Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft
File:                     a1eqjwdnrM-oLNKqaesREse3fPw.mft (raw, json)
Hash identifier:          RCckTFtsfN7ovkwbXWFJ8YlpP7l7YW2frJBzc+GkIBQ=
Subject key identifier:   69:07:D4:CB:29:64:46:5C:CA:6B:E4:80:75:82:D7:3A:37:40:7E:17
Authority key identifier: 6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC
Certificate issuer:       /CN=A917EC30/serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft
Manifest number:          BC
Signing time:             Tue 23 Jun 2026 07:15:42 +0000
Manifest this update:     Tue 23 Jun 2026 07:15:41 +0000
Manifest next update:     Tue 30 Jun 2026 07:15:41 +0000
Files and hashes:         1: a1eqjwdnrM-oLNKqaesREse3fPw.crl (hash: JLned2kFBc9roxolJ6aiXUD7c1G3w1OXIgfZqN+QfUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl
                          rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 07:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EC30, serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC
        Validity
            Not Before: Jun 23 07:15:41 2026 GMT
            Not After : Jun 30 07:15:41 2026 GMT
        Subject: CN=6a3a329e-62a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:05:03:0c:df:3b:92:82:fe:b8:ef:1c:92:
                    5f:2a:04:78:d3:32:dc:ef:7c:f4:12:4a:89:20:d7:
                    d5:57:15:fe:db:f4:db:69:72:9f:0a:0e:68:ba:ce:
                    71:77:95:b8:1e:60:0f:81:a7:79:07:cd:b3:fa:f7:
                    56:6a:86:78:be:e9:c4:b2:ca:1a:d5:94:aa:c4:27:
                    52:c0:6f:f5:15:a1:71:83:8e:8f:95:c6:01:90:57:
                    78:ef:54:6e:83:42:34:7f:c2:f0:db:1a:01:be:08:
                    d4:d3:ec:9c:59:6e:a8:5b:cc:21:b3:21:54:6a:00:
                    56:96:07:44:ba:36:39:28:75:9b:15:8a:67:e1:82:
                    c2:bd:26:eb:67:e5:aa:89:4c:9a:69:04:c7:a3:e2:
                    ae:92:51:b9:45:5c:db:60:ee:0c:5b:f8:bf:95:28:
                    3e:4e:14:a3:d7:b7:e2:fb:4c:a7:ab:2c:c1:df:64:
                    c6:6b:5d:07:b0:64:d6:c4:e8:1b:30:3f:aa:c0:77:
                    f3:6d:3b:29:2a:5a:89:d5:6a:c4:dd:00:77:eb:b8:
                    72:33:b7:f1:10:74:73:d4:05:5f:0a:30:35:b0:7f:
                    88:d9:ba:aa:9e:87:81:24:00:fe:f6:58:5f:ec:f2:
                    d5:e6:ad:76:33:14:8f:c8:d2:5c:5a:b4:44:8f:da:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:07:D4:CB:29:64:46:5C:CA:6B:E4:80:75:82:D7:3A:37:40:7E:17
            X509v3 Authority Key Identifier:
                keyid:6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:77:3d:40:dd:17:3f:f4:87:f4:de:3a:77:83:a7:71:4e:2e:
         8a:e1:14:4f:9c:15:0f:da:46:e4:c9:66:df:c0:a8:64:1f:ff:
         c1:42:17:53:1b:a4:b5:49:42:14:91:0e:4f:df:19:a6:67:a1:
         9c:08:b8:ea:85:9d:cf:58:dd:e9:75:c7:63:a1:8c:74:95:a3:
         f4:5b:27:88:c5:df:ff:b2:ce:ae:56:c0:8b:36:c5:a5:4b:b0:
         03:72:75:ff:a5:4c:1b:e4:63:94:f6:92:a0:9d:ef:aa:5b:e8:
         57:88:bc:35:38:00:ad:e9:63:b7:1d:bb:94:8c:f0:96:f1:8e:
         20:06:ea:c7:17:ef:d5:5b:22:dc:c0:eb:bb:96:b8:3d:89:c5:
         a0:3a:03:82:1d:1e:50:5c:48:94:0b:cf:72:12:7b:c0:7e:37:
         12:ff:b3:8a:99:60:75:57:12:c7:00:cc:e0:31:97:98:49:7b:
         a2:80:f7:f9:19:11:b9:6a:a5:99:03:59:fe:c8:8c:66:69:0b:
         16:66:1f:b3:be:e9:a5:3f:7a:4c:9a:81:c8:eb:07:82:9f:fe:
         9c:c4:9d:fc:45:40:00:ac:cd:4d:e5:19:43:2f:2d:f6:fb:79:
         65:60:c0:64:53:54:43:de:b4:c1:87:aa:0b:ab:12:be:a7:e2:
         11:87:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:30 2026 by rpki-client