Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
File:                     6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json)
Hash identifier:          F81Ma5DKK2DFSqTx2XO5RYjU8VJdzodg94rwqXsmg3s=
Subject key identifier:   5F:F1:6E:2B:C9:1E:89:B3:12:B9:0A:F4:38:27:33:21:78:A1:3E:E7
Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Certificate issuer:       /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Certificate serial:       3559
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
Manifest number:          3552
Signing time:             Tue 16 Jun 2026 14:50:52 +0000
Manifest this update:     Tue 16 Jun 2026 14:50:52 +0000
Manifest next update:     Tue 23 Jun 2026 14:50:52 +0000
Files and hashes:         1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: KjRO4aJjAnQusSkFkBZTCMZFKeOk+W26Xphh0WxcGbI=)
                          2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: Cs9JKjCuX2CcXJQrUV7cbcqrEj31WEsSJAImJkXjuRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
                          rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13657 (0x3559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
        Validity
            Not Before: Jun 16 14:50:52 2026 GMT
            Not After : Jun 23 14:50:52 2026 GMT
        Subject: CN=6a3162cc-7a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:19:c6:be:f8:11:fc:a1:bf:9c:f8:f0:21:a2:
                    99:0f:51:87:0d:06:fc:06:ab:0a:3d:84:8f:28:4c:
                    4c:fd:8c:d6:71:0f:86:27:83:14:a3:45:b8:6f:b9:
                    4b:e5:14:34:44:fc:81:10:8a:74:23:fb:1e:fd:05:
                    1d:cb:17:55:72:77:91:cc:9f:30:d2:06:97:fb:49:
                    dc:fc:68:5b:66:48:f9:43:c0:9f:33:83:f1:ed:0a:
                    3f:38:e1:35:77:8b:38:34:b3:26:29:f6:b8:10:c1:
                    80:2a:86:65:47:28:8f:9f:5a:fc:e4:a3:2b:92:6b:
                    bf:86:03:42:88:44:cd:d7:0c:4d:84:9e:14:31:54:
                    c5:ba:35:5a:6e:0d:a3:74:51:8d:3a:8f:06:14:15:
                    0c:78:17:67:2d:cb:27:2f:03:6a:bf:34:a1:98:87:
                    f5:8a:72:63:af:f8:f3:1f:8d:3c:47:60:49:31:8d:
                    76:ba:a6:4b:2a:9f:d3:7c:10:17:6f:46:cc:e3:79:
                    ce:ad:b0:c1:eb:7c:6d:69:27:a0:26:dc:e1:b9:47:
                    2d:96:e7:bc:0c:a7:bf:de:b4:6f:66:5f:08:61:ef:
                    63:90:1c:07:80:c8:4f:36:1b:1a:26:a1:2c:7d:c2:
                    c1:66:1a:28:c8:c6:e0:93:0c:ce:f8:a2:f2:4c:dc:
                    f8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F1:6E:2B:C9:1E:89:B3:12:B9:0A:F4:38:27:33:21:78:A1:3E:E7
            X509v3 Authority Key Identifier:
                keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:9c:2e:90:ec:86:3b:bf:d8:5d:0a:5a:17:6e:60:40:a0:ea:
         7b:c6:0e:45:74:16:b9:fa:35:72:98:c1:75:92:34:b3:b3:d2:
         79:ba:9a:65:92:c5:c4:11:30:26:04:f4:e3:51:68:05:ff:f5:
         e9:06:16:be:ed:f6:38:07:11:38:33:2c:f4:45:d6:f8:63:ae:
         23:d9:e8:f4:7e:77:04:fe:c1:5d:47:3e:d6:99:7a:53:1b:81:
         3a:ca:8a:0c:b1:8e:62:c7:cc:50:4a:47:0f:56:4a:da:05:41:
         dc:44:bf:90:e2:cc:aa:ed:8c:7f:6e:73:19:5f:56:6a:67:30:
         5e:2f:ce:b8:64:8b:db:73:19:fb:c1:70:6c:d5:27:eb:37:82:
         64:7f:b2:1e:a3:66:a0:2a:d3:00:63:c7:cc:9a:35:27:21:23:
         9c:f3:b4:98:7c:fc:83:7f:02:9a:7f:77:04:06:c5:07:cb:c3:
         5a:3a:7e:c4:7b:99:f4:23:65:b5:9f:62:82:49:51:65:6a:cd:
         57:28:5b:df:6a:f5:30:8f:19:e2:4d:27:08:4c:4c:67:de:1f:
         cc:0d:84:96:13:ff:36:eb:f0:b3:c2:29:a0:26:8b:f5:08:c5:
         08:22:98:ef:8f:d9:30:9b:74:c3:81:76:df:1a:49:bd:21:b3:
         b8:2d:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 19:06:39 2026 by rpki-client