Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft
File:                     cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft (raw, json)
Hash identifier:          IAEf1uk+hlBCgPWgbSNglMxpBYzye0+sMw+92eyQ9N0=
Subject key identifier:   D4:DD:19:A9:40:BE:A0:E3:3C:1A:10:AE:D6:4A:4A:9B:DF:64:58:BB
Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
Certificate issuer:       /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Certificate serial:       09C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft
Manifest number:          0988
Signing time:             Mon 22 Jun 2026 20:10:56 +0000
Manifest this update:     Mon 22 Jun 2026 20:10:55 +0000
Manifest next update:     Mon 29 Jun 2026 20:10:55 +0000
Files and hashes:         1: cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl (hash: FsGcON3SJOM1ZQZoQhlFes7UjBQh63NhWYybqScpjcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl
                          rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 20:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2502 (0x9c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CA4B, serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
        Validity
            Not Before: Jun 22 20:10:55 2026 GMT
            Not After : Jun 29 20:10:55 2026 GMT
        Subject: CN=6a3996d0-798a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:4a:e0:a5:59:66:ba:24:5c:89:8e:80:4a:
                    72:01:92:4f:09:a6:3d:85:5a:d6:59:6e:b7:2e:d9:
                    c3:90:fc:77:2d:a0:07:cf:26:ec:5f:74:d0:2b:83:
                    26:0c:5e:91:a3:ff:af:70:0b:63:72:8b:34:e1:dc:
                    66:9f:db:43:1d:38:db:91:96:6c:af:37:1b:6b:f6:
                    2b:39:ad:d5:85:16:26:25:5c:29:bc:3d:e8:e3:2d:
                    7f:ef:44:a7:87:f3:3c:37:db:c2:0d:6f:f4:ae:e0:
                    f6:d6:13:95:27:f3:fc:96:5d:73:3c:2a:a5:f8:b8:
                    3e:96:9c:f6:3c:7f:43:c5:61:51:90:08:ec:2b:b8:
                    d2:a0:6a:77:90:78:ba:9a:b0:b8:01:ba:2d:80:60:
                    94:8d:18:37:74:85:b8:61:82:7f:68:b5:54:ee:96:
                    45:1a:a9:68:cb:20:e7:f0:ad:e0:99:82:e2:09:65:
                    28:1e:d3:45:cb:cb:de:fe:a5:1a:58:c2:7d:b1:30:
                    49:3a:4b:9e:7e:49:4e:d1:37:34:e1:89:2c:c8:92:
                    4f:1a:59:d4:1f:0d:27:0e:48:29:09:41:ba:17:49:
                    1d:5a:ee:78:32:d0:b6:e8:71:99:30:9f:a7:9d:42:
                    56:37:08:e1:60:f3:76:5f:9a:5f:9b:6d:87:42:9f:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DD:19:A9:40:BE:A0:E3:3C:1A:10:AE:D6:4A:4A:9B:DF:64:58:BB
            X509v3 Authority Key Identifier:
                keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e7:b6:42:a1:03:15:c2:82:b8:3b:48:4a:1e:df:fe:8f:db:
         b4:31:d3:de:c0:55:e1:2c:de:e1:6f:94:2f:f1:09:94:31:d9:
         8d:15:f7:50:0f:c6:d9:e0:05:56:cb:1d:de:43:c6:30:9a:11:
         cf:48:40:69:62:b2:0e:9c:a8:e6:63:58:77:fe:1f:6c:ad:cf:
         a7:25:92:e1:c1:6a:d5:71:ed:50:c7:af:a2:9e:fb:3f:9a:bf:
         20:02:e2:27:f4:97:be:76:30:10:38:d6:58:05:f7:d6:09:d2:
         87:0d:85:8d:07:26:f1:af:e4:16:91:6e:15:7e:fc:bd:db:f1:
         11:97:55:d7:15:98:a5:8d:66:3f:d4:80:30:91:ec:e1:14:5b:
         93:32:33:99:da:16:a9:1e:fd:5b:a8:62:84:85:b7:bf:ef:4a:
         be:bb:1e:1b:de:d6:36:ff:f9:82:9e:cf:3e:c0:ef:6d:83:79:
         cd:ce:30:4a:a9:be:02:4d:72:78:c3:7b:e3:b0:e5:0a:43:58:
         df:09:65:55:8b:1e:6e:a5:73:85:09:0d:ed:2a:59:66:18:54:
         80:37:6e:cb:05:9e:12:78:f5:c7:3e:12:b2:a2:b2:07:3b:73:
         1c:27:ac:38:bc:5a:a8:c3:fc:50:cb:f5:d8:fa:80:6d:3e:db:
         7c:a6:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:06 2026 by rpki-client