Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File:                     B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier:          2MjLLpJCXuhYBOtW/dq70JhELmkfsT4j3FD64JB5YAs=
Subject key identifier:   21:18:F8:40:15:9C:32:ED:A1:58:CE:6C:4D:CB:04:C1:69:AF:DE:83
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer:       /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial:       1F0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number:          1EE5
Signing time:             Mon 22 Jun 2026 16:01:14 +0000
Manifest this update:     Mon 22 Jun 2026 16:01:13 +0000
Manifest next update:     Mon 29 Jun 2026 16:01:13 +0000
Files and hashes:         1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: VkUPffkHJLfQK/t0LC5JlHB/Th/NMXvDaYl3EcQSfu0=)
                          2: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: n9OEIi5D0MMrsYRQLCAAp//0ZBA0omE88k2orZdv2K4=)
                          3: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: VMJkk/VVPV9Iy+puWdZ7776oUW7EEdM96gkspmEQArY=)
                          4: BD314CEA619711EE81211277C4F9AE02.roa (hash: 5im2El+XqMtWQp5XtOEvy4f/d1/1FRGNJyssOKlFrL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7949 (0x1f0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
        Validity
            Not Before: Jun 22 16:01:13 2026 GMT
            Not After : Jun 29 16:01:13 2026 GMT
        Subject: CN=6a395c49-ba68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:ac:90:c3:d7:63:db:8b:62:b6:e9:ab:82:
                    5d:27:a7:b2:cd:41:7a:13:b9:47:61:6e:58:83:55:
                    eb:f4:3b:48:74:ee:b2:a0:f3:09:fe:19:52:f8:7f:
                    f8:98:d6:03:75:55:bc:7b:48:26:8b:65:5a:e9:9d:
                    42:34:3d:8f:73:99:20:ce:cf:be:3d:af:2e:26:e5:
                    55:c9:8f:88:ae:f1:4b:64:ba:28:24:3d:9c:dc:ff:
                    92:ed:24:eb:42:b9:aa:ad:7a:e7:59:a1:b8:9c:6f:
                    33:bb:7e:ef:e4:a7:bd:4f:1e:ea:4f:76:97:f1:c1:
                    c2:2b:fd:1f:8b:44:27:a1:be:96:ad:a1:a5:17:bc:
                    0f:e7:80:91:94:5c:f8:05:b0:49:9b:2b:08:34:d0:
                    99:a2:bc:34:f2:eb:6d:1c:20:d6:4e:2e:fb:c4:70:
                    ab:64:a0:2c:e4:e4:a2:b5:aa:db:e9:2e:bf:79:b1:
                    f6:fa:0e:0b:47:ce:39:ab:28:1b:ac:1b:ec:11:a7:
                    c0:d5:56:64:32:f7:8d:37:71:a2:98:26:c0:8f:ba:
                    b2:8c:39:93:b4:02:b0:1e:f4:92:10:b3:23:2f:e9:
                    bd:dd:57:c3:f8:59:63:c0:b0:ba:4c:f5:58:3e:bc:
                    4f:df:88:fb:a5:96:b2:21:fb:af:4b:c8:6b:85:6f:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:18:F8:40:15:9C:32:ED:A1:58:CE:6C:4D:CB:04:C1:69:AF:DE:83
            X509v3 Authority Key Identifier:
                keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7c:c1:c9:2c:5a:3f:28:ae:e1:fd:a4:59:e8:64:b0:60:19:
         0a:82:67:ea:79:db:60:94:43:b6:78:3f:0f:99:f9:c6:b8:0b:
         41:49:f8:8c:ef:a1:b0:79:20:cd:67:89:21:ba:f4:bc:de:5e:
         8f:08:51:f3:9c:4c:66:d5:8a:5e:bc:9d:f2:71:2d:2d:8e:b8:
         dc:bf:57:3e:85:3c:b8:8a:b9:e7:59:cd:bb:03:66:04:36:16:
         f8:97:55:28:48:cf:6b:0c:c7:18:44:1e:53:ec:a8:5b:d3:f1:
         13:31:1d:3d:c4:cf:27:58:70:bd:42:e5:2a:29:8f:d1:45:c9:
         d5:2c:02:d1:34:87:13:f6:b5:ae:28:c8:b5:99:cd:e9:2d:b4:
         05:3c:cd:2b:27:8d:50:42:4c:b7:07:38:88:3d:df:c4:e7:d1:
         8d:37:fe:d7:ea:36:60:5e:99:19:8f:03:ae:ca:fe:af:bf:c3:
         a8:3d:a9:d5:f9:b6:19:b8:c2:1f:4d:7d:5b:fc:5c:cc:24:9e:
         a2:02:37:9f:09:8b:51:a7:71:ef:df:af:d3:21:21:ff:c0:af:
         bc:ad:5e:3f:b2:5c:17:74:9f:3d:2c:e6:49:02:37:aa:de:8b:
         0e:ee:e1:e1:a9:7f:18:7f:a5:6e:b0:dc:17:b3:fe:5c:33:4c:
         27:22:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:06:35 2026 by rpki-client