Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File:                     gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier:          uVGvg8R54nnvFUx+iz4vwKlGuibjmsYLAaZaX3SWCSg=
Subject key identifier:   53:1E:97:0B:4D:C4:9F:43:6D:73:9D:D0:C2:80:DC:34:35:FE:05:94
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       051B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number:          04C4
Signing time:             Mon 15 Jun 2026 00:02:04 +0000
Manifest this update:     Mon 15 Jun 2026 00:02:03 +0000
Manifest next update:     Mon 22 Jun 2026 00:02:03 +0000
Files and hashes:         1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: PNLE2W1XPZFjAywrGhFGKYb2GD/30ggmf/Qf3DRRGS8=)
                          2: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
                          3: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
                          4: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
                          5: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
                          6: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
                          7: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
                          8: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
                          9: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
                          10: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 00:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Jun 15 00:02:03 2026 GMT
            Not After : Jun 22 00:02:03 2026 GMT
        Subject: CN=6a2f40fc-2f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:0e:34:11:ea:30:42:58:26:f3:34:78:f1:
                    e4:40:d0:23:03:58:31:1d:9f:66:51:e6:55:df:2d:
                    43:1c:c7:43:71:86:c8:fb:e6:8f:f2:eb:00:c7:e0:
                    3a:27:6e:a3:3d:03:dd:28:15:22:c4:ee:5f:5a:2d:
                    d7:92:61:b2:18:d4:55:64:29:f6:48:e6:17:11:cf:
                    c5:0b:ac:20:2b:f2:7b:5b:4b:57:fe:9c:c2:79:80:
                    00:eb:be:db:e1:bb:af:ed:10:21:5c:b5:cb:ac:23:
                    76:85:b7:86:3b:86:96:30:14:f6:dc:01:72:5a:07:
                    95:3b:24:55:6d:9a:57:ae:ce:93:d3:02:0f:6a:55:
                    8a:a6:1a:44:f2:db:f9:ad:81:5a:d3:57:49:1c:01:
                    59:60:f4:b5:00:0c:fe:d7:20:6e:29:8e:6f:2f:dc:
                    e4:95:15:29:01:17:30:35:37:09:a0:94:62:f6:8d:
                    c9:de:5a:2c:86:b1:18:8f:de:3d:02:ec:c4:3a:78:
                    3c:37:c4:a1:8a:a5:e7:cc:f7:f6:c1:82:2c:4e:82:
                    7a:19:33:9a:55:34:6a:07:72:56:3f:80:50:0a:9d:
                    6d:24:7c:38:ee:87:6c:1c:cc:f3:90:c9:16:57:e1:
                    0a:ee:ea:d1:ce:fb:f2:9b:5e:10:40:78:ee:86:9d:
                    4b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1E:97:0B:4D:C4:9F:43:6D:73:9D:D0:C2:80:DC:34:35:FE:05:94
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:77:b2:bc:4d:be:e8:9d:42:47:7c:80:9f:84:89:29:8d:bc:
         78:c9:5f:a2:9a:c2:31:8e:11:6c:1c:0d:92:27:ac:5f:7e:fb:
         3a:d7:fb:a5:ba:8c:11:78:c3:49:78:a2:31:ae:77:ac:36:ee:
         dd:1b:c8:53:a0:65:a6:b0:1a:b0:22:cf:5f:14:09:cc:bd:24:
         29:c0:41:53:fa:f1:5e:38:ed:44:7e:ef:19:74:09:fd:5e:af:
         6f:51:ed:61:d5:20:e2:01:0c:ce:83:77:04:cb:d8:53:7d:82:
         64:a4:bb:c3:de:c3:30:f4:00:67:37:06:13:83:df:0b:95:ec:
         66:4d:d1:bf:8e:43:44:f7:d1:c0:c5:92:90:92:85:a6:9d:f2:
         b5:81:92:26:76:4b:67:fa:a6:b5:2c:ac:52:97:2b:3e:a9:58:
         97:ed:29:f8:8d:02:7e:31:d8:71:50:fe:16:1f:30:82:5c:cc:
         15:b1:79:22:05:15:cd:85:36:e6:40:67:a5:eb:d6:76:6a:04:
         26:1f:e9:ad:7b:3f:2c:4c:61:53:1a:53:2d:82:1c:16:18:d9:
         ce:bc:78:9c:44:f9:86:4f:f5:84:6b:ba:28:09:46:cd:80:32:
         ba:16:05:c5:b2:91:13:82:ea:f3:26:51:39:ff:f8:8e:87:3c:
         e4:01:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 23:56:12 2026 by rpki-client