Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
File:                     5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json)
Hash identifier:          TTp3YhELeadt4VfkWBh1qOIWpZQiVakUXSYNCIPW0Ww=
Subject key identifier:   83:A3:1C:C5:F3:FE:16:55:0F:9A:6D:97:1C:CE:7A:02:61:FA:BF:C3
Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60
Certificate issuer:       /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
Certificate serial:       02D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
Manifest number:          02D1
Signing time:             Tue 23 Jun 2026 01:25:52 +0000
Manifest this update:     Tue 23 Jun 2026 01:25:52 +0000
Manifest next update:     Tue 30 Jun 2026 01:25:52 +0000
Files and hashes:         1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: WCmJaq3JGrpAcBy6Nh7bYaNbVdrNcaddrHHwIQ330iA=)
                          2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: +rxJJCYqUTC1n9Vg6VPME8EdAjnNnPLt5eoyIH6NFFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl
                          rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
        Validity
            Not Before: Jun 23 01:25:52 2026 GMT
            Not After : Jun 30 01:25:52 2026 GMT
        Subject: CN=6a39e0a0-fbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:7d:87:1b:b6:d8:d8:b9:ff:64:ef:29:25:
                    1b:65:97:64:28:cf:01:e7:2d:07:24:5e:36:55:6b:
                    7e:26:de:fa:9c:f7:01:e7:15:27:27:82:c4:cb:bd:
                    74:bd:4e:31:84:b0:91:a7:3a:fe:40:82:6a:65:82:
                    91:c5:f8:6e:23:ac:a5:2d:35:24:99:bc:bc:3e:57:
                    15:98:e2:9e:50:b9:af:cd:e9:61:5f:c0:ed:81:8f:
                    50:e3:99:6b:18:ae:d8:90:96:ee:01:5f:e4:d3:9a:
                    54:d6:06:e8:eb:cf:ed:40:41:cb:3f:8b:af:45:0e:
                    da:20:48:6c:a1:a7:d3:ea:85:0d:9d:db:7b:a3:24:
                    9f:0c:68:3a:ec:ed:02:65:07:ae:35:fa:26:9c:48:
                    d1:19:49:b3:00:59:95:2c:fb:7d:28:73:18:fe:54:
                    75:ab:79:52:23:ad:95:4c:93:6b:4e:e5:06:66:45:
                    ea:ff:7b:18:6b:70:95:e9:5d:5b:c7:52:ad:a0:bb:
                    8b:44:f4:6c:a7:0b:64:6d:73:18:56:29:8c:37:df:
                    eb:85:fd:f5:c9:cf:3b:5e:b8:c3:fc:99:2c:81:70:
                    2b:a6:00:17:07:9d:fd:e0:32:46:a6:31:02:92:20:
                    7a:a4:0e:0a:48:b9:82:04:fb:a2:5c:01:7f:00:3b:
                    06:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A3:1C:C5:F3:FE:16:55:0F:9A:6D:97:1C:CE:7A:02:61:FA:BF:C3
            X509v3 Authority Key Identifier:
                keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4e:86:eb:a4:c7:e2:d4:56:92:4e:46:01:a8:44:38:ef:9b:
         04:1d:2c:54:f8:84:c8:b0:81:c8:e2:54:82:8e:33:0d:8a:9c:
         6b:d1:53:13:20:a9:a1:79:9e:6a:92:4d:7d:21:39:4b:bc:64:
         ad:6d:01:18:e4:ac:01:cb:2d:b5:3d:d5:cd:6e:3c:c5:d3:b0:
         1c:ba:4c:43:15:d7:e8:46:1d:76:24:dc:dd:3e:e1:46:f1:26:
         78:d3:3e:e9:6a:f0:d0:3c:9b:52:e8:51:01:9e:47:7d:24:e5:
         b6:c9:9e:b4:ff:c5:da:6a:b2:1d:75:65:ea:69:0d:3e:91:7a:
         30:f7:f8:fd:d8:f1:f4:30:14:b6:59:44:0f:85:74:33:42:0e:
         f6:fe:d4:c6:04:69:ce:ef:c9:d7:52:c5:3b:91:c7:f0:ee:fd:
         65:d4:35:69:b0:f7:96:f6:de:e2:e6:45:6f:53:e9:b2:0b:43:
         6f:53:56:26:32:dd:5e:75:08:ef:e6:8e:15:d9:e1:d3:2a:cb:
         4f:b9:b0:f4:41:85:71:cd:14:05:92:b6:5c:6f:31:8a:68:76:
         6f:c5:ed:ae:5d:8e:51:d5:5e:d8:3c:f6:93:a4:b1:04:84:15:
         c3:6b:a2:d4:db:a5:b9:84:5b:ea:ac:f4:1a:e7:ce:41:49:48:
         f4:f2:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:29 2026 by rpki-client