Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.mft
File:                     9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.mft (raw, json)
Hash identifier:          Jf3crTUTMh5a177tO2hBhmnHM8r9L5qntk+Soc+d98g=
Subject key identifier:   40:CD:45:6E:3D:70:58:C6:73:78:93:55:00:D2:19:BA:7E:96:A7:3E
Authority key identifier: F5:5C:AE:E9:FC:44:0B:73:F4:51:CB:16:7F:1E:C5:B4:D9:6B:32:44
Certificate issuer:       /CN=A918A331/serialNumber=F55CAEE9FC440B73F451CB167F1EC5B4D96B3244
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.mft
Manifest number:          20
Signing time:             Tue 23 Jun 2026 09:08:40 +0000
Manifest this update:     Tue 23 Jun 2026 09:08:39 +0000
Manifest next update:     Tue 30 Jun 2026 09:08:39 +0000
Files and hashes:         1: 9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.crl (hash: nvwzJfx9kdBJqXoEzYD95Uln3AeizPxxn+LIrS0h2Dc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.crl
                          rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 09:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A331, serialNumber=F55CAEE9FC440B73F451CB167F1EC5B4D96B3244
        Validity
            Not Before: Jun 23 09:08:39 2026 GMT
            Not After : Jun 30 09:08:39 2026 GMT
        Subject: CN=6a3a4d17-adcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:19:83:ee:24:92:74:ad:ad:84:07:f3:09:e5:
                    a0:1a:52:d5:70:eb:ef:4f:8e:e1:8a:60:69:e7:f6:
                    3d:16:1f:49:15:4c:8c:e2:df:d8:cd:44:51:be:79:
                    40:04:1d:31:1f:6c:0c:fc:16:4f:e3:bd:b4:43:98:
                    1d:b1:57:17:13:67:88:59:23:a5:35:ec:ba:7a:f5:
                    2d:d4:c4:29:89:c7:71:5e:03:e3:e5:45:7d:a9:17:
                    db:be:2c:a9:8c:ca:d9:a1:27:1a:77:2b:8b:69:87:
                    1a:95:b4:cf:ed:07:95:74:54:aa:9f:54:2e:bb:fb:
                    ef:20:85:29:3a:5f:23:a4:12:9a:6b:4e:bc:5c:05:
                    1d:95:d0:7a:fc:26:4d:78:ca:2a:f7:7c:26:fa:12:
                    d8:2c:ba:71:30:1b:e2:29:a7:53:a0:60:7d:c1:7b:
                    9f:13:73:31:81:82:cb:fe:c8:6f:a0:9e:db:e2:16:
                    31:6c:02:a1:7a:96:46:b9:a4:53:13:99:8f:18:c6:
                    46:3c:a0:bd:14:7c:ad:69:45:8b:e7:f8:4e:b1:00:
                    e1:6a:9d:02:8c:22:f2:70:d3:fa:3b:91:1c:51:28:
                    9d:b5:99:4a:e1:45:32:33:bc:09:b4:31:67:52:ad:
                    96:29:fe:e1:b2:81:eb:a2:d0:78:2d:14:1a:e6:02:
                    56:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CD:45:6E:3D:70:58:C6:73:78:93:55:00:D2:19:BA:7E:96:A7:3E
            X509v3 Authority Key Identifier:
                keyid:F5:5C:AE:E9:FC:44:0B:73:F4:51:CB:16:7F:1E:C5:B4:D9:6B:32:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ca:99:a5:1b:5f:e9:d3:b5:df:7b:14:4d:1f:98:b9:58:c1:
         b5:7b:6a:0e:ea:35:40:4f:65:a6:e3:3f:6c:47:d5:59:b8:88:
         73:f9:6b:a9:38:60:14:f6:e8:6e:32:60:2e:01:29:6f:50:ca:
         6d:a0:c6:e3:97:43:d7:60:be:b3:8e:51:b2:39:e1:b9:8e:72:
         b6:3c:4d:ce:41:5f:f3:10:74:64:9a:0d:4c:2a:8c:2a:45:84:
         09:9f:e0:68:c3:6e:04:6b:4e:26:27:aa:1c:cc:cb:50:a8:e5:
         9f:e3:ef:93:64:f2:94:a2:f4:78:de:00:8f:00:5d:9b:c6:07:
         2e:d8:96:d9:64:70:5b:e4:bf:53:7c:73:a7:e8:fa:f4:9f:45:
         9b:a3:bd:d4:1e:55:df:dc:21:5d:82:47:3b:9c:6d:0b:5a:c1:
         87:fe:bb:c9:c1:02:8f:79:d0:98:75:db:0c:38:79:6c:4d:19:
         15:77:52:ca:1b:b4:78:17:76:59:e5:0a:92:16:e5:00:f9:d7:
         6a:7c:96:ee:72:1d:b5:93:a5:d0:66:7b:9c:b3:80:46:9d:5c:
         58:df:0f:86:f7:f0:cb:e5:16:31:e6:fc:86:8f:1a:2c:4d:d4:
         19:c2:5f:cc:7d:f9:45:62:ed:c2:e1:7e:90:1e:b2:c4:2e:90:
         51:33:2f:9d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QTMzMTExMC8GA1UEBRMoRjU1Q0FFRTlGQzQ0MEI3M0Y0NTFDQjE2N0YxRUM1QjRE
OTZCMzI0NDAeFw0yNjA2MjMwOTA4MzlaFw0yNjA2MzAwOTA4MzlaMBgxFjAUBgNV
BAMTDTZhM2E0ZDE3LWFkY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeGYPuJJJ0ra2EB/MJ5aAaUtVw6+9PjuGKYGnn9j0WH0kVTIzi39jNRFG+eUAE
HTEfbAz8Fk/jvbRDmB2xVxcTZ4hZI6U17Lp69S3UxCmJx3FeA+PlRX2pF9u+LKmM
ytmhJxp3K4tphxqVtM/tB5V0VKqfVC67++8ghSk6XyOkEpprTrxcBR2V0Hr8Jk14
yir3fCb6EtgsunEwG+Ipp1OgYH3Be58TczGBgsv+yG+gntviFjFsAqF6lka5pFMT
mY8YxkY8oL0UfK1pRYvn+E6xAOFqnQKMIvJw0/o7kRxRKJ21mUrhRTIzvAm0MWdS
rZYp/uGygeui0HgtFBrmAlaVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQM1Fbj1w
WMZzeJNVANIZun6Wpz4wHwYDVR0jBBgwFoAU9Vyu6fxEC3P0UcsWfx7FtNlrMkQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMzMxL0M5Njg3OEVFM0ZB
NzExRjE5NTczQURGMkJFODMzNzczLzlWeXU2ZnhFQzNQMFVjc1dmeDdGdE5sck1r
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOVZ5dTZmeEVDM1AwVWNzV2Z4N0Z0TmxyTWtRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB
MzMxL0M5Njg3OEVFM0ZBNzExRjE5NTczQURGMkJFODMzNzczLzlWeXU2ZnhFQzNQ
MFVjc1dmeDdGdE5sck1rUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQByypmlG1/p07XfexRNH5i5WMG1e2oO6jVAT2Wm4z9sR9VZuIhz+WupOGAU9uhu
MmAuASlvUMptoMbjl0PXYL6zjlGyOeG5jnK2PE3OQV/zEHRkmg1MKowqRYQJn+Bo
w24Ea04mJ6oczMtQqOWf4++TZPKUovR43gCPAF2bxgcu2JbZZHBb5L9TfHOn6Pr0
n0Wbo73UHlXf3CFdgkc7nG0LWsGH/rvJwQKPedCYddsMOHlsTRkVd1LKG7R4F3ZZ
5QqSFuUA+ddqfJbuch21k6XQZnucs4BGnVxY3w+G9/DL5RYx5vyGjxosTdQZwl/M
fflFYu3C4X6QHrLELpBRMy+d
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:09:33 2026 by rpki-client