Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
File:                     c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json)
Hash identifier:          h833sBiHY76yHHpjYDG2t53TQjkya4wKrdFqeqMltEk=
Subject key identifier:   F0:2C:2B:BF:F8:B9:78:DA:9C:49:BE:84:B0:5D:F3:17:3F:1B:92:A9
Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03
Certificate issuer:       /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
Manifest number:          0278
Signing time:             Tue 23 Jun 2026 02:04:57 +0000
Manifest this update:     Tue 23 Jun 2026 02:04:56 +0000
Manifest next update:     Tue 30 Jun 2026 02:04:56 +0000
Files and hashes:         1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: CUJx/vq3jFqqhZBxlcCgNi6DTYEccpC0O0YE8p4jPA8=)
                          2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: GbmFJbbelNZSeQtz3x+IHWFg+LPNIaQa4LtKPhQUg28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl
                          rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 02:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403
        Validity
            Not Before: Jun 23 02:04:56 2026 GMT
            Not After : Jun 30 02:04:56 2026 GMT
        Subject: CN=6a39e9c9-4d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:80:f2:10:15:20:dc:25:08:47:2b:f1:f5:
                    96:f5:28:2f:a4:fb:11:1f:1d:14:6b:04:e9:1b:c0:
                    9b:20:ed:1b:af:b1:57:77:2e:c5:38:14:56:78:88:
                    ba:05:57:25:9a:93:f1:9c:42:1d:8b:ac:a3:ff:e5:
                    4d:0d:d2:f6:95:3d:6b:79:ca:88:88:5c:14:49:c9:
                    34:d4:e8:eb:87:48:54:7a:d7:48:54:32:5c:1d:f8:
                    46:8b:6f:da:84:fc:ee:19:e7:fa:3c:98:16:ba:c3:
                    07:8a:e4:4e:09:92:83:3a:db:e8:b5:a8:0e:94:a5:
                    ae:f6:8e:45:09:17:89:44:e3:ec:80:89:98:56:a1:
                    77:78:b5:d9:03:54:f3:8e:a7:5b:d1:a2:49:e6:4f:
                    11:66:1f:35:68:a9:24:61:4d:e0:81:44:b9:e0:4e:
                    ee:da:34:2f:09:d9:02:f9:6a:3e:9e:54:e1:43:ff:
                    a5:50:48:fc:e8:c9:33:28:7e:f2:bf:27:e5:c7:35:
                    5b:d8:f3:5b:e8:c3:89:4c:2a:8a:12:91:90:cc:9c:
                    41:5f:ff:98:cd:a8:63:57:83:e1:dc:6a:79:78:4e:
                    24:eb:54:84:cb:cf:95:2c:bd:a2:a4:d4:c4:ab:38:
                    5c:98:cc:36:27:5a:8b:96:41:32:0a:ea:d0:3d:4f:
                    f0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2C:2B:BF:F8:B9:78:DA:9C:49:BE:84:B0:5D:F3:17:3F:1B:92:A9
            X509v3 Authority Key Identifier:
                keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:87:6c:ef:5a:41:8b:08:7d:88:2c:9b:ba:46:9b:6f:50:8a:
         0d:d6:51:1b:22:a3:76:04:8a:40:6e:fa:04:4a:02:0f:75:d0:
         b0:f6:9f:72:d3:7e:5c:be:b7:5a:22:d8:ab:26:60:2c:0a:1f:
         0f:0e:f4:1b:cf:3b:dc:4a:f3:53:12:c1:be:cd:a5:c6:b0:e1:
         e6:a2:ba:d1:6a:3d:93:92:0f:52:3c:98:e1:2c:c6:c2:46:82:
         a0:bb:50:b4:ea:5a:e8:11:58:f3:c4:a6:51:8a:01:93:96:4f:
         36:d2:70:29:c4:5d:92:fe:b0:19:8e:94:66:35:43:53:c1:2f:
         b2:38:00:f6:07:f1:1c:f1:9e:a4:78:b3:f6:78:f1:9a:c0:03:
         c9:ea:2d:ce:26:1a:86:92:5d:87:e6:42:f7:a1:13:b2:1f:66:
         8f:8f:cf:7e:3a:a7:bb:b3:5d:f4:6d:97:80:16:f0:11:46:cf:
         ec:12:19:fd:b7:c1:fc:f0:af:60:68:9b:c3:cf:c1:62:f0:44:
         7c:ef:14:b6:25:e6:0d:67:11:69:13:69:23:53:32:06:f2:48:
         04:c5:15:9a:6c:e9:8a:47:3d:43:d9:32:7c:a2:31:f3:cf:c0:
         07:cb:5c:72:bc:a8:8b:14:1d:5e:25:78:55:2c:a0:b9:eb:56:
         62:27:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:11 2026 by rpki-client