Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
File:                     DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json)
Hash identifier:          +KaMxnnAYNsNLYsAnKqDhQY5h+djcMoxpbz7TenMoB8=
Subject key identifier:   6C:6A:06:FD:9C:23:AA:B2:DD:65:A6:35:11:A5:41:68:A6:67:62:63
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Certificate issuer:       /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
Manifest number:          9E
Signing time:             Fri 19 Jun 2026 07:41:18 +0000
Manifest this update:     Fri 19 Jun 2026 07:41:17 +0000
Manifest next update:     Fri 26 Jun 2026 07:41:17 +0000
Files and hashes:         1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: 5AmlDAnQiJTYYpDlZIXzSTW7Lq3qucwiPlL9KWByY6M=)
                          2: ABF8D808CA6D11F084F59728C4F9AE02.roa (hash: CpehDruHAKWYlilkVXEQKfS5FGCQ1Hj+67P+aQNX0UE=)
                          3: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: ubB2L+A+WYJ8AjqCrJi8J5YRaDtXq+7jruwojcEkTbc=)
                          4: 8EAC217CCA5611F089E70D44C4F9AE02.roa (hash: XXxBCtuO8EG8rucnL16es476f6BaiYAikV+U/4E8csQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
                          rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Jun 2026 07:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
        Validity
            Not Before: Jun 19 07:41:17 2026 GMT
            Not After : Jun 26 07:41:17 2026 GMT
        Subject: CN=6a34f29d-1d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:90:9b:d7:60:81:93:ee:d2:d9:a7:99:68:
                    62:5d:07:1c:ae:d4:f3:22:34:7f:85:d8:ef:4c:21:
                    73:fa:d7:c1:c3:36:6c:87:60:67:3d:4f:15:3a:1d:
                    43:0a:99:18:e3:8d:53:59:18:39:1f:13:81:d8:72:
                    f5:98:9b:22:b6:9c:c7:5a:fd:88:e7:c9:6e:5b:ba:
                    38:87:e5:cd:7d:14:2d:c3:c8:77:2a:e6:69:3c:f0:
                    14:be:3f:9f:86:f8:b6:5d:8e:f9:d1:60:ea:d4:fd:
                    bb:8c:a7:a7:09:87:04:cd:95:f1:08:b1:9d:23:08:
                    6b:53:5c:3e:b0:c6:56:a3:1c:07:ba:02:a2:dc:12:
                    7b:88:b5:a4:27:b3:bf:f5:6c:7b:68:96:cf:1c:7d:
                    f5:34:b1:25:1e:99:2b:0f:e8:84:f1:ee:02:09:9a:
                    5a:26:4a:7b:98:a4:2f:b7:9e:e7:e0:6b:9b:8f:56:
                    2a:77:c3:02:34:45:5a:23:99:56:04:c7:3b:00:33:
                    78:64:91:0c:3b:d6:83:51:d4:30:fc:ff:ad:8e:ed:
                    27:85:cf:ed:c6:37:b2:91:f8:fd:92:69:60:a2:9a:
                    ed:59:a4:1c:67:13:8c:65:06:e8:9c:29:22:2f:3f:
                    0a:e8:18:57:83:00:ae:81:21:0c:1d:7f:50:f0:36:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6A:06:FD:9C:23:AA:B2:DD:65:A6:35:11:A5:41:68:A6:67:62:63
            X509v3 Authority Key Identifier:
                keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:6f:15:7e:90:e0:a2:56:67:1b:85:3d:e5:0d:2b:db:78:26:
         6e:72:6f:7d:5d:4a:37:98:d6:b1:83:92:c7:cf:5c:7e:50:22:
         14:41:11:27:90:03:06:1a:a3:7f:44:bc:fc:7b:27:3b:b0:79:
         19:69:76:a9:42:93:df:01:95:69:55:cb:ce:62:95:dc:1a:50:
         ba:c0:76:c0:4e:d2:de:dd:5b:dd:0b:0f:31:27:fc:df:f7:62:
         e3:63:72:09:f8:9b:15:4b:dc:3a:19:b3:a0:d7:94:d7:e7:98:
         a4:29:19:7b:19:07:af:de:03:16:c6:30:e3:e2:49:0f:4b:45:
         dc:c3:0c:7b:da:8e:ef:c1:fd:d5:99:74:68:f5:d1:8d:11:ac:
         1d:5d:84:e3:17:f3:ab:79:c1:01:37:7a:79:a4:71:35:13:86:
         7d:2e:29:73:e2:f6:79:83:94:6d:70:b9:10:0e:3b:5b:18:aa:
         93:b1:1f:0a:6c:d4:95:9e:1b:a4:99:cc:0a:b1:e2:28:fa:6d:
         5d:7a:b2:a1:a9:53:4f:07:4f:cc:2a:ae:c5:a2:c1:25:d1:f0:
         6f:8b:d9:fe:07:3d:b5:15:86:05:0b:dc:27:fd:ef:ca:19:a3:
         18:4c:0d:7f:6c:6a:58:f0:6c:88:4d:56:ca:69:9b:d4:ea:8e:
         6b:f8:e5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:02:02 2026 by rpki-client