Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
File:                     if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json)
Hash identifier:          QGvDtEusx1u0ENVypMCmlUujBzqejNYTLjnvMdiq2Po=
Subject key identifier:   D1:50:B6:98:E7:6B:1A:26:56:8B:01:0E:6A:E1:3B:69:BF:3E:D4:6E
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Certificate issuer:       /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial:       357A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
Manifest number:          3553
Signing time:             Tue 02 Jun 2026 15:04:40 +0000
Manifest this update:     Tue 02 Jun 2026 15:04:39 +0000
Manifest next update:     Tue 09 Jun 2026 15:04:39 +0000
Files and hashes:         1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: Z770VIb+4O5wWnu2aK5vBnwIGVVmes8bjbE4DWKY4j8=)
                          2: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: z7Wg/yYEe/naNZajz7OC8CRPdjQ8pKf0KALnyOn87iA=)
                          3: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: O1SYsuH+O9dWW6LgLbXKRQezQd0QTg2T+y3+yaSnx9w=)
                          4: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
                          rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13690 (0x357a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
        Validity
            Not Before: Jun  2 15:04:39 2026 GMT
            Not After : Jun  9 15:04:39 2026 GMT
        Subject: CN=6a1ef107-81af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a5:12:b5:88:b3:fa:d2:16:27:18:c4:97:f8:
                    5e:7d:12:41:ff:b6:5e:9a:1f:7e:da:b4:15:37:60:
                    b4:34:29:fc:58:32:ef:ff:30:66:ea:47:17:69:e2:
                    24:e3:13:8d:a6:ee:be:e2:e0:4b:c4:58:d8:f5:4c:
                    a3:47:1e:3a:c5:e8:89:2c:28:89:a2:6f:80:7e:86:
                    2d:29:3c:bd:71:0b:86:81:02:26:9b:a8:80:ac:a2:
                    65:3c:d9:70:8d:ac:9e:45:0a:d0:b5:9b:04:1b:2e:
                    d1:eb:e0:8a:02:ae:2e:39:9f:48:ef:a4:bb:89:37:
                    82:ad:0d:30:b9:11:47:bb:9e:76:0a:7d:b9:5f:08:
                    75:f9:bf:3e:f1:f2:08:5d:8f:ba:ee:d1:99:7c:0c:
                    4b:09:56:9f:b8:34:4d:87:2e:9c:9a:f1:90:5a:60:
                    f4:56:b6:71:62:98:10:35:34:48:69:24:2b:a8:cf:
                    00:f7:89:c2:82:ae:77:88:16:8a:90:14:f0:5a:6f:
                    4b:33:f1:46:85:6d:30:61:4a:f7:2c:df:91:f9:59:
                    21:57:ce:59:29:97:1d:ee:12:8e:c3:56:0c:28:60:
                    1f:21:2d:67:67:5a:4c:cc:bb:c2:6c:ee:94:41:ea:
                    c2:f1:3f:2f:9c:90:a4:db:0a:67:4a:cf:00:11:ca:
                    98:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:50:B6:98:E7:6B:1A:26:56:8B:01:0E:6A:E1:3B:69:BF:3E:D4:6E
            X509v3 Authority Key Identifier:
                keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:29:5d:a3:e3:b8:79:2d:92:ce:21:fa:c5:e3:cd:46:4b:7a:
         da:66:33:76:93:83:dd:c7:ab:c7:65:40:a7:d3:c2:99:8a:37:
         54:cb:77:f2:6f:cf:c0:6a:31:62:37:01:40:1c:ab:a6:3a:b0:
         2e:ce:75:f1:34:3e:12:25:19:bc:43:bd:53:70:e2:75:d5:08:
         64:2c:31:a7:7b:93:e1:60:9d:2d:2a:b9:f2:34:9e:4f:9d:1d:
         65:73:0f:21:6e:ab:10:ee:e9:ee:a1:6c:6b:cf:bf:eb:fc:50:
         5e:78:96:90:fd:33:1c:61:0f:e5:01:ca:54:37:c7:99:fe:fc:
         83:0a:87:79:26:8c:97:ce:3b:b1:2d:82:55:cc:01:dd:6a:08:
         b1:11:e2:07:dc:c6:48:3a:2d:1c:63:36:74:5f:eb:70:cd:4f:
         f9:c3:5f:6b:29:e5:3f:05:73:d6:be:f3:2f:79:03:5f:64:23:
         1c:e6:14:4b:89:b2:1d:da:b0:5b:a1:69:39:79:e9:07:95:33:
         db:df:16:b8:cb:46:3c:84:5c:45:97:73:aa:92:72:cf:3d:a2:
         3c:c6:ea:1f:70:ef:b7:d9:a0:00:d4:62:d5:1f:87:df:31:05:
         5c:95:3b:f3:83:bf:70:9e:de:70:8d:2d:a8:b6:21:4e:5d:5d:
         eb:a4:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:40:57 2026 by rpki-client