Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
File:                     68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft (raw, json)
Hash identifier:          m50KF0PX/5cas+jrO0bwHGMt5VTc6lKoQ6glC2x5QU8=
Subject key identifier:   96:7F:E3:3E:C4:65:9C:23:87:BA:BE:04:73:85:1A:FC:95:58:1E:1D
Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20
Certificate issuer:       /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
Manifest number:          0276
Signing time:             Mon 15 Jun 2026 02:06:10 +0000
Manifest this update:     Mon 15 Jun 2026 02:06:10 +0000
Manifest next update:     Mon 22 Jun 2026 02:06:10 +0000
Files and hashes:         1: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl (hash: 9oXoSwV4b0Ufm/WIk/QLY+F93hRSjcfPckyv/M2pJoU=)
                          2: 98152E6C480111EFB2976238C4F9AE02.roa (hash: WkBrG4Ptn2oOu7MUQprdMpFUUGYiR0bDGLQIFpoza1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl
                          rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
        Validity
            Not Before: Jun 15 02:06:10 2026 GMT
            Not After : Jun 22 02:06:10 2026 GMT
        Subject: CN=6a2f5e12-52ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:e5:f8:73:74:73:f1:c2:14:1e:51:21:84:
                    e2:57:84:d6:58:ed:05:6c:4b:c7:06:fa:33:4c:fc:
                    5b:be:88:0a:c0:5c:34:a4:7f:e0:1d:ec:8b:f7:f0:
                    d7:05:5f:f0:76:30:af:d3:c0:a8:a2:91:c2:e5:bb:
                    4b:21:9d:06:7a:bc:54:e4:d8:58:f8:3d:c9:52:69:
                    9f:30:5c:92:28:21:e0:4d:65:c5:27:24:4e:88:32:
                    e8:f2:b1:ce:7e:78:4d:96:83:64:b7:7f:48:5c:dd:
                    6f:96:bb:e2:6c:9a:0d:b6:d0:e1:b1:8a:1d:c8:46:
                    ef:e5:2d:74:b1:e5:08:79:bb:3e:78:16:1e:55:0c:
                    d2:ba:0d:32:30:24:0a:71:d9:0a:b3:43:08:92:fb:
                    6f:49:36:10:2d:26:b1:65:7b:13:cb:02:9b:b0:65:
                    51:af:10:93:d2:c9:cd:ba:eb:e4:f9:76:b3:6e:4d:
                    90:40:c2:35:45:29:5c:c4:03:58:bc:e1:29:ad:9f:
                    99:81:88:18:ce:2f:61:2f:1c:91:8c:25:5c:b4:5e:
                    8d:c0:7a:97:26:27:92:93:6a:fd:92:6d:a8:8e:62:
                    87:a7:de:59:b9:a2:70:77:69:9f:90:1e:d2:21:28:
                    15:67:21:fc:a3:a3:d8:57:8e:62:47:b5:36:1c:05:
                    22:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7F:E3:3E:C4:65:9C:23:87:BA:BE:04:73:85:1A:FC:95:58:1E:1D
            X509v3 Authority Key Identifier:
                keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8e:87:35:db:c4:8e:67:f3:94:63:42:36:0c:86:f7:f1:15:
         42:c9:b3:0d:7a:35:54:ab:0c:e8:3f:35:c6:90:5c:e7:5d:e3:
         9f:64:4b:19:22:35:dc:77:2a:1a:5b:13:ce:16:30:28:f9:0f:
         70:29:02:88:2e:7a:3f:da:f3:cc:0e:84:92:95:1c:12:39:a0:
         46:f1:74:84:2b:f2:19:5d:6e:8c:e6:ac:e3:19:12:a3:90:64:
         c2:71:f9:9e:99:4e:74:6d:2b:ab:5c:6b:1b:07:ea:76:cb:ed:
         82:0c:00:d1:02:e7:85:d3:3f:c9:42:78:d9:79:ec:24:fe:d3:
         79:d4:10:a7:00:8c:19:ba:11:9e:f4:42:93:0e:b0:a6:7d:22:
         08:97:41:21:a7:d2:41:2e:cf:cf:6c:5b:da:52:d6:01:e0:92:
         33:a5:ed:49:92:a0:36:02:cb:d6:f2:c5:cd:5a:ce:ba:83:17:
         9f:57:dc:ad:ec:7e:e5:e0:0f:a8:1c:58:ef:dc:2e:5c:51:ee:
         4e:71:30:b1:de:fa:3a:e6:18:92:37:0f:a8:a2:33:75:01:f8:
         5f:04:d5:13:4e:3b:9f:da:eb:b1:3e:14:e3:aa:05:fc:c3:d9:
         dd:3d:9d:5a:fb:f6:56:3b:d1:3d:a6:83:67:95:4d:4d:29:fd:
         55:ed:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 18:56:02 2026 by rpki-client