Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
File:                     diWOCB8uCcDx-nu0mbF1lwVlwOs.mft (raw, json)
Hash identifier:          zp+7A2zqVnVO0Apu6zwLv4ANo7nZQHqqeuHy3iEdH1M=
Subject key identifier:   58:3B:AC:00:A1:2C:96:FE:02:DF:FC:2F:75:A7:0A:AC:D2:94:B1:45
Authority key identifier: 76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
Certificate issuer:       /CN=A917F429/serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
Manifest number:          1C
Signing time:             Fri 05 Jun 2026 09:20:00 +0000
Manifest this update:     Fri 05 Jun 2026 09:20:00 +0000
Manifest next update:     Fri 12 Jun 2026 09:20:00 +0000
Files and hashes:         1: diWOCB8uCcDx-nu0mbF1lwVlwOs.crl (hash: yWK0RQJaWROw4MG51KbZLg6FqQ51b8pLGaTFz2JlUHU=)
                          2: E47B5CC8371911F196F6B470C8833773.roa (hash: qBhoDtp7mp14HRwHJwctq+CWjS+yyzLGnVuJb1Tow90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
                          rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F429, serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
        Validity
            Not Before: Jun  5 09:20:00 2026 GMT
            Not After : Jun 12 09:20:00 2026 GMT
        Subject: CN=6a2294c0-6e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:d1:fa:f5:64:40:56:80:21:42:8e:24:9e:
                    d6:2e:92:31:09:a7:5f:67:e2:66:0e:b2:d7:27:de:
                    b3:d8:37:f4:7b:f3:6d:16:8f:0d:c9:25:7b:7b:c9:
                    66:26:84:ba:15:2d:dd:d6:8a:9a:05:fb:c0:11:52:
                    c0:09:d5:b5:3e:7a:32:fa:7f:c6:bf:40:02:eb:0f:
                    4b:1a:7d:1e:e9:35:ac:6c:13:ac:16:aa:c1:5f:6e:
                    a5:41:ee:e3:3f:16:4a:15:0d:9e:ed:77:3c:e8:50:
                    4a:ce:71:0c:41:51:02:81:67:61:06:4e:dc:62:6a:
                    87:39:5e:9e:72:4a:06:3b:15:31:9e:60:71:9d:76:
                    c9:76:8d:24:18:5e:3a:85:4b:bc:a8:5e:c6:3f:81:
                    19:02:3c:75:b8:7b:0e:fd:eb:7e:61:b3:33:98:9e:
                    ba:b4:38:2b:92:dd:bf:89:ee:d7:0b:ce:d0:ea:14:
                    72:04:ad:e2:d4:be:5c:ce:7b:ee:cd:6e:e7:8f:47:
                    28:d0:3f:51:02:26:6e:79:53:11:ec:f4:59:7b:f8:
                    97:29:f2:9e:5e:c4:3e:92:1f:36:83:0f:b0:61:2f:
                    33:4e:71:65:c5:a2:62:79:64:1d:dc:90:ee:9d:d9:
                    bc:df:63:92:43:13:b6:a6:56:93:ea:67:31:26:d7:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3B:AC:00:A1:2C:96:FE:02:DF:FC:2F:75:A7:0A:AC:D2:94:B1:45
            X509v3 Authority Key Identifier:
                keyid:76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:1d:f2:39:da:b1:fd:fc:d5:90:d2:9e:e5:f7:d4:1e:45:
         ba:4e:04:98:a1:0f:7c:17:b1:92:de:2d:5a:a4:0d:1d:31:fb:
         14:4c:09:ab:6f:ee:f8:b7:47:b9:7f:cd:58:c5:1f:55:6b:27:
         9f:3e:55:5f:78:38:97:78:03:d4:3c:84:9a:01:1d:f1:c1:b6:
         38:86:3e:fd:58:32:05:34:b7:69:63:65:58:1a:b6:b9:bf:75:
         7e:a0:a6:12:53:26:d5:3b:9f:38:e0:12:16:c4:57:73:e2:40:
         2d:e6:1e:57:c8:6f:d2:3c:fe:29:b4:89:ab:8a:37:ec:84:95:
         d2:6b:ac:de:02:4a:ca:f5:2d:18:7e:58:ad:45:86:e4:3a:36:
         29:60:b1:f7:90:d0:0a:03:41:6f:80:b2:55:db:ac:b8:4a:ab:
         dc:32:70:18:76:f6:23:69:f0:76:e1:19:f5:9b:6a:80:6d:48:
         0f:9b:6d:85:59:be:f7:4b:69:34:4b:08:f6:dc:f9:92:58:56:
         57:34:e8:d3:97:64:33:9c:d6:b2:c9:c7:e1:eb:97:26:bd:de:
         31:bf:28:12:ff:3e:23:ea:99:50:7b:85:e9:f4:c3:37:cb:2c:
         5a:f3:86:10:e7:62:3f:d6:0e:b5:f5:37:64:06:e2:8a:2c:a3:
         f2:a7:3c:77
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RjQyOTExMC8GA1UEBRMoNzYyNThFMDgxRjJFMDlDMEYxRkE3QkI0OTlCMTc1OTcw
NTY1QzBFQjAeFw0yNjA2MDUwOTIwMDBaFw0yNjA2MTIwOTIwMDBaMBgxFjAUBgNV
BAMTDTZhMjI5NGMwLTZlNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCePdH69WRAVoAhQo4kntYukjEJp19n4mYOstcn3rPYN/R7820Wjw3JJXt7yWYm
hLoVLd3WipoF+8ARUsAJ1bU+ejL6f8a/QALrD0safR7pNaxsE6wWqsFfbqVB7uM/
FkoVDZ7tdzzoUErOcQxBUQKBZ2EGTtxiaoc5Xp5ySgY7FTGeYHGddsl2jSQYXjqF
S7yoXsY/gRkCPHW4ew79635hszOYnrq0OCuS3b+J7tcLztDqFHIEreLUvlzOe+7N
buePRyjQP1ECJm55UxHs9Fl7+Jcp8p5exD6SHzaDD7BhLzNOcWXFomJ5ZB3ckO6d
2bzfY5JDE7amVpPqZzEm19UxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWDusAKEs
lv4C3/wvdacKrNKUsUUwHwYDVR0jBBgwFoAUdiWOCB8uCcDx+nu0mbF1lwVlwOsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNDI5LzI2NzU4N0E4Mzcx
OTExRjFBNjZCRDlGOEM2ODMzNzczL2RpV09DQjh1Q2NEeC1udTBtYkYxbHdWbHdP
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvZGlXT0NCOHVDY0R4LW51MG1iRjFsd1Zsd09zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG
NDI5LzI2NzU4N0E4MzcxOTExRjFBNjZCRDlGOEM2ODMzNzczL2RpV09DQjh1Q2NE
eC1udTBtYkYxbHdWbHdPcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCjkB3yOdqx/fzVkNKe5ffUHkW6TgSYoQ98F7GS3i1apA0dMfsUTAmrb+74t0e5
f81YxR9VayefPlVfeDiXeAPUPISaAR3xwbY4hj79WDIFNLdpY2VYGra5v3V+oKYS
UybVO5844BIWxFdz4kAt5h5XyG/SPP4ptImrijfshJXSa6zeAkrK9S0YflitRYbk
OjYpYLH3kNAKA0FvgLJV26y4SqvcMnAYdvYjafB24Rn1m2qAbUgPm22FWb73S2k0
Swj23PmSWFZXNOjTl2QznNayycfh65cmvd4xvygS/z4j6plQe4Xp9MM3yyxa84YQ
52I/1g619TdkBuKKLKPypzx3
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:19 2026 by rpki-client