Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File:                     Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier:          kVPpiz0s5JB1GWbczu3lDrnJDtzRmKGHB8ija9aAtyo=
Subject key identifier:   59:F9:7F:F4:91:8E:9F:69:1C:5C:7C:A2:80:23:45:05:21:DC:ED:2F
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer:       /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number:          012D
Signing time:             Tue 23 Jun 2026 05:48:02 +0000
Manifest this update:     Tue 23 Jun 2026 05:48:01 +0000
Manifest next update:     Tue 30 Jun 2026 05:48:01 +0000
Files and hashes:         1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: CUh5dFi2gUGOluvaS0tZjeRIMHLIKJLLOJSn/9MK+R0=)
                          2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: hdQpo+xnXuDoOPe/5r+BnsM8aeG+LI4VCVPfcf0L3eI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 05:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
        Validity
            Not Before: Jun 23 05:48:01 2026 GMT
            Not After : Jun 30 05:48:01 2026 GMT
        Subject: CN=6a3a1e11-1112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:b2:b0:b3:5c:87:46:70:bc:3b:33:10:bc:
                    ac:be:53:ed:89:98:b1:f3:31:d4:14:eb:1e:c7:0b:
                    ff:01:61:c4:c8:6c:37:e7:3b:5c:47:e0:65:18:fc:
                    84:e1:30:66:c7:bd:16:c4:04:5c:57:3b:7c:54:67:
                    2c:9e:bd:3f:3a:b3:b3:82:87:4b:e7:11:a7:2f:bd:
                    39:97:38:cc:38:30:80:c0:43:a2:b8:63:56:91:09:
                    2e:d0:bf:89:ed:c7:e0:ec:33:84:6f:a8:20:dc:c5:
                    87:93:2a:15:89:83:e9:9b:3a:ed:c9:90:6d:59:0f:
                    03:71:07:7d:1b:52:89:a8:7b:e7:cb:fe:40:5c:78:
                    4e:c1:2d:f5:65:3a:a2:b7:39:98:57:ae:73:27:e7:
                    f0:ab:05:78:eb:ca:79:5c:f4:32:58:87:e2:21:79:
                    d0:81:67:80:ca:4e:08:f0:71:2c:66:b4:0b:a0:d3:
                    85:2e:39:40:0c:f2:13:7e:07:a9:b7:cd:d3:d4:7c:
                    75:2b:f6:ee:b7:39:db:c6:4c:dc:d1:9a:35:52:5b:
                    0c:42:b9:47:6f:0a:76:53:7f:a4:67:c3:d5:02:75:
                    51:66:7c:41:44:cb:e1:4a:bf:84:ad:c3:0f:73:6c:
                    99:58:9f:91:38:ff:4f:fe:a3:ed:d1:7f:6b:ce:c0:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F9:7F:F4:91:8E:9F:69:1C:5C:7C:A2:80:23:45:05:21:DC:ED:2F
            X509v3 Authority Key Identifier:
                keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5a:97:a3:1e:c5:65:fc:6f:1f:2e:da:84:81:1c:a7:ef:38:
         46:29:4e:32:39:ec:38:97:a8:9d:35:cd:92:8b:74:4a:d3:9c:
         c7:8f:a1:f7:06:d9:50:81:2b:a5:d1:73:8d:9d:fa:f5:dc:69:
         b6:a6:26:34:35:63:f7:77:f5:ac:a7:79:c9:38:93:8c:5b:c6:
         a6:8e:1b:fc:88:f6:2d:fc:41:df:58:20:bd:4a:b4:4c:58:3b:
         10:36:08:94:5e:8b:01:bc:bb:4c:b3:ca:f3:ed:c2:57:c9:e3:
         b6:5c:10:48:d4:01:32:e3:6f:ff:82:67:4a:4b:21:f0:84:ee:
         ea:cf:59:76:5e:66:72:7d:da:2a:0c:35:87:58:b8:93:91:ea:
         48:07:ae:92:4b:eb:6c:a3:5e:84:12:fc:79:a8:49:79:78:62:
         4d:24:07:ff:3c:06:15:3b:e1:57:a3:bf:34:d9:dc:56:0a:c7:
         e4:c2:a5:29:40:1d:0b:15:8c:78:42:9f:db:8d:b6:ab:a4:56:
         29:33:5a:ee:27:25:06:27:f5:02:c1:2f:99:57:06:74:e4:d3:
         cc:31:9f:76:64:01:72:64:4c:bf:bf:26:97:b3:ee:a5:3c:db:
         cc:6a:d8:ad:30:b4:e6:66:9e:b2:90:d3:12:9d:aa:95:16:05:
         d3:df:f7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:16 2026 by rpki-client