Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
File:                     PI-14Mz34QXfzLtMj4NZ71phXx8.mft (raw, json)
Hash identifier:          UQBO/A5O0Q+ZUtW9yniqmhdX5c9l3yUopV3JRfQBzow=
Subject key identifier:   21:83:91:EC:F5:28:5B:CD:50:6F:DB:4D:C5:5F:F6:4B:E1:1A:F0:1B
Authority key identifier: 3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F
Certificate issuer:       /CN=A9134C75/serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
Manifest number:          6A
Signing time:             Thu 21 May 2026 08:01:54 +0000
Manifest this update:     Thu 21 May 2026 08:01:53 +0000
Manifest next update:     Thu 28 May 2026 08:01:53 +0000
Files and hashes:         1: PI-14Mz34QXfzLtMj4NZ71phXx8.crl (hash: EXwBWesbvTQq4DLoeYRtr10qkdOCQeWQMlTW+37IdYs=)
                          2: 5672783CBA2111F08A546E86C4F9AE02.roa (hash: RKJiWEFRRxfC255nnKMBMyY+0j0SvD2OXb6aSU3b+vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl
                          rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C75, serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
        Validity
            Not Before: May 21 08:01:53 2026 GMT
            Not After : May 28 08:01:53 2026 GMT
        Subject: CN=6a0ebbf1-c118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:77:2a:5d:b8:38:67:00:c5:2e:ac:cd:fe:
                    9b:ed:6d:f1:fc:e1:14:04:2b:f8:56:26:ed:0d:20:
                    45:fb:bf:1f:41:ae:e0:a7:37:5c:ae:19:b0:a6:bf:
                    43:b6:39:19:0c:bc:71:7c:b5:f0:55:2b:d7:51:49:
                    db:31:ef:41:f1:24:4f:35:04:c4:ba:9d:12:ed:32:
                    c5:c5:3e:08:36:73:ec:55:21:2e:f0:71:c1:3e:70:
                    9e:8c:88:c4:c5:ae:47:63:85:e5:e5:fb:6b:57:bb:
                    82:80:f5:70:3c:70:d3:25:9a:a3:e9:f6:d2:39:5c:
                    5e:24:b0:df:da:26:69:c7:3f:23:58:7c:ca:f7:f0:
                    4a:f7:b9:10:42:d9:09:cc:a8:a1:74:29:83:fe:86:
                    0e:2d:92:23:7e:16:da:ef:23:2b:8e:b1:de:e5:76:
                    f9:39:c1:9c:81:f0:23:fd:a3:42:a5:86:b5:08:a8:
                    fd:80:85:a7:dd:18:77:aa:0f:22:52:55:a9:27:0d:
                    fa:c5:bd:91:5f:f0:b1:62:e3:c5:7a:cb:fa:9d:2b:
                    39:08:1b:f1:b4:0c:7b:02:20:34:8f:03:76:9a:88:
                    87:b0:bb:4f:74:aa:e2:78:0c:3c:2e:1d:de:82:ae:
                    d5:99:36:62:da:ef:39:e8:98:12:e7:2d:92:f3:b4:
                    c6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:83:91:EC:F5:28:5B:CD:50:6F:DB:4D:C5:5F:F6:4B:E1:1A:F0:1B
            X509v3 Authority Key Identifier:
                keyid:3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:74:cc:fc:37:f7:ce:9c:cc:3b:a4:a6:2b:7e:89:63:0e:5b:
         bb:e7:75:2b:58:72:e6:e0:43:99:28:89:9e:1f:0c:c3:de:82:
         c6:e7:84:fc:bb:cf:71:78:d9:4f:ff:68:9e:04:01:df:ca:08:
         f4:d7:43:d6:d4:6c:37:97:96:cf:2d:92:00:c6:28:35:7f:31:
         ff:7e:ab:a2:6c:a8:2a:13:b4:4d:29:2c:3e:8d:7d:7d:97:c7:
         18:11:c2:2d:65:13:34:61:87:06:26:5a:f5:42:ea:6c:ae:c2:
         46:5d:49:01:c6:da:78:57:1e:4d:24:bc:2a:48:cc:7a:d0:ef:
         3b:25:c4:21:61:35:25:8f:ad:2b:eb:7e:da:51:8e:0b:d0:36:
         61:78:a0:00:b7:36:22:e0:a8:ec:ef:0c:f1:c0:02:fe:55:5b:
         95:c4:ed:2f:79:f8:da:0a:9d:c4:65:20:9f:8f:87:68:8f:8e:
         5b:e2:d4:68:42:50:c3:45:46:5d:a6:4d:98:2c:db:5c:0c:91:
         50:31:40:dc:6d:46:02:64:2b:f5:35:b0:00:84:f7:3e:0a:2b:
         bf:b3:05:72:dd:7f:9f:d5:83:46:af:ed:ee:62:9e:1f:03:1d:
         59:51:9f:e1:fe:a1:e5:c9:8e:c0:47:47:86:ab:37:c4:ad:8c:
         d6:e2:4f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:01 2026 by rpki-client