Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
File:                     nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json)
Hash identifier:          EWDnkiRWrW22sU3xJwCGysALFFOP4whjxBdHULuacfM=
Subject key identifier:   41:B0:A1:7A:CB:E8:84:58:7E:F6:AB:D1:D9:35:98:CF:EF:51:48:00
Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48
Certificate issuer:       /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
Certificate serial:       354B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
Manifest number:          526D
Signing time:             Mon 22 Jun 2026 15:13:40 +0000
Manifest this update:     Mon 22 Jun 2026 15:13:39 +0000
Manifest next update:     Mon 29 Jun 2026 15:13:39 +0000
Files and hashes:         1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: DELGOYIf8ufl8fK+S8S/p3Ud+OXxy7D55nYbtwZKhZg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 15:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13643 (0x354b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
        Validity
            Not Before: Jun 22 15:13:39 2026 GMT
            Not After : Jun 29 15:13:39 2026 GMT
        Subject: CN=6a395124-a911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:2f:8e:af:4a:13:b4:7c:e3:b4:f0:fe:7d:
                    eb:73:71:82:e3:fc:c4:d9:ad:b2:ef:60:6c:a4:60:
                    a4:09:2b:9d:b7:80:5f:7a:63:2b:3f:d5:6f:f2:b3:
                    3b:be:f3:89:ad:6d:81:86:0d:3c:6d:d1:dd:2b:6c:
                    51:6f:19:ed:b6:7d:5c:a6:82:64:05:cd:a0:18:8e:
                    26:1c:d9:a1:c5:ec:39:ad:ba:82:68:7d:b6:46:d4:
                    06:06:c8:74:19:f5:a4:14:9a:8a:25:f1:cb:f1:21:
                    9d:e7:1b:b0:ef:da:2e:20:00:35:df:89:7c:06:1d:
                    91:40:eb:c0:07:e1:d1:c6:52:95:2b:45:78:7e:68:
                    c1:c7:49:fb:19:04:d0:3e:ed:d7:ce:07:18:b8:c0:
                    f0:59:b7:33:b3:c0:ba:8c:1a:c5:6c:47:ee:94:64:
                    b3:04:de:03:f3:ce:11:43:d0:53:ce:6b:2f:d7:79:
                    b3:38:85:ed:90:93:2c:4c:30:db:07:ef:95:24:f7:
                    58:64:e3:62:e2:2e:a5:b4:d6:ce:f9:45:00:4d:6c:
                    c1:e7:90:1b:14:a1:fd:91:1d:7b:5b:4c:cf:b8:fb:
                    f4:32:34:a7:1d:58:eb:bf:7c:0e:19:72:53:6b:43:
                    96:a3:e4:9d:40:09:62:ce:bd:72:4d:46:98:94:0b:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B0:A1:7A:CB:E8:84:58:7E:F6:AB:D1:D9:35:98:CF:EF:51:48:00
            X509v3 Authority Key Identifier:
                keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:60:c3:7b:9b:c8:ad:a3:d5:a3:58:4a:c5:67:dd:08:5b:60:
         3d:60:7f:70:f0:8e:0c:82:38:ab:0e:54:cb:68:23:11:bd:b1:
         5f:0d:d9:44:e6:89:06:9e:c5:e7:58:50:fd:69:42:8d:4d:85:
         85:01:98:22:af:05:68:8c:e6:97:9e:4d:cb:c4:55:f2:84:a9:
         13:c6:5e:82:9e:ec:b0:6e:ec:ca:90:cd:b6:73:3e:f7:b2:3c:
         33:c3:a6:8b:a5:f0:68:e3:b5:2a:a5:1f:56:ca:fd:4f:1d:ee:
         dc:0c:27:66:58:5e:22:74:a8:8d:19:52:a0:ff:7d:da:01:85:
         fa:ba:7d:94:f0:a8:ae:0f:a2:0f:f7:a4:53:30:dc:6e:00:89:
         f5:46:34:b9:e6:e9:3b:a2:a2:b0:27:cf:7d:45:a4:cd:c6:50:
         30:67:5a:a0:e4:02:5f:ba:7b:1d:7e:ea:50:58:f1:34:b8:37:
         38:99:e4:0d:67:70:c2:43:13:bd:30:03:e2:64:60:7b:11:bf:
         a3:c4:ae:02:d7:63:fb:98:4e:46:fd:20:a5:0b:f2:dd:20:9e:
         47:11:8e:09:82:84:01:b7:fc:a0:2a:e2:2c:5a:ed:b5:8e:b5:
         59:14:08:26:a6:76:4f:32:a7:94:fc:44:37:cf:29:4c:3a:75:
         41:2d:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:23:40 2026 by rpki-client