Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
File:                     hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft (raw, json)
Hash identifier:          JNu9TqRw1jme5uJ7LZqCaC+VDSbiVz/EsXUSivddL9k=
Subject key identifier:   9F:7F:10:96:B7:73:9A:85:30:02:D4:4B:7C:A5:C5:EB:76:1C:72:71
Authority key identifier: 85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8
Certificate issuer:       /CN=A91C9706/serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
Manifest number:          39
Signing time:             Fri 05 Jun 2026 09:01:27 +0000
Manifest this update:     Fri 05 Jun 2026 09:01:26 +0000
Manifest next update:     Fri 12 Jun 2026 09:01:26 +0000
Files and hashes:         1: hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl (hash: hfL1KbH2W1qLh/HKDvNq3rj0GixORDj8aXBvS9g5LdY=)
                          2: B735FEEA118411F1951E019C333D8C67.roa (hash: qdQyipYaThgccgmXAXR/iB4/lWGcn5evCaadYGd7lUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl
                          rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9706, serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8
        Validity
            Not Before: Jun  5 09:01:26 2026 GMT
            Not After : Jun 12 09:01:26 2026 GMT
        Subject: CN=6a229067-ec4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:dc:68:b6:02:1a:97:1e:e8:5a:0c:69:59:
                    5b:61:a2:3f:53:92:df:fd:24:d5:d7:76:90:d7:04:
                    dd:64:00:86:43:a6:77:87:79:33:b5:ea:d3:65:7a:
                    f6:89:dd:c1:b5:4b:5a:eb:ac:dc:6a:e9:8e:56:74:
                    c2:10:0d:f7:74:d3:43:8a:bb:1a:01:33:4a:b1:73:
                    cd:f7:b1:ea:b8:16:07:50:4c:58:9a:4e:5b:d5:3a:
                    09:14:1a:00:c8:f1:1a:ae:5f:53:11:70:45:7b:a9:
                    2d:cd:95:8a:b7:6a:58:06:2e:cc:80:1c:aa:24:2c:
                    32:2b:ac:35:a0:e6:eb:27:37:34:4c:f2:ac:bd:01:
                    32:13:d6:73:49:53:b0:81:9f:d3:6d:ef:8a:a3:f6:
                    5c:45:fc:12:48:0f:2b:bc:83:41:f8:ff:1d:cc:b6:
                    ac:7f:2d:2a:23:cd:c3:05:ea:c6:fa:e1:a7:a4:f5:
                    f4:0b:1b:14:52:ec:a2:38:2e:59:7e:00:fd:21:a9:
                    68:d5:b9:0d:df:56:db:66:00:a9:35:cc:f0:e1:b2:
                    c4:ef:84:3d:11:f4:95:93:6f:bd:c2:fd:04:80:b7:
                    bc:fd:93:89:c1:f6:e2:09:ca:31:fc:55:86:1a:d1:
                    4b:84:78:20:18:53:44:9e:7c:69:7d:0d:ec:8b:88:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7F:10:96:B7:73:9A:85:30:02:D4:4B:7C:A5:C5:EB:76:1C:72:71
            X509v3 Authority Key Identifier:
                keyid:85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:51:5b:18:da:8d:3b:cc:8c:13:0a:97:03:9c:11:54:90:9d:
         a2:9d:1c:21:5c:34:f9:65:9d:d7:dc:3f:9c:b2:e1:1f:e9:94:
         44:6e:36:77:27:4b:be:6f:3a:37:46:fb:41:eb:d9:ed:a9:63:
         95:ee:b0:b8:64:6d:69:aa:d5:05:64:22:36:85:f7:f7:1a:d7:
         45:6d:9a:50:a1:dd:ec:ad:53:e5:88:e7:6d:60:20:ea:0b:ce:
         67:d1:1b:40:9e:58:c0:1b:3b:12:62:67:ec:db:5e:d7:94:6c:
         e2:50:20:9c:d7:64:5e:a4:54:24:7e:07:00:14:8c:07:d2:61:
         d7:eb:55:78:3b:05:93:a2:f4:fb:a9:a6:77:7c:ee:5e:46:e1:
         d1:b4:b4:2e:8d:bc:22:a1:42:b0:46:06:84:8a:a1:5f:85:5d:
         aa:d0:fc:ac:f3:e7:1a:2a:62:7d:a5:2e:6b:85:f7:31:32:d0:
         ab:dc:27:97:21:18:75:d5:5b:97:b6:5d:89:00:1f:47:f4:6f:
         3d:dd:86:81:90:a3:c2:46:60:7f:c4:8c:26:08:b2:9f:9c:7b:
         6b:0b:81:f8:0c:5f:33:bc:0e:67:f0:ca:49:fd:94:64:a1:ba:
         ca:f2:e8:4b:71:88:4c:50:29:31:9d:a9:16:47:43:75:28:3f:
         98:ba:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:17:44 2026 by rpki-client