Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
File:                     2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json)
Hash identifier:          TAb8Czm/NCyJqGqAFWUe9i7MR57yMoiJh7QsqWuj/mY=
Subject key identifier:   89:53:3B:7C:D5:5D:20:6A:5B:7B:BF:81:A7:C0:9C:67:43:03:0E:C5
Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42
Certificate issuer:       /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
Manifest number:          01E4
Signing time:             Thu 11 Jun 2026 05:40:53 +0000
Manifest this update:     Thu 11 Jun 2026 05:40:52 +0000
Manifest next update:     Thu 18 Jun 2026 05:40:52 +0000
Files and hashes:         1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: YUVIpcT5dvXra7L2++KqBS9A2I96cgCzD5YDB1SjBv0=)
                          2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: McXWsXXcIZmHr1+c7MXfi1yOdfqnkuMIhVjsAcxCbA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl
                          rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 05:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442
        Validity
            Not Before: Jun 11 05:40:52 2026 GMT
            Not After : Jun 18 05:40:52 2026 GMT
        Subject: CN=6a2a4a64-6573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:35:a4:a9:24:92:da:8a:c5:f6:d5:df:68:
                    94:1c:f8:4f:1a:28:49:f5:b3:9f:c7:b6:13:1d:2b:
                    64:1c:cd:e6:6b:26:01:4e:88:46:9d:9c:25:6c:d7:
                    8f:5a:50:e9:54:40:98:33:9c:e2:b9:9c:38:b2:ef:
                    a8:ac:83:f5:5e:c9:e1:f2:3d:c3:18:94:13:ae:a8:
                    a4:ae:a0:3d:33:a9:83:65:0a:74:a0:4b:d1:ba:68:
                    69:f6:9d:a9:ab:a0:b0:45:8c:82:71:3f:db:04:ba:
                    a9:bb:98:e9:62:d5:48:d9:1a:b0:40:c2:f8:2c:1c:
                    ab:16:73:9f:ba:3b:88:82:d5:11:ac:93:e0:16:17:
                    d3:62:c1:90:c8:94:a6:36:db:8c:40:04:9d:55:eb:
                    4f:ab:2f:cb:7e:9b:c4:a9:f0:40:27:7e:8a:01:49:
                    eb:e4:87:0c:9a:bb:2d:7a:99:da:b5:88:93:d4:51:
                    0b:80:93:ca:a6:e4:ac:bf:9c:89:0c:5c:e3:90:09:
                    4c:63:4f:57:7f:80:bf:c4:1a:87:ee:42:d9:91:2f:
                    2f:49:11:c5:c8:06:be:46:8d:e7:28:66:6b:99:66:
                    72:bc:d6:5d:10:b6:f5:41:f4:c9:61:3c:92:62:a0:
                    d5:5a:e0:56:27:25:00:71:38:08:f8:7a:5c:47:de:
                    19:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:53:3B:7C:D5:5D:20:6A:5B:7B:BF:81:A7:C0:9C:67:43:03:0E:C5
            X509v3 Authority Key Identifier:
                keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7e:d0:fc:3a:c1:ef:d2:ff:62:62:4c:8a:af:33:d6:fe:b3:
         0e:08:3c:94:57:b9:74:e1:b8:6e:26:d6:ff:c0:23:62:fb:75:
         af:39:ef:e4:1b:e3:57:a4:cb:86:2a:fb:01:d4:43:25:03:c7:
         06:8e:30:88:ae:f2:1a:ff:7e:e3:05:cb:0a:7d:96:0b:a6:f4:
         31:e8:e4:ee:d5:4b:c1:f0:c8:b7:44:34:05:74:fc:39:d1:bc:
         27:91:03:07:05:d4:07:9a:d5:66:11:f8:85:7d:34:16:24:73:
         13:0f:dd:3b:28:da:f5:86:20:04:30:26:6e:4f:54:5a:77:1f:
         0d:94:78:22:a4:bc:d5:31:c1:90:9b:2b:dd:d5:41:04:61:63:
         b0:5f:1c:a4:2a:ff:07:11:16:cd:61:8e:33:c5:64:96:7f:b9:
         fb:31:24:21:e0:a8:d1:16:03:8f:99:64:b5:44:99:f7:53:04:
         34:40:c5:2e:a8:83:04:dc:c7:de:51:c3:8c:a3:bf:f3:2b:3f:
         28:b7:82:6e:98:95:2f:6b:ad:b0:c9:31:58:af:fb:60:e4:7d:
         d3:e4:b6:37:86:9c:fd:c5:3d:ba:f0:2b:9b:4e:91:e1:3c:e9:
         73:c2:61:3a:ee:33:1d:b3:8a:2c:3f:e3:e9:83:3a:76:9c:61:
         49:76:2f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:11:35 2026 by rpki-client