Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File:                     cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier:          bkc36ra6fD8gVGHtUZAoApHZuWbV9axp/uqpDjvknhg=
Subject key identifier:   03:9B:5F:CC:27:1C:F3:21:B7:F5:B5:FB:94:C8:4A:F8:9E:B3:D2:63
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       038E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number:          0311
Signing time:             Thu 11 Jun 2026 03:32:18 +0000
Manifest this update:     Thu 11 Jun 2026 03:32:18 +0000
Manifest next update:     Thu 18 Jun 2026 03:32:18 +0000
Files and hashes:         1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: sWDyTH/Vy28GpLEW/9kOx18bIDUWsdAC/Dv1eZExpKI=)
                          2: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: ThNEZ/wZ14mYXLet8Z4TArJCtuPb8L+Y4/Se6rgtJdc=)
                          3: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: fhpQuv0y4UT5DryZGfmgAQDcckv6IFWk6lv7Kpt2qsY=)
                          4: E8672B1C381511F1ABE15B0C98833773.roa (hash: anai9qYPZOFiCk3SsK0WZEhRCz/0EmZXl4ZZ1i9lDIg=)
                          5: E76A810A381511F1ABE15B0C98833773.roa (hash: o2/3WY/X8q2n8a29ZI+8ohjXtfNwONgobpYeiQVr1FE=)
                          6: 359EA23662B311F081881A48C4F9AE02.roa (hash: lqL+GVJ/YnIw0JoUQ+DA7LgXc2Kr/qA7gY59dqXk+eA=)
                          7: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: L5jvQRnxxxHdy5lodGkjPlaB/lJvpEFIVFuxxQ3ZhTI=)
                          8: 648D8466B8A011F09DCB7C5BC4F9AE02.roa (hash: h4q9+s6LKkIzk4CyJWXnprv1pvkZF4sAJykGIi6Qgw0=)
                          9: 974EDB46ED1311F09DD269343F6F56BC.roa (hash: J+RBZjwgHU8zSwFmYdVtdQjKdd/cwy+vE2XUwKs3QAs=)
                          10: 0634745A36D311F091108A4EC4F9AE02.roa (hash: uaiAXHFgkoPRxU2DoLpe3SDOvNdXy/Ij5A7mMKtf32g=)
                          11: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: RMVp8Qup/NU120gAEj7lgUVqAC4aVcpU8zUbzT1yzig=)
                          12: 42EEA7CE184D11F182F41629283D8C67.roa (hash: TVrPLmIBli4Y5DGPh5WbtZCgPebXr/yJxB3rRfwNFHI=)
                          13: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: OyJt2s3qPZnoO34lc+1xKuSSrj0jZolC/kQHql+HGrY=)
                          14: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: pORpsNJ98G1sLBSGTNwGRFcCTTGxkjeaJpZ9poV5mz8=)
                          15: 82FE8E1C90B511F0B55D6F53C4F9AE02.roa (hash: jniVoFO7asjIWO6HqjPSEhXjJIJMpsAC3AM61zDyHDg=)
                          16: A8A37DCE44A311F1A5A6D795B1833773.roa (hash: Nen+8EerT+P8czx0L7tQURC2Dme3vch+gJT7Z/IL4t0=)
                          17: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: ZL7HtMcMaee/+U2RFcFAEBNXOBbDZe6QSqp6AaUWyjA=)
                          18: A00B014C46FA11F1AFC828E9AD833773.roa (hash: zQ41PpME6m7cowJVXz3d8ECpqn9tbnYFIfQ313hMfHI=)
                          19: 43DD36C8184D11F182F41629283D8C67.roa (hash: DOIAg2BUAvTTiw9cYvjPTnuxYTKi04v2hjJikaEo380=)
                          20: 40257FE64D0E11F082837352C4F9AE02.roa (hash: 3xwrhLhWrv4Rc8fICKcBZccULTitMeKwRM4KNepaPck=)
                          21: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (hash: C/nBDRskLxKkB8+VbDj3vPdaP7ntU8FpquVD1dwHslg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Jun 11 03:32:18 2026 GMT
            Not After : Jun 18 03:32:18 2026 GMT
        Subject: CN=6a2a2c42-0e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:96:c2:c3:7e:48:05:54:a3:38:aa:16:02:93:
                    23:a9:f0:ec:89:23:f1:2b:58:bb:3c:49:79:a4:3d:
                    a8:d2:f4:0b:e7:91:ed:e9:af:78:cc:74:c3:3a:a6:
                    b4:e6:f6:eb:d1:61:42:03:7c:be:56:78:ff:2c:95:
                    1a:7f:51:fc:48:f1:d6:68:26:fd:a8:f5:d6:50:97:
                    8c:44:52:2a:d3:a6:ff:dc:c8:af:69:61:33:2e:83:
                    2c:0f:9a:10:8d:7e:72:0e:5a:9d:51:3c:86:67:29:
                    bb:4c:4f:f4:2f:76:72:be:2f:7f:94:db:0d:d6:8f:
                    30:4a:82:97:48:ef:48:18:b4:c3:8f:b2:af:4b:20:
                    92:90:57:69:fc:64:ce:33:b2:72:2e:e2:61:ac:54:
                    9b:39:25:85:4f:1a:0a:51:03:02:9d:e8:03:87:3c:
                    86:7e:33:7b:67:79:c3:c1:58:86:23:f0:f5:ff:9b:
                    3d:ad:38:f6:d7:9a:94:87:8c:ea:0c:29:de:65:8a:
                    bc:6c:a5:2a:c7:85:50:b2:7a:76:80:79:af:fe:b6:
                    82:3a:3f:e6:f4:a1:7d:00:b4:bf:62:20:a5:df:41:
                    99:13:d9:78:7e:11:0a:e4:a8:68:5c:8f:5b:0b:1d:
                    20:7d:77:cd:91:43:73:5e:47:e2:36:a3:74:60:e2:
                    2d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9B:5F:CC:27:1C:F3:21:B7:F5:B5:FB:94:C8:4A:F8:9E:B3:D2:63
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f1:51:52:07:ad:4e:ae:59:69:ab:45:08:d0:dc:ed:ac:c7:
         3b:30:a6:59:f5:96:62:21:58:81:09:fa:bb:0c:32:08:d1:d3:
         ce:5b:8c:2a:70:f9:a7:68:77:36:1e:74:ec:f3:76:ff:ec:05:
         b0:62:96:4f:de:c0:77:76:1b:5d:0b:2e:94:5e:c1:2c:33:cb:
         28:bc:ff:65:1e:9b:0f:d5:bb:ed:ad:f8:40:84:21:b0:9c:c7:
         09:a9:5d:85:76:be:b9:77:3f:f6:e0:b5:24:1c:4e:c6:5e:ef:
         af:62:f2:f9:e8:fe:b6:e8:f4:1c:97:64:e0:e7:34:a7:bf:d6:
         7f:d9:d1:dd:c0:72:99:26:15:97:48:02:76:3e:01:cc:de:1e:
         29:fc:8b:29:2e:06:25:d0:ac:ac:7a:de:4a:67:4d:d1:13:73:
         81:06:26:bc:cb:50:15:ef:17:41:12:4a:0c:36:ee:1f:35:f9:
         0e:48:f1:f1:f0:b0:6a:36:c8:68:7f:61:1d:89:ae:d3:38:d8:
         3d:04:fd:fd:07:5e:0c:30:a1:02:89:b6:0b:5b:bb:e9:c1:31:
         a2:f8:53:8c:c3:2c:08:77:f1:d2:5f:59:aa:c4:00:1c:34:2e:
         87:12:c8:a0:2b:d5:74:ca:8b:e6:ca:e6:a4:b8:32:48:0e:17:
         a3:a9:6d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:51:49 2026 by rpki-client