Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
File:                     IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json)
Hash identifier:          s7mN4LcyfXpRNn9Ko33+djiWBPUITJQNnuWtEtYMmJ0=
Subject key identifier:   67:2A:1C:9E:00:14:C4:3E:E2:7E:B2:B2:F4:6E:64:F6:E1:BE:EF:F5
Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
Certificate issuer:       /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Certificate serial:       0C24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
Manifest number:          0BFE
Signing time:             Mon 22 Jun 2026 18:51:32 +0000
Manifest this update:     Mon 22 Jun 2026 18:51:31 +0000
Manifest next update:     Mon 29 Jun 2026 18:51:31 +0000
Files and hashes:         1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: cG+I7aMmjvUjvfro3g/LJS/2ivf+ZQ8kz5QqHFF0hWU=)
                          2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: Dn6xSFCy5x99YohPUflOg2YEXwlJIsT+ParKkyCySyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
                          rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3108 (0xc24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
        Validity
            Not Before: Jun 22 18:51:31 2026 GMT
            Not After : Jun 29 18:51:31 2026 GMT
        Subject: CN=6a398433-4689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:66:11:72:73:67:12:ec:72:33:c8:a5:0b:eb:
                    0a:39:42:a8:af:71:62:17:6b:6a:70:43:dd:0a:8a:
                    17:07:53:24:41:aa:88:73:9e:27:4e:e3:94:17:11:
                    1e:42:75:e0:56:16:c8:6c:7e:77:6e:b1:c6:24:b0:
                    93:97:6c:7e:ff:9a:39:8e:13:fa:8b:32:3c:29:66:
                    70:c9:98:3d:04:1c:5d:48:2e:08:fc:08:aa:27:ae:
                    b7:f6:8e:95:d3:7e:ff:40:ba:7c:25:38:8a:3d:27:
                    4b:ef:99:bf:de:42:43:a7:a1:d6:97:d0:f9:67:b9:
                    85:81:39:3d:50:8c:dc:89:a2:2c:76:97:85:87:01:
                    3f:c9:a4:08:97:82:41:6d:ea:35:68:20:15:2d:73:
                    52:27:88:4a:a4:95:b7:93:88:44:b8:d8:ac:c7:6e:
                    a7:ad:f5:18:a6:32:ee:aa:18:44:c3:a1:ff:37:22:
                    0b:f1:9a:a4:16:53:ef:a0:e0:19:96:ad:c5:29:f0:
                    04:ff:80:43:22:c8:8c:82:30:0f:5c:08:e9:13:d6:
                    c4:f2:dc:ac:9f:79:98:db:d9:09:af:dd:53:0b:91:
                    dc:d1:83:47:e6:db:e0:e2:ca:ec:49:39:cb:44:68:
                    ac:ed:ce:c9:51:ce:67:bf:0d:d5:f3:75:11:73:77:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2A:1C:9E:00:14:C4:3E:E2:7E:B2:B2:F4:6E:64:F6:E1:BE:EF:F5
            X509v3 Authority Key Identifier:
                keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:fb:01:a5:79:16:3a:8b:36:4e:54:1b:7e:0d:3a:d3:51:79:
         05:e4:a6:f1:02:a9:f4:1e:bd:a3:62:76:1d:3d:87:79:22:3c:
         f1:e1:79:8d:f7:64:ac:98:a3:bb:f7:b1:97:57:c2:6d:d5:7b:
         d6:e5:94:f9:57:a4:4d:6f:fe:d3:29:6d:25:ea:b8:ee:14:e7:
         e0:17:51:87:d0:d8:43:5c:20:57:81:65:0a:18:6c:c4:9f:01:
         13:25:a9:1c:25:58:ec:4c:9e:a5:15:d9:fe:d1:7d:eb:55:38:
         e1:5b:47:83:b1:1f:7d:4b:6f:f1:eb:c5:bf:11:2c:9b:10:2e:
         4e:75:8d:eb:9a:4d:be:c7:ee:d9:8a:cf:af:96:7f:f1:dd:8c:
         06:80:c1:b1:f9:71:b2:ff:6a:d1:01:cd:d1:0c:b5:54:4b:3d:
         f2:7d:b9:fa:a6:58:0d:7a:58:86:72:22:a3:a2:5c:91:8a:ef:
         99:0d:cb:9b:6f:a2:f3:39:4f:3a:89:15:30:77:f2:3b:46:a0:
         0e:42:21:af:d4:be:9a:be:73:88:84:5d:8d:35:6a:9f:05:13:
         4c:aa:e4:94:f7:7e:a0:da:5a:80:1a:a4:2b:3d:a1:04:ce:14:
         a2:e9:da:9a:1b:e5:d1:bc:3b:23:4b:7f:b2:98:32:30:32:09:
         46:dc:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:54 2026 by rpki-client