Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
File:                     s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json)
Hash identifier:          Igwdfy5QW9XjzZkW9L+Zbeh64JOP+v5LaYykZgnKZl0=
Subject key identifier:   CC:7B:A3:32:98:3D:15:79:3A:E7:5D:41:8B:F2:70:03:55:93:96:A0
Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6
Certificate issuer:       /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
Certificate serial:       0BEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
Manifest number:          13E7
Signing time:             Mon 22 Jun 2026 18:52:21 +0000
Manifest this update:     Mon 22 Jun 2026 18:52:21 +0000
Manifest next update:     Mon 29 Jun 2026 18:52:21 +0000
Files and hashes:         1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: G3fQHr1h9eJKFG0vcIxITn4A2M4G7mfLFdipidYgjD0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl
                          rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3052 (0xbec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199231, serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
        Validity
            Not Before: Jun 22 18:52:21 2026 GMT
            Not After : Jun 29 18:52:21 2026 GMT
        Subject: CN=6a398465-b453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d4:b0:09:5c:4b:2f:98:39:35:b3:dc:51:65:
                    5e:4e:48:0a:e9:7f:d5:31:1c:33:26:c3:0a:75:cd:
                    bf:be:16:fa:97:be:b1:dc:e1:3d:52:a9:9a:86:9c:
                    91:77:a6:da:b1:6f:ee:69:26:d9:f7:1f:54:94:b9:
                    eb:f2:c7:6d:01:ce:a2:60:d2:07:52:78:d9:59:d4:
                    d8:95:87:4a:da:0f:d6:0e:f4:e0:d1:e2:ca:98:6f:
                    ed:46:92:cf:a7:f3:b7:8e:b0:ad:16:47:af:2d:f6:
                    b9:f9:34:9b:b8:a6:fa:97:78:57:ff:7b:5a:c6:3d:
                    1b:8b:14:1b:ee:8c:94:6d:3f:c4:bb:bd:49:78:25:
                    aa:e9:7b:eb:b4:40:db:ed:e9:f0:65:99:be:8d:41:
                    3c:f3:35:82:d6:13:b9:fb:bc:a3:48:76:76:77:66:
                    04:4e:a6:08:4a:cf:bf:00:16:5d:b5:85:ec:19:88:
                    05:e2:d5:c1:f1:8b:60:5a:d2:d0:7c:d6:19:fd:78:
                    10:88:a9:a4:19:99:1d:5f:06:a3:c1:de:4f:7b:7d:
                    56:2b:78:07:1c:1a:f6:9a:8f:24:9c:04:05:50:fd:
                    c0:92:fc:ae:14:1c:cb:07:0e:8f:b8:dd:f8:3e:38:
                    44:a4:1e:00:4a:ec:59:39:e2:33:64:16:b9:b0:6f:
                    97:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7B:A3:32:98:3D:15:79:3A:E7:5D:41:8B:F2:70:03:55:93:96:A0
            X509v3 Authority Key Identifier:
                keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:cf:cf:b8:21:d8:9e:45:46:89:2f:70:14:f0:0c:f3:8e:
         ff:e6:27:a9:91:63:93:ba:8e:32:36:cf:51:3b:4d:2e:c9:9d:
         38:9e:5c:71:b7:e9:a0:c6:a2:a2:06:3f:1d:fa:d6:b6:5d:2b:
         4a:8f:d0:ff:76:16:b8:49:a9:2e:a6:01:52:cc:54:0c:bb:80:
         2c:09:e5:70:53:39:97:d9:cc:73:3d:c4:9b:3d:75:5f:46:97:
         ef:31:89:44:95:e5:96:8b:66:7f:c8:35:79:45:99:db:27:d8:
         13:13:21:bd:10:57:d5:b8:97:f0:5b:a0:f7:0a:b3:b3:6c:c5:
         c5:18:98:9a:e1:1f:f3:9d:87:45:3b:50:88:fa:10:7b:8a:7c:
         e1:d8:87:b7:1d:a5:d7:e6:36:2d:c8:e4:6a:a0:b2:56:6d:d7:
         a2:81:cc:10:9f:43:01:c4:45:d1:5e:69:5c:93:3a:01:fa:d7:
         68:8a:f4:d0:42:4f:84:46:67:02:b7:65:51:08:90:f2:ab:77:
         f8:aa:b8:1b:07:72:3d:5c:c3:b6:10:fa:e2:f6:d2:c1:29:dd:
         c5:f0:4a:9c:d1:27:36:e4:05:98:b1:45:43:a8:b7:68:c2:4c:
         69:8b:a3:62:51:75:6c:7f:ef:d1:7c:97:fc:78:f8:30:55:29:
         27:42:df:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:12:12 2026 by rpki-client