Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft
File:                     1CVu3CvBHIRdtQe3wKiTVEYutj0.mft (raw, json)
Hash identifier:          czI4+pqQ4JX05kdz6xItyuaaxZb0QXo7KNfbg3MdZ+E=
Subject key identifier:   09:7F:8B:6A:37:50:2F:6B:C4:06:95:5D:20:D8:04:CF:93:87:3C:8C
Authority key identifier: D4:25:6E:DC:2B:C1:1C:84:5D:B5:07:B7:C0:A8:93:54:46:2E:B6:3D
Certificate issuer:       /CN=A9170DA5/serialNumber=D4256EDC2BC11C845DB507B7C0A89354462EB63D
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft
Manifest number:          AE
Signing time:             Mon 01 Jun 2026 07:55:28 +0000
Manifest this update:     Mon 01 Jun 2026 07:55:28 +0000
Manifest next update:     Mon 08 Jun 2026 07:55:28 +0000
Files and hashes:         1: 1CVu3CvBHIRdtQe3wKiTVEYutj0.crl (hash: yhVjXQ40E/V8wTOQZPvoqJnlIToEO8PMF4M5EPCYzWI=)
                          2: F91ECAD6571B11F093AD0C10C4F9AE02.roa (hash: weUBuaqXjk5/5+ZvfK6KOqbWfTtXBnBwNWpgK2K7P90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.crl
                          rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170DA5, serialNumber=D4256EDC2BC11C845DB507B7C0A89354462EB63D
        Validity
            Not Before: Jun  1 07:55:28 2026 GMT
            Not After : Jun  8 07:55:28 2026 GMT
        Subject: CN=6a1d3af0-967c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:bb:99:fb:1c:07:46:fd:b4:10:0a:0c:bf:
                    78:74:79:e2:a8:9e:95:b6:95:11:9e:8a:c0:52:89:
                    5b:79:84:82:e0:2a:a2:ac:46:fa:7d:d5:9f:f6:87:
                    73:02:de:1e:61:a1:53:87:ba:41:fd:c3:1e:75:5a:
                    cd:e7:46:47:13:36:00:de:9d:19:f9:cc:0f:d3:84:
                    e4:c2:7f:6f:3e:87:cc:81:cc:29:f8:fd:85:e9:1c:
                    b9:57:9f:a9:c6:6a:6b:60:9b:d9:0c:f9:17:d0:e8:
                    c1:b4:f9:e8:68:99:6e:ce:49:55:42:4d:14:1c:4a:
                    ad:b5:39:33:be:6d:04:d3:b2:0b:66:12:61:9b:d3:
                    89:e1:d7:cd:c7:32:6b:21:78:ad:7e:77:f1:94:f2:
                    ff:af:59:de:ae:f1:72:18:7e:da:2b:20:80:12:3c:
                    19:2e:98:86:76:db:29:7e:7f:d5:d3:23:69:32:3f:
                    83:4c:ab:07:ec:fd:c1:32:5a:7f:4a:08:ac:cf:8d:
                    46:6a:3c:57:3f:6a:f5:fa:eb:c6:f7:57:69:0e:d3:
                    0a:e5:3e:3a:53:ee:33:f2:08:de:7f:ca:f6:c5:66:
                    22:cf:eb:9a:15:b1:d2:56:36:3a:25:9b:bc:ad:9a:
                    ec:a4:2a:14:87:43:c4:14:6e:10:2c:c3:22:7f:03:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7F:8B:6A:37:50:2F:6B:C4:06:95:5D:20:D8:04:CF:93:87:3C:8C
            X509v3 Authority Key Identifier:
                keyid:D4:25:6E:DC:2B:C1:1C:84:5D:B5:07:B7:C0:A8:93:54:46:2E:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4f:57:2a:9a:05:8e:a3:8d:c5:35:62:ac:6c:16:fb:1a:5f:
         7e:22:2a:0c:bd:eb:f2:0c:f9:94:62:49:bd:ac:f2:60:ff:da:
         0e:2c:ad:f9:a7:9e:17:7b:1a:34:6f:ea:8c:37:75:db:b7:8f:
         45:98:97:25:73:1b:9d:06:53:22:38:5c:e5:41:03:1f:77:34:
         9e:43:f6:09:1e:a2:e4:1d:9c:b0:8b:7b:01:32:dc:91:2c:da:
         89:a7:a4:7e:76:c0:bb:81:8d:7e:af:8a:35:22:16:ed:4e:d0:
         85:16:e3:fe:01:ad:b1:19:fa:fc:f4:1f:2b:b2:0a:b4:6c:82:
         42:e6:3f:87:82:cc:aa:76:c7:90:45:2d:ff:40:ee:a7:37:a4:
         5c:48:95:38:64:7c:7b:2c:a4:23:3e:5b:ae:92:cc:47:45:d5:
         00:d0:1e:b9:ae:9f:f5:50:59:94:af:f7:ca:76:21:bf:ad:24:
         5b:a7:c5:80:c8:cc:aa:8e:c2:f9:6e:e5:63:c8:69:f3:e7:89:
         30:6e:d8:e6:35:e2:74:85:d5:f7:70:fa:b8:fc:82:f7:9e:1f:
         50:39:7e:fd:8e:50:48:49:15:dd:51:47:7e:64:8d:70:b0:ab:
         04:fc:fd:96:e0:3d:65:fd:1a:f9:96:7b:c6:dc:57:39:2c:48:
         bb:cc:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:51 2026 by rpki-client