Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          8a7pdlXMeFEAZfKmTb0DbAEUYbnUP3WH/cLUVVC9Vm4=
Subject key identifier:   98:7E:7F:0A:A3:F7:CC:2F:41:6E:50:6F:D8:34:35:BB:C5:FD:9A:5F
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0D84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0CAC
Signing time:             Fri 05 Jun 2026 02:21:58 +0000
Manifest this update:     Fri 05 Jun 2026 02:21:57 +0000
Manifest next update:     Fri 12 Jun 2026 02:21:57 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: f3TvlwsoIzjkfmOZK+98qNiIHwFmnG5GFFZ3HgnGi9U=)
                          2: E3903588DA3311F082FD85DA8AD3641D.roa (hash: MfOj3lbGuO/G5TuCaMkDAViR5jscnY+4WI5jIiqpGsA=)
                          3: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
                          4: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: z9uQmxAplU6R3Ut9zsE253hEALJQfwoBwNgxaYjFwPo=)
                          5: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: s+8+Ay/MDWEzNmYQjEi8P9yXENJTqx4r4dR7RY92skY=)
                          6: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
                          7: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
                          8: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: bq9TzRhG0YcuxnkwLOhAfWs5GL/Qvk3+Q63cN6+9Ro4=)
                          9: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: gHvNsWly8Kw30Typ48MzQXoDCYERYi0RW34Z6gmffVg=)
                          10: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
                          11: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
                          12: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: RcYolDaRAN1Hi//EmOTv5sFW3I9hLGGajXq2gFlI3o8=)
                          13: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
                          14: 50C74740608511F1B54688666E47A888.roa (hash: IQGnQ5zQbYNcFjoaC/X8FlYzSh99L1UkIksPVrl/4Lc=)
                          15: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
                          16: 5164F13EDBD811F0A0A88CE756641951.roa (hash: S+wwMGadgYhMS5OREKeaPh6PDBaoFk4/7hdgf2PBnsw=)
                          17: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
                          18: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: rx1Mf7ylLJlz5TrZQMaxu72qnNGJnnaZIoeFSJobN+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 02:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3460 (0xd84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Jun  5 02:21:57 2026 GMT
            Not After : Jun 12 02:21:57 2026 GMT
        Subject: CN=6a2232c6-2705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:98:f0:51:fb:e2:fb:8e:24:95:5b:09:ef:
                    cb:9e:91:fd:01:0b:98:95:fc:f5:c9:0e:ec:0b:c4:
                    4e:e5:9e:0f:12:85:20:2a:62:41:74:35:52:67:e1:
                    29:19:6f:03:11:66:d2:91:15:35:f7:ba:71:c1:73:
                    80:c6:95:3c:da:08:1a:19:ba:ce:d5:0a:8b:58:35:
                    6d:91:67:8e:98:ec:f8:36:2d:13:81:27:be:83:bf:
                    3b:18:7d:ea:ba:5b:60:12:5d:50:af:cb:29:bf:bd:
                    5c:3d:57:45:5f:8b:7a:2f:d4:66:0b:6d:41:dc:61:
                    2c:0f:a2:95:3d:e6:4f:32:c3:ca:d6:ab:09:a4:62:
                    46:07:93:80:28:f7:62:f2:6f:a4:d2:6a:f2:f9:5c:
                    87:dd:71:46:9d:51:7f:7e:7f:63:18:cd:2a:50:3f:
                    93:b4:12:5f:ea:1f:45:d4:6f:d2:0f:c8:28:42:66:
                    55:d1:05:d0:ef:55:03:e7:a8:78:9a:f2:ba:fc:28:
                    15:b1:e4:18:b8:89:f6:84:2d:50:cb:c9:48:dd:48:
                    54:81:6b:f9:71:3f:00:7e:4c:49:55:63:89:e6:0c:
                    78:9f:2e:e9:30:78:09:d0:0f:bb:a4:3c:0f:bf:fe:
                    40:b4:b4:70:fd:ca:ce:e5:a6:4a:62:83:d0:ea:60:
                    fa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7E:7F:0A:A3:F7:CC:2F:41:6E:50:6F:D8:34:35:BB:C5:FD:9A:5F
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f4:99:60:a6:39:44:28:f1:08:97:aa:dd:98:e7:f8:6f:cd:
         f0:9d:72:d3:a5:40:cf:5e:39:82:7e:97:aa:68:b9:17:39:49:
         0d:fc:26:63:87:7c:8f:19:e3:4e:51:19:fd:89:a9:17:19:d3:
         ae:a5:09:d5:8f:2e:54:f2:80:84:e3:dc:30:90:2c:f5:10:93:
         af:fc:72:61:de:3e:c8:5f:08:2c:a8:3f:c5:1d:95:cd:97:1a:
         5b:e1:61:52:e0:2d:d8:93:d3:75:c2:2c:b5:28:13:be:c4:48:
         74:83:43:06:ae:b7:18:c9:0e:1b:f3:5e:0b:3c:e0:b9:d3:4e:
         f8:9e:dd:f1:e8:00:76:ec:2e:72:00:8d:be:4c:77:6d:70:44:
         d1:e5:36:1a:67:a1:30:18:37:b9:31:cd:78:d0:46:52:7b:0f:
         7b:d8:32:fb:5a:6e:08:86:a7:0e:8a:0e:ba:de:41:58:8b:a7:
         df:03:78:06:8e:b0:5f:30:d4:7e:70:32:5b:f7:b1:eb:ba:73:
         14:05:cd:e3:cd:b1:8b:68:63:f0:ad:33:c6:29:b3:b5:d1:fc:
         00:b0:0e:f0:55:ca:23:de:c5:1b:ab:ad:2a:11:62:0c:7e:bd:
         ae:32:2c:ab:1b:b3:c1:ad:a6:41:c9:e9:04:14:27:ec:de:23:
         cc:73:c2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:21:32 2026 by rpki-client