Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
File:                     9pdbCtxHKKQNClkNM23U-ro5DwA.mft (raw, json)
Hash identifier:          gQm08SkyLZ5XDmta8Gka1Ru8IS9lWxWGAdVvWFeDIN8=
Subject key identifier:   10:4A:57:8F:74:09:09:39:32:1A:F8:18:B6:88:9D:10:2E:7E:B0:F6
Authority key identifier: F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00
Certificate issuer:       /CN=A913FA2D/serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
Manifest number:          60
Signing time:             Mon 01 Jun 2026 08:53:29 +0000
Manifest this update:     Mon 01 Jun 2026 08:53:29 +0000
Manifest next update:     Mon 08 Jun 2026 08:53:29 +0000
Files and hashes:         1: 9pdbCtxHKKQNClkNM23U-ro5DwA.crl (hash: VSdQVp65N4SJMaqgGI96sm9/E9QIxvZ51ghlftk/3Ik=)
                          2: F82BF6A8D3FD11F08BA98C7BC4F9AE02.roa (hash: 6WkyvNNnzEKbhZLPxsCnSzPE8ILtaJ60SG7+lHKUE78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl
                          rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FA2D, serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00
        Validity
            Not Before: Jun  1 08:53:29 2026 GMT
            Not After : Jun  8 08:53:29 2026 GMT
        Subject: CN=6a1d4889-9301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:f4:17:f4:4b:d8:45:16:0c:37:13:06:b2:
                    59:50:03:e8:14:b7:bd:02:6b:58:05:cd:6b:39:c2:
                    ca:09:2c:6b:52:44:a1:ee:73:72:35:29:63:14:e3:
                    96:9d:a8:03:89:3f:9c:d4:b8:8d:35:e1:3e:3e:b4:
                    53:c3:ac:63:b2:de:c5:cb:94:c7:13:64:e7:0d:05:
                    21:15:af:66:2e:04:3b:43:b6:76:39:5f:59:ad:51:
                    78:86:1d:15:9f:17:65:f8:5d:58:91:29:03:98:91:
                    54:48:ef:f4:f3:e4:c7:05:57:7d:88:81:14:88:5c:
                    ff:bd:cb:df:55:34:84:4c:64:8b:1f:09:07:5e:f2:
                    c9:cd:f7:83:3d:8a:b8:d4:ac:39:7a:99:39:f4:3a:
                    c8:b5:cd:88:0a:5b:de:14:a0:d1:57:a1:20:b0:16:
                    f4:6b:5c:2b:ca:b4:f8:07:46:22:32:89:77:45:85:
                    05:e8:1d:15:ed:ab:53:58:35:3f:b4:2f:61:6a:c8:
                    ed:c8:a5:65:9c:e5:df:d2:01:04:65:2c:65:2c:df:
                    72:f8:49:62:fd:75:86:60:f3:bf:c1:17:d5:a7:f5:
                    7a:9a:7c:c1:79:65:36:55:47:01:2d:27:09:9f:8e:
                    21:4d:7a:7b:02:ca:e5:11:42:f3:db:9c:80:4c:3b:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4A:57:8F:74:09:09:39:32:1A:F8:18:B6:88:9D:10:2E:7E:B0:F6
            X509v3 Authority Key Identifier:
                keyid:F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:d5:ae:38:96:17:af:ce:f2:ad:be:de:54:cd:9d:24:85:83:
         f6:16:37:f9:db:5a:32:7b:03:e0:1a:b7:61:29:f1:37:4a:4f:
         fc:39:30:97:06:c5:4f:b6:aa:7c:0a:e1:6d:56:68:4c:aa:2e:
         33:23:81:a7:c5:01:64:11:f8:e7:62:bc:18:9a:81:5c:73:0e:
         85:a7:7b:74:81:9c:bc:38:dc:0f:85:39:c0:d7:a8:7a:5d:3f:
         bd:09:5b:82:50:d5:ec:0a:ea:d4:18:e1:7d:b9:a3:f7:cc:95:
         20:93:93:96:3d:d9:0a:78:71:f4:17:ad:d3:f6:87:28:f6:a0:
         c0:04:b0:15:48:a2:ef:1c:a7:b3:55:1b:bd:0e:fc:10:7e:f8:
         16:73:3e:b2:b2:2c:8d:ee:97:7e:98:f2:9e:17:09:d6:3c:ab:
         02:e4:6a:a4:16:d6:17:4f:c3:b6:49:3e:f8:30:7f:e5:1b:6d:
         00:a2:d0:fc:79:5f:89:06:88:76:47:73:3f:9f:00:20:a5:2e:
         84:c3:b9:55:a2:2d:b2:5b:fe:7c:c5:01:27:d8:0f:4e:39:2b:
         45:c7:e5:2c:62:1f:f4:e3:2f:3d:59:ec:dc:c0:88:9b:b4:6e:
         f0:2c:0a:b2:bc:2e:fd:2b:b7:73:b8:42:41:18:07:b6:9d:38:
         b2:48:33:a5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RkEyRDExMC8GA1UEBRMoRjY5NzVCMEFEQzQ3MjhBNDBEMEE1OTBEMzM2REQ0RkFC
QTM5MEYwMDAeFw0yNjA2MDEwODUzMjlaFw0yNjA2MDgwODUzMjlaMBgxFjAUBgNV
BAMTDTZhMWQ0ODg5LTkzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdSfQX9EvYRRYMNxMGsllQA+gUt70Ca1gFzWs5wsoJLGtSRKHuc3I1KWMU45ad
qAOJP5zUuI014T4+tFPDrGOy3sXLlMcTZOcNBSEVr2YuBDtDtnY5X1mtUXiGHRWf
F2X4XViRKQOYkVRI7/Tz5McFV32IgRSIXP+9y99VNIRMZIsfCQde8snN94M9irjU
rDl6mTn0Osi1zYgKW94UoNFXoSCwFvRrXCvKtPgHRiIyiXdFhQXoHRXtq1NYNT+0
L2FqyO3IpWWc5d/SAQRlLGUs33L4SWL9dYZg87/BF9Wn9XqafMF5ZTZVRwEtJwmf
jiFNensCyuURQvPbnIBMO485AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEEpXj3QJ
CTkyGvgYtoidEC5+sPYwHwYDVR0jBBgwFoAU9pdbCtxHKKQNClkNM23U+ro5DwAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGQTJELzA3NzhFNEE4RDNG
NTExRjA5RTk3QUQ0Q0M0RjlBRTAyLzlwZGJDdHhIS0tRTkNsa05NMjNVLXJvNUR3
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOXBkYkN0eEhLS1FOQ2xrTk0yM1Utcm81RHdBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG
QTJELzA3NzhFNEE4RDNGNTExRjA5RTk3QUQ0Q0M0RjlBRTAyLzlwZGJDdHhIS0tR
TkNsa05NMjNVLXJvNUR3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDj1a44lhevzvKtvt5UzZ0khYP2Fjf521oyewPgGrdhKfE3Sk/8OTCXBsVPtqp8
CuFtVmhMqi4zI4GnxQFkEfjnYrwYmoFccw6Fp3t0gZy8ONwPhTnA16h6XT+9CVuC
UNXsCurUGOF9uaP3zJUgk5OWPdkKeHH0F63T9oco9qDABLAVSKLvHKezVRu9DvwQ
fvgWcz6ysiyN7pd+mPKeFwnWPKsC5GqkFtYXT8O2ST74MH/lG20AotD8eV+JBoh2
R3M/nwAgpS6Ew7lVoi2yW/58xQEn2A9OOStFx+UsYh/04y89WezcwIibtG7wLAqy
vC79K7dzuEJBGAe2nTiySDOl
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:26:03 2026 by rpki-client