Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File:                     cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier:          DFWWoBmPK1nbCPvvfh6gC+0tRGJHPyu+iJ4l/mN5KUs=
Subject key identifier:   85:3E:32:F5:1B:D6:5E:EE:6D:1B:52:E4:DF:60:F3:14:71:55:E8:F0
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer:       /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number:          79
Signing time:             Thu 11 Jun 2026 10:02:15 +0000
Manifest this update:     Thu 11 Jun 2026 10:02:15 +0000
Manifest next update:     Thu 18 Jun 2026 10:02:15 +0000
Files and hashes:         1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: 3SWCxWyrsINffb57GMh49yYyvBUQa/2/DDZniyFaJe8=)
                          2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
                          rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
        Validity
            Not Before: Jun 11 10:02:15 2026 GMT
            Not After : Jun 18 10:02:15 2026 GMT
        Subject: CN=6a2a87a7-3536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:b1:a4:34:31:64:6c:6c:f7:b4:85:fa:14:
                    35:ce:35:bb:54:a8:f9:80:fd:95:d0:c6:56:27:90:
                    a9:3b:6a:76:79:07:48:ee:5d:82:1c:05:a8:ce:83:
                    5b:de:4c:93:3e:8d:78:b2:da:10:70:a9:a5:bf:1e:
                    9c:6e:27:9b:df:54:2c:50:37:97:f1:67:5a:49:03:
                    a3:b0:dc:1f:b5:df:b7:93:d6:3c:21:3a:64:6f:dc:
                    df:29:e9:d2:0a:16:3d:60:05:bc:ab:73:88:e3:b9:
                    e6:8a:84:b2:fb:0b:f4:2d:b2:64:42:45:b2:e2:11:
                    fe:f4:08:f0:c2:04:fa:b1:5b:c3:34:6f:db:01:d7:
                    bf:02:03:4a:a1:3d:d1:7b:12:22:b4:3d:fb:d5:70:
                    e8:e5:b4:91:c5:4a:90:b7:ab:34:9b:97:21:c8:fd:
                    9c:c7:68:15:bf:13:b8:1a:c8:56:40:77:b7:b5:f6:
                    ea:1a:c7:a3:3f:7f:70:b0:6d:4f:cf:99:81:0f:c5:
                    13:4c:1c:07:7f:16:f5:d8:d5:3b:89:63:64:7f:c2:
                    3a:ea:db:d4:db:9e:3d:8b:82:e5:49:0f:6a:d2:32:
                    16:80:01:c3:12:6b:35:6a:04:d3:ea:45:80:16:a4:
                    f6:66:03:5c:d4:44:50:af:70:73:42:65:82:47:f7:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3E:32:F5:1B:D6:5E:EE:6D:1B:52:E4:DF:60:F3:14:71:55:E8:F0
            X509v3 Authority Key Identifier:
                keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c5:80:37:e2:16:ee:b2:70:3a:78:b6:55:64:7d:4a:98:49:
         f1:b5:6f:7b:ce:4c:8a:be:d9:fd:ed:6e:95:af:e5:9d:86:8d:
         02:23:4f:e3:d8:90:c1:30:01:cc:3a:dd:b9:05:61:92:94:af:
         df:2a:74:4c:29:6a:9e:4c:ac:98:0c:8f:c6:ad:3d:79:35:92:
         1c:14:9f:70:d9:50:91:e8:68:8e:cf:fa:29:ef:e4:4f:47:35:
         c3:41:b0:9a:3e:0e:4b:96:ef:85:f0:27:4f:51:e1:1d:f2:6b:
         b6:db:56:89:01:96:8e:e0:2a:74:08:3b:33:58:35:88:6c:06:
         bc:c4:cb:d8:2e:3e:bc:a0:3f:0a:98:3b:3b:3b:67:df:07:1f:
         dd:19:c2:e1:ac:a9:d3:6c:77:4d:38:f3:a6:34:53:4a:c7:4d:
         44:fa:8d:5f:c5:00:91:84:ac:4b:37:ce:e6:ea:b9:6a:6e:fd:
         2f:cc:62:28:ad:4b:01:ed:bb:a5:c3:83:13:76:be:17:91:8f:
         30:d0:31:dd:08:6d:f5:e1:05:17:f6:5b:49:68:04:a5:be:ab:
         8f:a1:f0:af:2e:e4:87:c9:f8:ae:37:ee:2d:3b:ce:ad:38:d6:
         97:de:a1:5f:90:44:80:69:e1:af:28:d5:d9:3d:9a:2e:34:37:
         45:1d:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:38:58 2026 by rpki-client