Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
File:                     t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json)
Hash identifier:          AA1y7QoE6lNKeIAStIeT1XYdUZNxiRc8JUC5n+ATQS4=
Subject key identifier:   41:6B:0A:EC:78:87:4A:67:46:F4:58:EC:10:20:BF:DC:71:38:A8:2D
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1BF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
Manifest number:          1BA2
Signing time:             Fri 12 Jun 2026 16:13:49 +0000
Manifest this update:     Fri 12 Jun 2026 16:13:48 +0000
Manifest next update:     Fri 19 Jun 2026 16:13:48 +0000
Files and hashes:         1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: RvO8jy3jt+a371sO2EJD+NOmi8WbfeLYnKLb+GgSe0w=)
                          2: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: W8hlVsC5I0VPPg2kjR6TpTtecD0WvUvNvC2e5sJ/hIQ=)
                          3: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: ZaZYPfA17ML/f/J4P82QVyDEPcDzxxZaNFjB0O9tVyE=)
                          4: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: 1NxyYZi8z+4zSdOTPHU5FWVo8GDquYcWL1OwjVPiKNg=)
                          5: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: AD+/rm2MmNUok2HarnjytNgvmBO5YkdTWhvT8ie3l4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7160 (0x1bf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Jun 12 16:13:48 2026 GMT
            Not After : Jun 19 16:13:48 2026 GMT
        Subject: CN=6a2c303d-05ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:bf:25:d0:99:3b:61:54:38:8d:4e:14:16:
                    64:f6:47:15:45:63:0f:ab:50:5d:4d:a4:b3:b6:a3:
                    e4:63:32:84:68:14:63:46:ca:1e:29:47:1b:96:0b:
                    4e:a4:d8:e5:90:c3:47:1a:97:3e:ee:ac:0d:c0:c1:
                    de:71:fd:d1:d4:9e:60:05:d9:c3:65:77:5c:53:f4:
                    15:e6:9b:49:63:a2:38:f9:31:38:8a:9f:5a:f1:ba:
                    35:e4:b6:b5:46:e5:1e:fa:ef:f0:ab:91:78:34:00:
                    f3:91:17:05:7f:4b:08:44:f7:0e:01:7a:86:88:e3:
                    78:e3:38:a0:02:46:d8:3d:b1:b3:09:4b:0b:fe:b1:
                    d3:43:c4:4e:fe:d5:8d:c6:bc:ac:0b:b0:48:8b:67:
                    36:a2:96:87:d9:28:e4:68:65:dd:c0:a0:bb:9b:3f:
                    d0:c4:e5:e5:46:7f:a6:e1:ff:79:1f:7a:bd:58:7a:
                    a8:da:8b:9a:5d:78:97:59:2b:cb:40:13:bc:5f:c8:
                    3d:b1:be:f8:68:a0:4e:98:15:ab:26:06:19:cc:4d:
                    05:42:89:46:d0:00:32:ad:b6:15:db:b6:b8:fb:5e:
                    48:4e:15:a8:a6:f3:b4:10:27:13:ce:a9:23:63:a8:
                    ea:03:da:45:84:1a:31:ba:b4:30:31:ca:e3:97:8b:
                    48:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6B:0A:EC:78:87:4A:67:46:F4:58:EC:10:20:BF:DC:71:38:A8:2D
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:24:20:8b:7e:ec:ed:5a:f1:f9:3c:ec:b4:65:71:dc:8b:
         73:fd:1e:d0:e3:e4:02:06:91:e9:56:60:f2:6e:05:1e:9f:5f:
         53:df:7b:28:77:ad:26:e9:40:7f:4e:c4:38:20:2d:cd:2f:ec:
         4a:b3:91:ca:b6:3a:48:24:cf:d4:6f:15:61:34:90:4d:e3:ea:
         a9:a0:ce:3f:ad:b4:95:64:91:65:ee:61:a2:8b:2e:73:c6:65:
         e4:be:9a:8b:dd:17:5a:a8:d9:04:4e:4b:71:d1:1d:b4:59:56:
         08:f4:bf:b2:09:16:ae:35:ca:fa:85:1c:d9:40:82:43:53:dc:
         7c:fc:c8:12:a4:de:50:5c:91:4a:ee:35:44:de:ac:55:86:87:
         65:3f:97:68:2a:18:c2:28:00:3a:57:24:79:a3:a5:a9:ea:3a:
         ec:2d:fa:d7:db:08:c7:89:1f:17:6e:a3:0c:02:f4:79:e5:30:
         00:ac:50:e2:41:0a:cb:0c:32:68:0a:35:60:c8:6d:65:dc:96:
         b3:41:37:3c:49:c3:68:9e:78:45:12:c3:c2:2b:9c:fb:78:75:
         3f:ca:2f:1b:45:d1:0d:64:19:ff:63:b2:f5:9b:67:b2:86:35:
         cf:42:65:5f:7b:88:68:1e:7b:ef:5d:6f:bf:b3:83:3f:e7:b7:
         66:3b:17:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:23:35 2026 by rpki-client