Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
File:                     rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json)
Hash identifier:          dMfgKMtC+HQuKI0rHVkFyIcsLfXGbxoYpXPWwVpcpfY=
Subject key identifier:   6E:DB:05:8D:50:D5:D7:46:4B:C3:08:FB:6D:EB:BA:BD:D6:E1:8B:71
Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
Certificate issuer:       /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Certificate serial:       034F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
Manifest number:          0349
Signing time:             Tue 23 Jun 2026 01:03:53 +0000
Manifest this update:     Tue 23 Jun 2026 01:03:52 +0000
Manifest next update:     Tue 30 Jun 2026 01:03:52 +0000
Files and hashes:         1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: ZXI9EMq/M1AIn+pHtOPuDPVoSyoQDVSf3bUxQKRtBzU=)
                          2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: UvlKwQqXfNX6TNtFAKTDpqec7TKizL2BqsLfAWubGJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
                          rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
        Validity
            Not Before: Jun 23 01:03:52 2026 GMT
            Not After : Jun 30 01:03:52 2026 GMT
        Subject: CN=6a39db79-6813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:eb:f6:53:70:29:fe:08:9a:b9:c3:e0:66:c2:
                    1f:38:60:4f:7a:2e:bd:cd:d7:0d:d2:54:be:26:d4:
                    8c:25:b1:54:b8:55:9d:6e:15:71:28:19:b0:73:e1:
                    12:ab:ce:d7:e7:98:88:10:90:16:11:3c:71:e6:92:
                    a2:0e:11:6d:85:ff:2a:8f:71:f1:56:1d:61:c8:66:
                    b5:d6:fd:c4:2c:70:67:82:43:29:2f:85:69:2c:ec:
                    46:40:cb:70:19:81:84:d0:5b:16:fd:ef:3c:e3:df:
                    ab:94:4c:f1:ac:cc:b1:8e:7d:ec:0c:d0:4e:f1:3d:
                    3b:7a:a0:45:d7:11:e9:56:d2:52:7d:7f:35:04:1e:
                    49:38:24:ba:b7:cb:8e:e4:89:e9:a6:cc:3a:6d:84:
                    90:76:75:d2:3e:b5:6d:a5:85:52:e9:b9:20:54:47:
                    fd:ea:63:24:af:a9:b9:e2:1b:23:01:09:99:7b:b1:
                    84:62:d6:42:58:cb:51:01:e0:f2:38:93:d0:ea:2e:
                    55:ee:53:c2:37:aa:43:df:9a:8a:06:1e:61:f9:f2:
                    43:19:d1:f0:cb:40:cf:b8:37:3d:2a:6f:da:66:98:
                    20:a6:0c:90:f1:8a:91:1d:bc:e6:66:d5:a7:07:0b:
                    cd:38:88:19:1e:e2:dd:60:80:51:8f:fd:67:27:28:
                    04:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DB:05:8D:50:D5:D7:46:4B:C3:08:FB:6D:EB:BA:BD:D6:E1:8B:71
            X509v3 Authority Key Identifier:
                keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f0:97:01:bf:d3:ac:3d:86:4a:72:28:bf:ce:5a:1d:0c:c9:
         65:f6:f1:40:57:30:1c:09:7b:e5:a2:f8:b3:7d:75:eb:e7:2e:
         88:09:22:1a:1b:db:79:34:48:7f:bb:46:e2:ff:55:cb:ff:71:
         c2:06:dd:43:ca:b5:a5:08:da:be:e0:23:6b:c4:12:a0:ed:d4:
         0a:4d:bc:9c:18:fe:b0:4b:f5:40:3f:9b:15:71:93:9b:02:1a:
         c5:6b:99:b2:53:8e:a5:c9:ff:95:8e:82:6f:60:80:1a:94:4b:
         cf:f5:05:ab:ca:13:82:98:cd:23:68:63:73:07:31:e6:b5:6c:
         0c:d6:a0:ed:7c:42:61:e8:e5:90:5b:ed:aa:f4:cd:77:92:2c:
         a3:53:e5:71:bf:40:aa:a8:91:f7:55:27:f2:c7:1f:72:81:dd:
         03:1c:87:88:66:fc:ed:58:f7:0e:df:cd:94:3b:8d:3a:61:21:
         c5:58:3a:03:86:91:8b:88:af:13:ad:90:d3:cd:e4:2a:a9:b5:
         4b:c2:a4:ee:3a:3f:cd:e3:65:b7:7b:42:7c:89:49:25:d5:1d:
         bb:b7:44:b8:8c:a2:1b:eb:8d:08:7f:6c:d3:09:c4:e4:66:1b:
         91:4f:25:c8:2c:04:b0:d4:d0:79:05:be:29:22:c2:9c:73:c7:
         0e:a8:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:14:55 2026 by rpki-client