Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
File:                     DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json)
Hash identifier:          gJBYgV5ZXjEa6qNbyeAKvdSTfsOEXnR/CEPN8JLcGww=
Subject key identifier:   DC:8D:BA:53:0B:0F:B7:AB:50:FD:10:79:E4:CE:FD:5A:33:7E:31:13
Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
Certificate issuer:       /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
Manifest number:          010F
Signing time:             Tue 09 Jun 2026 05:13:57 +0000
Manifest this update:     Tue 09 Jun 2026 05:13:56 +0000
Manifest next update:     Tue 16 Jun 2026 05:13:56 +0000
Files and hashes:         1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: Iq9PqqDMzU8NCjCoWMa4yXfJHy2sLDpLKk1T4iM/ieA=)
                          2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: cXnna13A37da56cbsTCo0fbmD5n4hI69trG/+73mamk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Jun 2026 05:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
        Validity
            Not Before: Jun  9 05:13:56 2026 GMT
            Not After : Jun 16 05:13:56 2026 GMT
        Subject: CN=6a27a115-7b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:af:00:d5:c5:5c:f8:e7:e5:f2:b5:54:cf:6d:
                    b3:1e:10:0d:23:dc:4e:a6:eb:12:6f:85:a5:78:b4:
                    bf:20:c4:b4:28:21:2f:0d:cf:89:f9:d1:c9:01:da:
                    43:60:ec:ab:11:da:b2:a1:f5:d0:16:12:ee:a0:47:
                    77:89:d7:04:20:80:8f:fe:b4:7e:8b:95:0b:49:43:
                    27:a0:3b:5e:86:a5:75:26:3a:a0:16:e7:fe:b9:a2:
                    49:e1:1c:e6:f2:0a:ea:3e:83:60:b3:37:e6:0b:bf:
                    f7:2c:45:8a:8c:f7:65:dd:18:6e:5c:a0:34:ed:2c:
                    50:c0:49:4f:92:f1:19:11:76:ff:68:e0:44:cb:46:
                    d7:b0:c0:59:bb:64:7b:96:4b:42:bb:53:0f:0b:a6:
                    68:85:fb:5d:c1:66:26:4c:d4:3c:ed:db:c9:37:26:
                    97:29:25:d3:dc:33:75:a0:0d:1b:3d:26:b8:e1:f5:
                    d8:a4:47:32:5d:6d:22:5a:1e:29:6a:65:15:56:d1:
                    ef:98:69:67:7a:43:09:08:8b:27:9c:24:96:de:49:
                    36:b1:e9:9c:ef:93:b7:fc:32:1c:3f:21:89:30:bb:
                    c4:59:ec:d9:13:4a:2f:12:77:cb:8d:f9:25:18:61:
                    5a:f7:7a:0f:51:65:27:85:b8:f0:03:92:24:af:59:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8D:BA:53:0B:0F:B7:AB:50:FD:10:79:E4:CE:FD:5A:33:7E:31:13
            X509v3 Authority Key Identifier:
                keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:13:72:ce:f5:85:ac:0b:aa:a1:12:41:a4:de:52:ae:16:b8:
         7e:2f:2d:df:d0:24:a6:83:28:17:32:cd:ca:71:d7:05:42:19:
         c5:bd:ab:0f:de:f9:1f:13:e6:a6:d2:41:df:34:44:3d:f1:4e:
         ca:04:fb:c6:80:47:9a:1e:38:c0:bf:0b:c2:f1:42:13:97:89:
         ba:d0:4a:65:ca:32:19:be:8e:54:ed:a2:99:3e:61:dc:9c:5d:
         21:18:22:e2:b9:e0:e0:d3:51:59:0d:61:c6:f7:ba:ab:07:6a:
         a4:d7:8a:5a:b0:d4:e9:71:a1:c4:a5:ca:79:4a:c5:f1:51:e5:
         a2:0b:40:05:67:55:78:0b:92:5c:8b:14:1f:17:44:49:84:80:
         bc:da:f9:b9:49:6b:28:26:b4:bc:97:b4:a3:6d:09:42:77:53:
         f6:99:16:d7:f5:87:0b:5a:0a:7f:df:ef:7d:07:89:91:0d:b1:
         fa:fa:6b:e3:88:c5:4d:08:9c:ad:2c:83:41:69:aa:dd:db:c4:
         76:05:fd:3b:34:2c:44:5d:27:62:bb:2f:55:25:9a:29:34:d2:
         41:d5:38:71:03:60:54:50:05:7a:d9:ce:ec:c7:59:4e:b4:aa:
         c5:13:0d:8d:12:f1:92:52:5d:50:5f:fa:b4:9d:2d:78:ee:b1:
         e2:dd:b5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 05:16:00 2026 by rpki-client