Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft
File:                     2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json)
Hash identifier:          SRwsvtaRCaJVkJ16I8EJ89uJiXcPsqtuAiI2ZRtmvfk=
Subject key identifier:   DC:89:9F:92:2D:4A:95:93:E2:67:22:07:BC:06:1E:56:65:7D:E0:9A
Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62
Certificate issuer:       /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62
Certificate serial:       0A05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft
Manifest number:          09F9
Signing time:             Sun 14 Jun 2026 19:49:14 +0000
Manifest this update:     Sun 14 Jun 2026 19:49:13 +0000
Manifest next update:     Sun 21 Jun 2026 19:49:13 +0000
Files and hashes:         1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: oXV7QgqCm7z5dUs1I+vrVZWea0cd9bvcqJa2Wk9wXZU=)
                          2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: 1jaabUICJy48DuW6hLSy4F/Zdui5Uq8G26iJUdGW7X0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl
                          rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 19:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565 (0xa05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62
        Validity
            Not Before: Jun 14 19:49:13 2026 GMT
            Not After : Jun 21 19:49:13 2026 GMT
        Subject: CN=6a2f05ba-077d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:92:3a:17:c5:9b:4f:b9:37:fe:52:86:68:
                    58:bb:05:00:87:a7:4a:69:9d:be:fc:57:91:b3:bf:
                    f5:a4:30:b1:78:99:60:06:5c:67:06:79:a2:c2:45:
                    cb:eb:24:be:ec:eb:e0:79:53:b6:76:4f:be:fe:df:
                    34:b9:bc:b2:bd:33:0d:d8:32:c1:e2:37:0a:0d:8f:
                    c2:d3:79:6a:e0:93:a2:69:34:aa:fc:07:a8:19:39:
                    25:8e:8d:ff:03:0c:d7:92:2e:24:08:61:2a:ab:aa:
                    b6:87:9a:4e:54:f5:d7:17:eb:6c:59:14:3f:ef:c7:
                    5e:33:71:9a:5a:aa:7e:2f:44:36:d2:68:f4:e3:4f:
                    e8:15:5b:10:ef:79:d9:34:97:30:18:0c:fa:fd:76:
                    a8:9e:98:7d:1d:6a:aa:c3:34:54:03:52:11:48:69:
                    88:95:d3:8f:eb:a7:c9:76:48:9b:be:cc:bf:db:fd:
                    fd:23:b4:9d:e5:98:c1:2c:c0:14:c8:c6:88:38:63:
                    91:17:0b:34:2a:0d:a2:6a:96:eb:b5:1e:35:a7:bc:
                    69:cf:7c:fe:5d:d3:88:70:5f:e5:1d:d8:e1:61:34:
                    21:2c:b5:55:a5:70:0e:6c:ca:c9:e2:dc:cd:d8:82:
                    a9:e5:85:52:a7:8c:76:8e:69:37:a3:73:cb:2a:b6:
                    23:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:89:9F:92:2D:4A:95:93:E2:67:22:07:BC:06:1E:56:65:7D:E0:9A
            X509v3 Authority Key Identifier:
                keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2d:22:d3:9b:e0:fb:3d:85:57:56:69:35:f2:b9:fd:e1:63:
         b4:ec:31:18:c8:bb:9f:03:bd:91:64:69:41:53:b3:24:ae:12:
         16:35:44:7d:7e:08:98:af:39:09:72:69:51:dc:1c:82:a7:03:
         72:80:7c:5b:3c:48:33:7e:30:a6:17:3b:11:31:54:9f:cb:e1:
         be:4e:e6:d5:ec:ba:09:88:26:80:47:57:ca:1a:83:78:37:c3:
         28:5d:1c:9f:2c:7d:fd:d7:e3:be:a0:fc:19:fe:1a:37:9d:31:
         c9:b0:5f:8d:c9:3f:e8:f8:51:8f:62:ef:c7:ec:21:7d:92:db:
         7a:6e:a7:e3:a0:71:4f:7b:b9:a1:ce:4e:2d:56:7f:b6:66:cc:
         5a:0f:47:47:b9:d1:af:52:69:d2:56:20:d5:49:02:37:d8:95:
         f4:d4:bf:7c:a3:ab:20:18:c0:5c:72:96:fd:64:c5:7f:05:d5:
         7c:7a:2a:fb:78:a9:39:6e:37:da:6b:e8:0c:21:8a:ad:23:d9:
         24:af:33:30:65:62:c6:c2:2e:98:54:9b:d7:7d:9a:85:f0:fa:
         5c:33:dc:51:5b:29:06:fc:a2:42:95:a6:96:65:65:a7:74:5c:
         df:bd:b8:7a:7a:2d:d6:92:60:13:21:e5:af:09:19:ff:d1:08:
         39:28:1a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:34:42 2026 by rpki-client