Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
File:                     ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json)
Hash identifier:          patFfhDo2YHsA+SDB+x/7nOqIvvznN4dHh3GqtZ3ALY=
Subject key identifier:   D0:5E:77:9D:75:60:DF:CF:5C:40:A8:40:B2:57:52:1F:CC:18:76:48
Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
Certificate issuer:       /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Certificate serial:       08B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
Manifest number:          08AD
Signing time:             Sun 31 May 2026 21:05:47 +0000
Manifest this update:     Sun 31 May 2026 21:05:46 +0000
Manifest next update:     Sun 07 Jun 2026 21:05:46 +0000
Files and hashes:         1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: swbk4UiIQAHRbQ9Ovimn41hpcKFXy6A89Sn2kCbNCMU=)
                          2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: Lubg1etHnAX3Eexr1F6RZ/V0j32jER/ID7u87KtGroA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
                          rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 21:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
        Validity
            Not Before: May 31 21:05:46 2026 GMT
            Not After : Jun  7 21:05:46 2026 GMT
        Subject: CN=6a1ca2ab-1041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ed:4c:bf:9a:5b:de:76:35:5a:34:6d:c5:fc:
                    7d:39:fb:4b:61:ee:76:ac:b2:d2:30:38:67:e3:6a:
                    ef:fd:55:28:14:5c:25:2b:f9:21:8e:bf:6f:5d:88:
                    17:32:ff:4d:25:be:7e:dd:b1:3c:01:2b:bd:c7:c1:
                    c6:69:ac:7e:7b:5b:19:d9:07:b8:2a:12:1e:2c:04:
                    d7:6d:c4:04:b3:0c:20:a3:9a:a0:6b:08:00:d9:98:
                    bd:14:a8:91:9a:44:c5:1a:e2:3d:30:b7:3f:f1:0e:
                    15:8b:2f:93:a0:f5:94:ea:04:9e:0a:02:53:7d:4d:
                    83:a5:6e:03:12:21:fd:15:a7:da:b3:bb:f5:5b:2f:
                    ef:8f:e3:12:d2:ca:7c:8d:9d:4b:08:40:3d:ca:bf:
                    12:e5:46:04:4b:29:d1:4f:20:98:47:11:3c:1a:84:
                    94:76:2b:ad:5b:da:10:cd:ef:90:41:e7:f8:9a:57:
                    dc:2f:83:33:45:15:c0:ed:c7:ed:b2:03:b3:f7:26:
                    06:b3:0a:e9:60:c6:c5:2d:c8:36:88:15:5c:45:9b:
                    64:8e:85:6e:57:8d:36:0b:c0:1f:19:7a:54:25:2d:
                    d7:a7:4f:ad:8f:a6:34:61:45:57:d4:36:61:33:e0:
                    ef:b8:32:90:c8:c1:b5:eb:12:41:b4:91:9f:96:ea:
                    33:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5E:77:9D:75:60:DF:CF:5C:40:A8:40:B2:57:52:1F:CC:18:76:48
            X509v3 Authority Key Identifier:
                keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:bf:14:94:87:ec:b0:60:8c:42:d2:4e:75:21:d1:56:95:a6:
         a9:0c:1f:e7:47:db:4b:09:1e:ed:69:cb:57:60:3b:39:e8:0d:
         70:68:2e:c9:24:03:6e:a0:7a:35:50:1b:7d:83:97:20:3d:c0:
         c9:c8:01:14:a7:29:d8:d3:90:71:79:bf:71:cf:e3:c0:df:75:
         0c:e3:53:f3:ad:e2:72:b3:54:60:d3:64:30:a7:15:87:02:1c:
         31:b9:bb:95:cf:63:1c:7c:fe:d8:88:38:13:03:7f:bb:ee:bb:
         58:7c:66:98:47:e4:d7:06:d4:85:7c:49:b2:d0:eb:ee:6e:9f:
         9a:20:0a:8c:c4:71:1c:a1:b8:9d:6f:87:8a:2d:81:03:ac:8a:
         1c:4e:7a:b6:e4:7c:30:c4:0c:9a:b3:4d:3a:89:60:a1:aa:48:
         34:b5:3e:29:8f:0e:3a:c3:11:2a:4c:ce:8d:c3:98:94:df:90:
         bc:fc:65:e9:7b:a1:18:0a:3d:5a:14:e7:0f:41:e8:72:53:6f:
         5c:24:d1:ee:8f:5a:ef:ca:04:dd:11:cd:0c:07:2f:da:5f:19:
         22:82:70:9a:16:54:88:bb:7f:f0:5a:2b:92:32:26:be:a0:a3:
         90:7f:bf:32:b0:e0:12:5d:18:12:01:98:e1:dc:0c:e1:60:42:
         f3:89:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:09:52 2026 by rpki-client