Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
File:                     aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json)
Hash identifier:          6rtgjMF7Qrr3QDYt+lweYAjG7oU9Cb9JqibK/xgrpHg=
Subject key identifier:   D9:35:15:50:42:D0:7D:B4:A0:3F:D9:23:2F:41:4C:40:D0:E4:45:BC
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Certificate issuer:       /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial:       07AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
Manifest number:          079F
Signing time:             Wed 20 May 2026 21:31:30 +0000
Manifest this update:     Wed 20 May 2026 21:31:30 +0000
Manifest next update:     Wed 27 May 2026 21:31:30 +0000
Files and hashes:         1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: XFMjs27f1Mg0ZcthPHknai6o1vJ+SJ/saZZ24pifx3I=)
                          2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 9CgW3feWo669bB+n336/YLIKgQZBrzljXQlC++9jPh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
                          rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1962 (0x7aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
        Validity
            Not Before: May 20 21:31:30 2026 GMT
            Not After : May 27 21:31:30 2026 GMT
        Subject: CN=6a0e2832-de0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:c8:45:1a:89:2a:bc:9b:fe:f7:40:fe:b4:
                    48:80:e7:ae:57:f4:cd:d0:6c:11:c9:d9:b4:65:00:
                    10:99:e4:69:92:cf:ce:c7:1c:79:b9:25:88:9c:0f:
                    0b:81:d2:4e:64:60:77:f2:7a:59:d0:c1:48:59:a0:
                    b0:0c:d5:b5:10:09:c3:99:ee:e7:1c:e1:a7:db:9b:
                    e0:e3:93:b9:4c:44:3d:d1:0a:ff:ea:a3:45:8b:bc:
                    18:42:3a:2d:15:11:aa:af:03:fe:b5:8c:56:80:6a:
                    17:88:0b:08:aa:aa:8a:35:db:7d:09:08:ac:4e:06:
                    9e:d9:56:ee:95:db:36:bb:58:72:4d:50:0b:e6:2b:
                    73:8c:51:c3:26:7e:72:f8:47:23:4c:42:71:2a:c9:
                    5b:98:29:97:b8:29:fc:49:83:94:18:74:e7:30:3c:
                    ad:10:a1:91:7e:38:d0:2b:ee:c2:79:a6:12:3e:74:
                    a4:39:37:8c:78:e3:4d:49:05:00:42:a5:d6:18:5f:
                    52:ba:26:8d:09:f9:b9:91:35:77:ba:39:d8:80:bd:
                    0f:6d:19:79:a4:45:51:f4:38:08:51:79:02:0f:3b:
                    30:57:80:e1:1b:46:07:c5:bd:53:fa:7a:5a:13:d8:
                    f1:9d:60:1a:5e:8e:2a:92:ab:b2:7b:d3:92:d5:9e:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:35:15:50:42:D0:7D:B4:A0:3F:D9:23:2F:41:4C:40:D0:E4:45:BC
            X509v3 Authority Key Identifier:
                keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2e:0c:e7:f8:95:36:a8:09:16:d5:d0:80:c4:83:66:ed:5d:
         03:f0:36:52:93:90:27:57:6c:11:4f:8b:c9:6e:65:14:0b:1b:
         b3:77:0d:6f:d3:0c:c4:11:cd:b8:b7:4e:f3:cb:14:a9:71:f8:
         96:5c:d4:db:6a:dd:a7:e1:fe:de:1e:6e:33:10:4e:9a:0e:ee:
         9d:56:9b:29:32:96:b9:ce:d0:37:2f:0d:1b:21:96:fe:ae:f7:
         dc:e2:bb:f8:05:68:f7:30:59:5a:58:6e:99:64:f5:84:a3:fc:
         58:0e:99:d4:3d:3e:cf:d0:a1:40:db:56:43:4a:64:4c:89:76:
         2b:19:e5:8d:b9:d5:12:b4:a7:75:ed:d1:9b:dc:9b:e4:93:dd:
         0b:df:7d:ed:2d:62:3b:2d:37:1b:69:1c:27:40:1c:3f:09:08:
         b2:f7:16:3e:3e:a2:1a:f5:50:cd:c1:d5:e3:0a:50:46:d7:f9:
         ee:d8:84:34:49:48:0f:0e:92:69:c4:cd:77:76:aa:4a:03:34:
         7a:55:a1:22:14:ac:30:ce:fb:09:c0:c3:eb:77:ac:ad:6d:3e:
         2e:72:ac:1e:e4:0b:ef:07:85:65:7f:bb:91:b9:ae:c1:57:50:
         c5:50:f0:c2:fe:41:e8:a1:06:5a:fb:7f:e7:a3:1f:11:6c:35:
         5b:38:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:58 2026 by rpki-client