Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
File:                     s47RYTLcuXiWdncaiwnkUJue1Pk.mft (raw, json)
Hash identifier:          hBLQkKcMmMDkpdJFiVzd2FP1ZSonQO2CT7TQWRSpw9A=
Subject key identifier:   70:68:C9:2B:6D:85:96:EE:2E:D0:62:29:94:55:18:0B:26:93:5D:0A
Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
Certificate issuer:       /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
Manifest number:          90
Signing time:             Mon 01 Jun 2026 08:18:42 +0000
Manifest this update:     Mon 01 Jun 2026 08:18:41 +0000
Manifest next update:     Mon 08 Jun 2026 08:18:41 +0000
Files and hashes:         1: s47RYTLcuXiWdncaiwnkUJue1Pk.crl (hash: 2na/8pNMZvnNG9tEgbxSvzu8LJwdqG1piKt6W+VEvqY=)
                          2: BEB06ADA944211F08A761970C4F9AE02.roa (hash: kk5sjyLutQjUsbYJim6fXXwfLma+mT+CCDWR+53e7jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl
                          rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
        Validity
            Not Before: Jun  1 08:18:41 2026 GMT
            Not After : Jun  8 08:18:41 2026 GMT
        Subject: CN=6a1d4062-05b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:15:04:f8:f4:61:3e:35:a2:71:95:e4:28:0d:
                    78:5f:5e:c7:24:81:b6:0f:de:ec:f7:68:a3:d6:a1:
                    01:a5:4b:b3:4f:c5:62:39:81:ff:60:ce:7f:92:8e:
                    11:f8:0d:08:f9:63:2a:59:be:5a:5a:8d:71:5e:17:
                    78:7b:09:76:01:da:19:47:cc:4a:69:b1:76:8e:10:
                    20:56:b6:8f:fb:8c:13:e2:5b:4e:2d:85:8e:de:41:
                    23:d4:b4:35:83:a2:ec:50:fe:82:3c:8b:ce:4e:26:
                    e6:81:1f:d4:7f:33:6c:03:19:f1:23:bd:98:b0:98:
                    10:e1:ab:2a:e2:17:2f:65:87:15:dd:e0:9f:ff:f6:
                    2f:3e:7d:93:e5:6e:1d:00:92:15:53:dd:52:28:a2:
                    e3:1b:40:06:a9:c4:ca:8f:c7:6f:36:ba:e7:fb:8c:
                    dc:62:16:55:3b:3a:92:17:77:10:ad:db:93:a7:ef:
                    6a:d7:2c:f4:02:62:15:45:fa:66:8f:85:ac:b7:36:
                    cd:23:bd:fe:b0:6e:03:22:1f:cd:44:79:6a:d0:3a:
                    23:b7:69:75:22:74:7a:ed:9b:95:c3:d6:4b:d9:b0:
                    6b:f6:aa:aa:35:64:70:45:21:4d:16:7c:43:07:cb:
                    43:5e:f3:c5:95:11:81:e9:3a:20:b1:e9:c5:49:3d:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:68:C9:2B:6D:85:96:EE:2E:D0:62:29:94:55:18:0B:26:93:5D:0A
            X509v3 Authority Key Identifier:
                keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:3b:ce:63:ae:e5:34:c7:b6:5b:b9:97:0b:85:1e:e2:a8:
         98:ea:f3:f2:23:4b:37:06:da:c8:28:cf:b5:13:7f:4c:cd:45:
         99:5b:74:2b:17:0e:6f:e9:2d:42:0c:1c:37:6c:61:6e:df:f3:
         38:60:74:a9:40:87:eb:31:17:dc:40:27:0f:96:0a:fa:bf:53:
         5a:99:e7:59:b0:fd:83:40:56:b7:5c:6c:a1:ec:41:de:52:61:
         6d:39:23:46:91:fa:fd:6e:9a:c3:42:d9:18:8d:f5:83:6e:97:
         f9:c5:d4:6e:6b:ce:1c:48:54:ef:2a:8f:67:cd:80:3b:64:7d:
         a1:4f:c7:cc:42:60:93:f6:e1:e7:db:1a:33:4b:2a:d8:66:89:
         49:24:4d:eb:d7:59:5f:c9:2d:e8:49:a8:da:5c:28:b3:77:80:
         79:3b:8b:25:8b:95:67:86:15:ac:5c:7b:1a:b3:7a:61:bc:a7:
         c4:9f:04:ff:0f:48:a2:81:22:6d:35:f3:f6:d6:20:fe:45:4e:
         2c:69:80:3f:1f:dd:08:7c:98:c5:62:53:32:bd:c6:1f:a8:5b:
         22:5f:54:f7:e2:16:38:88:1b:4b:70:0e:84:05:8e:05:1a:b8:
         ba:07:e2:27:a3:56:b0:8c:7e:74:70:28:bf:dd:1b:c1:a3:c5:
         a9:1d:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:06 2026 by rpki-client