Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
File:                     0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json)
Hash identifier:          1Xb4eR6TR+CFGvyjD/nAF6hTh86+Xd50MNERM56ihGk=
Subject key identifier:   01:AD:8A:7D:62:33:31:0F:31:E2:68:FF:BC:97:D7:95:01:BE:8B:86
Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
Certificate issuer:       /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Certificate serial:       1137
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
Manifest number:          112A
Signing time:             Mon 22 Jun 2026 17:13:39 +0000
Manifest this update:     Mon 22 Jun 2026 17:13:38 +0000
Manifest next update:     Mon 29 Jun 2026 17:13:38 +0000
Files and hashes:         1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: GGgJszuUV1S6KuyWrwUr8BQ7oH1XlJNcKgJs/uQkz7o=)
                          2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: PxGfyB9W/rrckFKkWTDwSaYZ5fUPv1DDMqq0Qrh6HDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
                          rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4407 (0x1137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
        Validity
            Not Before: Jun 22 17:13:38 2026 GMT
            Not After : Jun 29 17:13:38 2026 GMT
        Subject: CN=6a396d43-ddcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:44:c3:67:4e:82:90:e2:e2:3b:2a:a8:b5:
                    f4:5a:c7:75:6b:a1:7d:8b:10:77:78:2c:60:7d:fa:
                    b1:3b:ba:a5:0f:87:36:c6:96:3b:db:91:19:b7:e2:
                    17:88:53:01:59:40:e8:c2:1f:4b:d3:e6:cc:bf:32:
                    1d:3f:d2:b8:0f:1c:e3:c9:ab:15:ce:8b:a3:cf:77:
                    eb:f8:bb:da:f3:8c:8d:a1:70:8a:c0:f7:46:2b:5f:
                    f1:31:75:a4:87:2e:fa:52:79:71:aa:17:00:0f:fa:
                    70:3c:2c:23:c4:6e:18:1b:ed:dd:c2:50:29:93:3c:
                    b6:ef:17:af:77:09:ec:78:ce:30:56:7a:4f:18:68:
                    6d:3d:81:df:40:d9:18:96:2a:0b:cd:67:20:7e:b8:
                    39:25:cc:c2:d9:f0:a6:f3:77:a3:a1:2f:39:81:3e:
                    cb:57:b0:5a:ee:80:0a:70:20:54:e6:b3:02:1d:38:
                    f8:3a:a6:c9:fb:59:59:f0:35:50:a7:1e:0a:20:ca:
                    49:f0:3d:29:1c:c4:a9:57:fa:82:61:df:29:ba:b9:
                    e7:f7:2d:f0:77:56:f7:e4:9d:be:db:90:78:0f:e0:
                    e2:93:7f:33:dd:c9:72:6d:27:39:30:87:fc:49:6f:
                    69:8c:16:7d:98:e9:b9:df:60:43:b9:28:64:4b:15:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AD:8A:7D:62:33:31:0F:31:E2:68:FF:BC:97:D7:95:01:BE:8B:86
            X509v3 Authority Key Identifier:
                keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7f:1c:85:1f:57:4b:82:42:c3:c5:ca:9a:e5:fd:e6:62:80:
         a0:03:95:50:70:db:77:68:13:2f:76:fb:c4:73:4e:75:93:54:
         b1:0b:39:45:95:47:81:e3:35:82:3d:c1:eb:69:77:eb:fe:72:
         6a:05:8b:f8:4c:77:13:36:4c:e1:9d:4f:fb:d0:33:2f:c6:a4:
         46:24:c6:e6:4d:72:1d:ea:52:f1:86:f5:06:a1:73:2e:c7:5e:
         31:9c:b2:7e:d0:f6:3e:b1:58:02:e3:d8:e5:88:d1:4d:68:9f:
         75:0a:60:3c:c8:f9:27:5b:e4:18:a5:a2:cc:09:03:00:07:79:
         e6:bd:92:db:19:61:48:d4:5f:80:77:5b:5f:44:77:75:0a:83:
         2f:87:b1:8d:5b:0e:ad:f4:84:00:05:42:92:ce:97:0e:11:65:
         4a:41:3f:40:91:6e:64:05:c7:44:44:0e:fc:20:25:bd:b8:54:
         1f:40:95:82:99:c1:42:ca:fa:97:bf:3f:02:c2:e9:9a:06:37:
         65:b7:51:8a:30:ae:9e:b5:76:55:2e:dc:a5:da:61:19:a0:f7:
         80:70:21:ba:f6:e2:2b:08:43:0a:91:16:f6:9f:a2:d9:f0:ee:
         09:e4:13:6c:28:23:cb:30:d3:c1:52:74:57:09:e5:0f:10:24:
         56:1a:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:39 2026 by rpki-client