d:14:8f:20:77:33:54:92:37:b8:1e:01:7a:5d:
         04:3f:37:e8:89:b9:4a:75:8a:5f:74:91:bb:6f:9a:4e:4a:63:
         1b:53:64:e3:04:aa:74:06:ad:ca:43:98:e7:31:7d:40:7a:03:
         4f:74:a5:34:9c:93:34:c9:ff:b2:67:fe:31:97:ff:6b:76:ff:
         95:76:dc:7c:6d:a7:b4:61:4f:86:eb:6a:fa:8b:7e:b5:76:f0:
         1d:32:a6:43:26:cd:14:53:91:54:37:8d:bc:9c:c0:95:b5:a5:
         3a:4f:ce:44:f8:b8:62:ca:56:7e:5f:fb:95:05:0c:d5:c7:bc:
         b9:51:cc:bb:cc:ae:e7:83:3f:82:a5:30:5b:ef:1f:f9:ac:74:
         19:3f:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:09:08 2026 by rpki-client