Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
File:                     Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json)
Hash identifier:          KhU5psEIBHZM3B6YhvBJJscWkVoE3SljTMCYs0dOPIw=
Subject key identifier:   54:62:D7:C7:9A:F2:CA:A9:A2:C2:9F:FA:02:1B:C7:A5:57:EB:E0:26
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Certificate issuer:       /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial:       07F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
Manifest number:          07E0
Signing time:             Mon 22 Jun 2026 21:23:49 +0000
Manifest this update:     Mon 22 Jun 2026 21:23:49 +0000
Manifest next update:     Mon 29 Jun 2026 21:23:49 +0000
Files and hashes:         1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: sfrr/33aC5ivgOlCwpVhioqTwDez2aAu43HkzvwRlM4=)
                          2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: yigo59Gar+8S1aiuGB+d0Lm9hAb5K16jebQb9hDYj9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
                          rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 21:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
        Validity
            Not Before: Jun 22 21:23:49 2026 GMT
            Not After : Jun 29 21:23:49 2026 GMT
        Subject: CN=6a39a7e5-fcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:ac:2a:8c:d7:cd:ae:1a:9c:2f:f8:c8:4c:
                    7f:3f:f8:64:1f:50:58:66:8f:58:4d:e7:0f:ea:1d:
                    f6:b8:fd:8a:39:6e:02:c8:52:18:35:f1:97:b7:e3:
                    c1:01:51:63:9a:ff:28:48:e0:f5:8d:82:ef:7b:d5:
                    c0:fa:ea:25:89:22:34:91:2f:17:47:7a:51:7f:96:
                    0d:c8:51:94:61:55:24:e9:36:27:b2:fb:df:0f:c5:
                    3b:1b:a4:bf:b0:5a:6d:71:75:a9:c5:8d:34:7b:aa:
                    bf:0d:c8:24:28:2c:2d:8e:cf:0c:d6:a9:35:8c:ec:
                    97:80:3f:9e:91:ef:c8:bd:c2:32:95:2a:91:8c:80:
                    a2:b6:d6:cc:7b:ec:26:7b:27:0a:e6:c8:6d:3f:54:
                    cb:25:4f:61:db:92:7b:b6:0c:77:6f:c7:aa:f7:e7:
                    20:03:be:9b:63:f9:ed:45:0d:e8:92:e2:b6:1d:c4:
                    4c:8b:a7:c4:db:95:38:ea:58:51:be:f8:aa:86:52:
                    d3:d8:09:61:e8:32:b0:b6:02:6a:77:8b:bb:59:22:
                    85:88:8e:ef:c2:5b:4b:e2:45:a5:68:24:7a:63:86:
                    54:a4:c8:9b:46:1f:6d:80:62:c8:0a:71:85:01:f8:
                    df:ab:d9:97:4b:44:7a:91:54:1d:bd:bf:a3:c3:de:
                    c0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:62:D7:C7:9A:F2:CA:A9:A2:C2:9F:FA:02:1B:C7:A5:57:EB:E0:26
            X509v3 Authority Key Identifier:
                keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:09:c9:76:df:7d:01:85:55:1b:24:ac:bb:c1:29:8c:7b:e8:
         77:af:d3:e0:40:90:db:3c:ec:d2:0f:e4:0a:ee:73:1b:97:90:
         88:be:b8:23:b3:3b:e0:b6:14:05:6d:06:83:96:54:14:07:86:
         1a:83:d9:ca:f3:6e:29:c1:4d:8d:d5:37:c0:e0:cd:72:7b:a6:
         e6:86:86:10:8b:2c:5c:cb:ae:56:13:35:84:64:8b:55:10:f7:
         f4:47:f9:db:e1:a9:a2:b7:89:90:21:a2:81:de:99:73:ca:2b:
         6c:19:ff:bd:a7:5d:d4:9b:dc:2e:75:4a:63:b6:39:3e:3e:78:
         19:0b:1f:d6:14:5c:04:a2:63:29:93:4c:98:c6:d5:b7:1b:e0:
         fc:15:72:3e:32:67:5b:3b:ac:ad:38:d1:d7:c0:ae:9e:f2:a4:
         b3:4f:a3:f7:5e:31:68:f3:db:e1:aa:92:40:8e:b0:39:3f:43:
         0c:62:ee:ec:83:8f:70:98:9e:0c:0e:16:ce:d2:f5:4b:2e:24:
         2f:53:67:bc:2d:49:5b:36:a0:13:a3:91:77:40:b6:e0:ad:74:
         7a:ea:d2:77:1c:5d:bd:9a:30:a2:d4:67:a9:cc:b2:4e:ce:ca:
         77:f5:ef:9c:d4:48:b1:a0:c0:f2:57:a1:f2:c9:1e:1c:b3:b5:
         8b:df:46:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:37 2026 by rpki-client