Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft
File:                     1BPN69UikmPRj0A_RCF4UlVUbMQ.mft (raw, json)
Hash identifier:          o+SzxzSks//kybem79ZGXuSaYCbIfjJPyofEEmfHEx4=
Subject key identifier:   90:2B:BF:6A:FF:9D:2F:82:67:42:27:D5:4C:DE:52:D1:58:7D:E5:31
Authority key identifier: D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4
Certificate issuer:       /CN=A91A4F53/serialNumber=D413CDEBD5229263D18F403F4421785255546CC4
Certificate serial:       04B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft
Manifest number:          04A8
Signing time:             Mon 22 Jun 2026 23:59:41 +0000
Manifest this update:     Mon 22 Jun 2026 23:59:40 +0000
Manifest next update:     Mon 29 Jun 2026 23:59:40 +0000
Files and hashes:         1: 1BPN69UikmPRj0A_RCF4UlVUbMQ.crl (hash: LGdJlB8c+v/FCAa/ba4Hn54ck7J5wWftdI88vZkSxAQ=)
                          2: 1ACED69481C311ECA399B842C4F9AE02.roa (hash: 9Zpt96WX+eze+jJh3Mok2LtHJuDh2RKN+kS+24dnoWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 23:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1200 (0x4b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4F53, serialNumber=D413CDEBD5229263D18F403F4421785255546CC4
        Validity
            Not Before: Jun 22 23:59:40 2026 GMT
            Not After : Jun 29 23:59:40 2026 GMT
        Subject: CN=6a39cc6d-9523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:25:0e:c1:3f:5d:c1:c6:98:a3:f6:0f:d8:
                    67:ec:c8:3d:5c:f3:82:c6:50:09:e5:ba:b7:34:06:
                    4f:16:72:42:2e:86:14:82:4a:02:45:9b:be:1a:f3:
                    50:df:3d:d0:bc:49:18:5d:b7:e9:31:8a:21:fe:b0:
                    76:16:72:0f:57:4d:5e:b1:90:67:4a:fd:43:bb:43:
                    5f:7f:f6:3a:ca:8d:57:5c:ff:00:dc:0e:fc:94:4c:
                    c3:0c:5f:4e:7a:3e:74:9c:30:7d:53:62:97:d4:bd:
                    b5:c7:5d:af:89:d4:fc:95:74:c0:c1:44:64:10:a7:
                    b4:d7:4f:a6:3a:ee:9b:c9:d5:8d:84:2c:ad:9e:a2:
                    fe:b7:a1:d7:0f:ae:ee:64:c4:4f:80:77:07:b8:0e:
                    05:0c:57:b5:8c:e7:06:e3:92:f5:9e:21:61:5b:68:
                    f8:b9:4b:e0:89:3e:e0:69:77:e2:75:4b:eb:29:b0:
                    81:33:2b:59:8e:5d:ae:54:b8:b1:c6:76:07:39:f5:
                    63:00:33:cd:b9:77:96:77:62:70:52:e3:f9:4c:7e:
                    00:5e:f6:57:25:ee:d8:20:60:fe:a5:44:03:ad:30:
                    7d:73:9a:40:74:7f:ae:04:a8:6d:07:6a:2f:69:1c:
                    5e:c5:b4:31:92:1f:21:de:3d:47:e0:9b:c2:dd:1f:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2B:BF:6A:FF:9D:2F:82:67:42:27:D5:4C:DE:52:D1:58:7D:E5:31
            X509v3 Authority Key Identifier:
                keyid:D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:79:36:0f:4d:b0:9e:91:f9:ca:61:14:31:c2:c7:71:1e:29:
         d6:29:eb:9f:9d:9d:b2:bf:02:fb:52:ad:2c:e9:48:bd:88:66:
         11:64:7c:7c:cc:03:29:39:63:92:c7:da:20:cc:d6:13:7c:e2:
         c6:11:dd:30:58:bd:7e:12:01:00:01:9c:12:ce:11:45:c1:37:
         e6:36:f8:27:21:af:20:df:44:d6:df:b0:f8:33:ee:c9:2d:d8:
         c1:b7:7b:ba:cd:12:d6:79:6f:5a:10:7c:24:3f:80:72:7c:18:
         23:28:3f:0a:d2:9a:52:ce:23:ea:67:63:c0:49:bd:8b:11:02:
         3c:50:29:be:6d:fb:74:d3:8b:0d:d9:b7:2c:e3:1b:3e:57:22:
         36:eb:1c:3e:56:62:0e:84:0e:e0:06:37:4c:06:ce:a3:b6:d0:
         0c:ff:f7:13:7a:2b:82:0d:67:66:f2:e5:b8:81:3e:0b:e0:52:
         f1:84:62:3d:5b:96:fd:98:6d:89:0c:fd:6d:cc:35:d8:bc:b2:
         e0:a2:32:db:b7:f9:73:a6:3c:16:10:e8:ff:07:cf:c6:c4:61:
         4a:8c:9a:44:c3:87:42:2e:07:82:33:40:41:09:ec:08:76:8c:
         26:ab:25:2d:15:fc:57:7d:9b:2a:5e:9e:19:bc:a3:34:75:c1:
         8f:83:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:12:58 2026 by rpki-client