Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
File:                     j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json)
Hash identifier:          baImrhihRqQEKkIvZvQlXQZTtdd/Fbp1KGk/yulXCn4=
Subject key identifier:   84:0A:7E:00:4A:6B:3C:09:B5:94:41:92:C5:44:95:36:02:83:45:6E
Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
Certificate issuer:       /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Certificate serial:       091C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
Manifest number:          0913
Signing time:             Sun 31 May 2026 20:51:07 +0000
Manifest this update:     Sun 31 May 2026 20:51:06 +0000
Manifest next update:     Sun 07 Jun 2026 20:51:06 +0000
Files and hashes:         1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: RxToYRfuzvL5VVRUR+E1gnUrvQ5joOwrDe+0JBbngCs=)
                          2: BA33C4CC638A11F090002541C4F9AE02.roa (hash: rgcQn0IdN1G4X2mCbx+TQwSEQO4ecdv1pRq56PdhirY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl
                          rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 20:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2332 (0x91c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
        Validity
            Not Before: May 31 20:51:06 2026 GMT
            Not After : Jun  7 20:51:06 2026 GMT
        Subject: CN=6a1c9f3b-311c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:52:7d:31:b9:af:58:03:88:94:53:0a:bd:51:
                    e8:1e:0c:eb:f6:42:3a:d2:fb:cb:1e:14:54:7c:3b:
                    c2:5f:aa:15:9c:bd:3d:bb:cb:08:b7:35:c2:ef:87:
                    26:58:15:be:ba:7a:f7:97:65:3c:b2:62:5f:c9:ca:
                    b1:6d:06:0c:73:92:04:ec:93:32:fb:e1:a3:7e:ac:
                    da:c9:97:89:e3:51:1f:56:a7:a3:40:ce:41:84:89:
                    6d:39:d8:b2:58:83:82:8c:ee:1f:56:88:37:86:e9:
                    64:45:5b:25:1b:f6:83:22:65:61:6b:ac:1a:dc:60:
                    28:67:8a:a8:e1:a5:20:f4:50:a9:df:55:fa:6c:3f:
                    7e:50:45:1c:1c:60:1d:d4:bd:3c:c4:b5:54:77:7b:
                    91:4e:f9:ff:bc:27:44:68:b1:d6:f9:49:58:69:08:
                    75:d1:df:bf:ed:dc:82:0f:f4:9a:b1:ce:d4:1c:11:
                    28:99:50:c8:76:00:8f:f2:cd:61:df:f2:c3:2b:f4:
                    6e:8e:69:34:27:8c:72:7e:93:17:8b:92:a6:42:e2:
                    09:30:09:0b:6b:02:bd:2e:66:31:6c:79:b4:ec:f4:
                    53:f1:ca:ea:c8:43:71:4a:d5:6d:90:e5:0f:10:c4:
                    2b:f7:11:43:c3:f9:65:61:24:63:e2:aa:97:dd:b5:
                    f4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0A:7E:00:4A:6B:3C:09:B5:94:41:92:C5:44:95:36:02:83:45:6E
            X509v3 Authority Key Identifier:
                keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:53:33:8c:11:a4:33:b2:92:57:a6:ba:ad:ed:19:10:61:ea:
         ae:9a:d7:b4:f5:c0:9a:f1:21:18:12:8b:91:76:5c:bd:84:d8:
         99:48:2a:66:89:6d:74:1c:ba:e3:9a:be:aa:ea:df:50:39:2b:
         90:80:93:e5:a3:79:09:19:1b:81:16:02:ba:36:38:9d:47:ba:
         07:3b:af:d7:b2:7f:a6:72:be:f3:f1:90:a3:ab:1b:72:c5:e0:
         0f:4f:43:de:82:01:9b:a5:8b:18:9b:ec:eb:96:ca:f6:e5:2e:
         bc:ff:55:2a:1f:54:a9:fb:8b:e0:f6:42:f3:a5:aa:83:18:7c:
         6e:4d:53:82:6a:0b:01:e7:ec:5e:54:c4:18:90:c7:d7:34:01:
         33:09:2e:1b:dd:da:a5:54:16:f3:2c:24:f2:83:60:eb:73:27:
         05:9c:4d:fa:5f:29:27:a7:0f:85:69:12:20:f1:1c:7f:e4:52:
         2e:5c:7d:08:9a:52:78:29:8c:ce:b3:d1:a8:52:40:b5:87:b4:
         22:58:3f:ae:a8:cd:8d:96:95:51:31:40:4d:57:0a:39:04:86:
         6d:ee:f7:9d:8e:c2:48:0f:5d:50:8e:20:ed:96:c4:3c:5c:5a:
         0e:b7:4c:22:92:79:25:c9:b2:0a:2a:36:8b:dc:dc:f3:94:62:
         40:fa:e2:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy
Qjk5QkQ5NkQwHhcNMjYwNTMxMjA1MTA2WhcNMjYwNjA3MjA1MTA2WjAYMRYwFAYD
VQQDEw02YTFjOWYzYi0zMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/FJ9MbmvWAOIlFMKvVHoHgzr9kI60vvLHhRUfDvCX6oVnL09u8sItzXC74cm
WBW+unr3l2U8smJfycqxbQYMc5IE7JMy++GjfqzayZeJ41EfVqejQM5BhIltOdiy
WIOCjO4fVog3hulkRVslG/aDImVha6wa3GAoZ4qo4aUg9FCp31X6bD9+UEUcHGAd
1L08xLVUd3uRTvn/vCdEaLHW+UlYaQh10d+/7dyCD/Sasc7UHBEomVDIdgCP8s1h
3/LDK/Rujmk0J4xyfpMXi5KmQuIJMAkLawK9LmYxbHm07PRT8crqyENxStVtkOUP
EMQr9xFDw/llYSRj4qqX3bX0kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQKfgBK
azwJtZRBksVElTYCg0VuMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB
MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy
VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq
M1hZeE5heVBuQm9ybWIyVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkFMzjBGkM7KSV6a6re0ZEGHqrprXtPXAmvEhGBKLkXZcvYTYmUgqZoltdBy6
45q+qurfUDkrkICT5aN5CRkbgRYCujY4nUe6Bzuv17J/pnK+8/GQo6sbcsXgD09D
3oIBm6WLGJvs65bK9uUuvP9VKh9UqfuL4PZC86Wqgxh8bk1TgmoLAefsXlTEGJDH
1zQBMwkuG93apVQW8ywk8oNg63MnBZxN+l8pJ6cPhWkSIPEcf+RSLlx9CJpSeCmM
zrPRqFJAtYe0Ilg/rqjNjZaVUTFATVcKOQSGbe73nY7CSA9dUI4g7ZbEPFxaDrdM
IpJ5JcmyCio2i9zc85RiQPrijQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:33 2026 by rpki-client