Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
File:                     60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json)
Hash identifier:          x3al/pyzUW7h+7UweOxTwSdVrq3seL6skx6X59uQspI=
Subject key identifier:   EE:12:A8:CF:59:97:8D:0F:11:77:40:96:78:CF:07:91:3A:80:BA:A0
Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
Certificate issuer:       /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
Manifest number:          95
Signing time:             Mon 01 Jun 2026 08:12:05 +0000
Manifest this update:     Mon 01 Jun 2026 08:12:05 +0000
Manifest next update:     Mon 08 Jun 2026 08:12:05 +0000
Files and hashes:         1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: Ydq5mjyCFOBJ27U47HgYQwkE/ZFwseyJ3vYs7wFEqlE=)
                          2: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 2Sh4HNxYtB9dGVF8vJ1SzNebK3nTgLRc3WLrBkkeJGc=)
                          3: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: KgTcEBQwyeNNEcPVGV0LGEJQJnqAyFvRcFGWQSUD/3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
                          rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
        Validity
            Not Before: Jun  1 08:12:05 2026 GMT
            Not After : Jun  8 08:12:05 2026 GMT
        Subject: CN=6a1d3ed5-e082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:d2:67:2b:ea:d6:54:d2:bc:0b:45:67:01:
                    1c:57:0a:5b:d0:5f:98:fc:42:55:2d:e3:04:e4:00:
                    b1:d5:bc:af:75:f0:b3:0c:98:5e:c2:ba:fc:5c:e9:
                    79:25:3a:0a:79:38:a9:88:e8:1a:3d:5a:ad:46:54:
                    14:ca:05:be:49:c2:29:56:9c:7a:66:95:e9:0f:b7:
                    b7:c8:e5:fc:c4:41:b1:df:22:d8:ac:1c:96:50:bd:
                    7e:0a:59:24:b2:bb:8c:08:15:cb:30:af:bb:fd:f1:
                    fc:82:40:13:c9:ad:17:44:c0:1c:14:06:49:c6:30:
                    dc:46:af:18:0e:f8:63:50:8e:21:c0:14:63:a2:34:
                    62:0d:74:85:f3:a1:a5:c0:61:b9:2c:68:ab:d1:1f:
                    19:e0:76:24:99:87:2d:35:f5:6d:9f:e1:84:fe:07:
                    15:da:75:8e:74:5a:61:59:c2:97:5f:f7:6b:a6:41:
                    8e:25:63:86:e3:1a:7d:12:a2:bd:71:2f:87:ea:20:
                    9e:4a:65:73:79:2b:31:0d:81:50:f1:50:a6:bd:11:
                    5a:7e:00:27:d9:04:20:a8:8a:bf:e3:b1:aa:4a:18:
                    68:e8:14:04:e9:5e:24:40:76:76:ff:05:95:3a:64:
                    43:3b:27:1b:bf:18:3c:4a:2d:52:eb:42:5a:d1:04:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:12:A8:CF:59:97:8D:0F:11:77:40:96:78:CF:07:91:3A:80:BA:A0
            X509v3 Authority Key Identifier:
                keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:14:87:ae:f0:33:f4:ea:0f:e6:91:a2:e1:f3:d1:5f:c4:fe:
         42:9a:d1:37:48:c3:46:a7:3f:ca:ae:41:04:9b:31:85:55:6f:
         64:c6:90:77:61:64:41:0b:18:1b:4a:31:92:6b:d4:f0:52:d7:
         8f:c3:50:3e:8b:fe:f9:09:7a:79:29:31:e5:65:62:4b:66:dc:
         ab:e1:44:9f:11:fa:20:4a:6f:03:ff:66:3e:ce:7a:c3:9e:43:
         fb:a8:11:03:92:6b:63:91:cb:24:e7:a2:04:85:89:83:29:c0:
         25:d0:43:c0:dd:6b:0a:27:ec:9c:42:12:78:2d:0e:ef:31:aa:
         ba:d4:54:1b:c7:c5:2a:03:94:4b:95:cc:19:f4:7e:06:1a:02:
         16:18:cd:0f:86:42:60:74:bc:02:6c:52:19:fa:c0:06:62:2d:
         9f:bc:dc:42:9c:f0:2b:1c:a3:59:48:5c:fe:76:35:b4:9c:90:
         30:7b:5b:32:3b:39:ad:ef:2b:68:48:8b:d2:25:02:99:04:e1:
         15:9f:dd:23:f0:cc:fc:fd:41:05:a9:d5:39:09:7a:52:ab:46:
         12:5e:48:7a:0a:64:34:2d:2d:eb:41:03:fc:2d:78:5d:5d:14:
         a0:6d:72:95:6e:5d:37:46:6f:69:c3:a0:99:93:ee:b8:60:e5:
         3d:92:dc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:16:00 2026 by rpki-client