Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File:                     h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier:          CF+uk7fbzCxS9UXhnPd/92E+C8AFrnNvGpr9aM3pvdg=
Subject key identifier:   FA:81:02:91:3D:29:10:B9:CE:08:D1:52:0C:6E:EA:8E:87:61:2C:02
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer:       /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial:       12FE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number:          12DA
Signing time:             Tue 02 Jun 2026 17:03:01 +0000
Manifest this update:     Tue 02 Jun 2026 17:03:01 +0000
Manifest next update:     Tue 09 Jun 2026 17:03:01 +0000
Files and hashes:         1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: bHkO5/JDS85CP9z6QP+UdI6Ou50ZrdaHTOxwEViZUiI=)
                          2: 3BA64F0AF22611F094D5D2AE526F56BC.roa (hash: gjQ8EjTh4YTn2TSGcxeqBGmNj2WHRb5bDlBbyu/0FTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4862 (0x12fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
        Validity
            Not Before: Jun  2 17:03:01 2026 GMT
            Not After : Jun  9 17:03:01 2026 GMT
        Subject: CN=6a1f0cc5-8638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fd:8e:58:c2:9f:61:76:a8:90:94:0f:38:64:
                    80:9d:5e:a6:44:97:1c:71:b4:48:22:e3:3f:39:01:
                    5f:a3:26:ea:9c:58:d3:fb:30:ce:c8:95:94:8d:79:
                    e7:54:26:c2:2b:ff:17:ee:b6:14:19:ab:fe:ea:9b:
                    d8:ba:05:3a:1f:73:5c:5e:33:3b:cd:27:5b:b2:c2:
                    f9:5c:e3:d9:a1:e1:de:2d:38:70:54:9f:8b:3c:c7:
                    6c:b1:c9:24:72:b4:62:a2:a8:cd:88:aa:a9:af:95:
                    de:82:2f:8b:60:e6:63:3a:f0:b2:31:93:ef:d7:ff:
                    1e:50:a3:f7:5c:55:e8:07:48:74:3b:25:ac:31:62:
                    59:87:69:f7:af:08:c2:cd:2b:01:12:fe:f0:46:19:
                    f5:c2:3c:e9:8d:87:e3:e9:b1:31:d7:61:01:c1:77:
                    eb:4d:5e:1d:d4:84:d0:e7:99:5c:60:00:e2:83:17:
                    95:cb:2b:05:34:9e:fa:00:94:ad:49:fb:5f:6c:f2:
                    04:66:fe:9a:4d:2b:f1:3e:d7:d5:11:64:6e:e7:36:
                    32:dd:41:97:c5:f6:fe:a3:45:13:9e:3a:0b:8c:92:
                    5e:75:55:11:a0:e7:68:a0:43:e5:19:8f:40:76:0c:
                    19:27:98:69:e7:ac:90:be:ac:6d:b6:20:8b:8c:0a:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:81:02:91:3D:29:10:B9:CE:08:D1:52:0C:6E:EA:8E:87:61:2C:02
            X509v3 Authority Key Identifier:
                keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:16:41:ff:4e:f3:ca:3b:c4:58:dd:59:8a:8f:d5:5c:0f:db:
         af:b1:96:e2:ce:03:db:15:58:b9:97:62:82:d1:3f:6a:31:4d:
         25:54:d3:46:06:88:cc:ee:c6:8c:c3:4d:d1:df:47:2b:74:2e:
         d3:cc:a1:25:b0:25:36:91:c3:9a:5f:23:a1:8f:99:d0:c2:10:
         ea:82:14:60:ab:37:07:0f:d1:49:a7:96:86:8a:bd:8e:aa:6d:
         1d:c3:85:82:1b:8f:04:cf:95:ee:d2:ba:09:12:f4:40:a9:44:
         ea:97:0b:42:8a:2d:38:b0:de:c1:e6:7f:23:9c:e0:88:7f:ff:
         9b:b7:35:08:5b:3d:84:e1:3b:0f:19:3c:0c:de:93:ff:7f:c1:
         ee:c4:bc:f7:dc:90:33:6f:57:0f:ab:fd:f8:9b:ae:01:ee:2d:
         4c:3f:84:49:01:42:59:a3:ea:39:74:09:f5:9e:43:08:bf:a0:
         ac:93:0d:4d:2e:33:2c:cd:d1:a1:b4:74:79:e7:4e:e0:63:56:
         c2:78:be:a6:5b:56:e1:47:67:38:9d:75:6c:52:a3:2f:ef:10:
         ad:e3:7b:0e:8e:85:07:15:e2:f5:0c:6d:3e:50:31:c4:78:10:
         42:1c:74:3f:31:d7:5b:9c:77:d2:5d:2e:5d:08:39:e3:68:15:
         a8:8e:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:10 2026 by rpki-client