Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
File:                     M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json)
Hash identifier:          3s+lyleAZNmORldafw2yGQM4b4gURu1hDIUS70O4Fbg=
Subject key identifier:   91:AB:92:7B:8E:12:59:22:5F:DF:5D:99:E1:BA:2C:41:8E:C3:C2:1F
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Certificate issuer:       /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial:       01B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
Manifest number:          01A2
Signing time:             Tue 23 Jun 2026 04:24:21 +0000
Manifest this update:     Tue 23 Jun 2026 04:24:20 +0000
Manifest next update:     Tue 30 Jun 2026 04:24:20 +0000
Files and hashes:         1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: of+MQXW1ZPYiUrgP3XzNY/vjb85rd276gnhvdWckzPA=)
                          2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: i7o8yNPf+dFLOmHmy68U226YJmhJ/EmHULxlVRoo4Fc=)
                          3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: lyAz6AmqL0FZqwGyCahoG8Ef9FHjsOC+qJXgJmlZ/Zs=)
                          4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: xj8NN+s9x7JUXPAPcowaNa0lG/ImYDGhQLE7d7PuyeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
                          rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 04:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
        Validity
            Not Before: Jun 23 04:24:20 2026 GMT
            Not After : Jun 30 04:24:20 2026 GMT
        Subject: CN=6a3a0a75-9fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:5f:ce:4b:f8:5b:b8:c9:4f:15:b0:6f:f5:
                    3a:c9:83:b1:9c:d3:64:b1:c3:76:07:11:f5:87:d3:
                    ce:02:39:d8:4f:d4:fb:56:5b:2e:d1:94:5a:a4:5f:
                    84:c7:33:3c:9e:fb:75:a4:e0:58:67:f9:3d:46:4a:
                    60:10:ef:75:39:c4:5e:dc:b1:89:6b:e0:ee:df:5e:
                    c9:58:3c:75:40:02:05:fe:ed:28:48:72:ea:37:a5:
                    f6:ad:5f:7b:70:62:9e:d5:1c:84:7c:01:c9:c9:c9:
                    98:9e:e2:91:8a:1a:7e:32:76:43:0d:3e:60:8f:dd:
                    01:c5:e6:44:00:cf:20:4e:7f:05:33:24:8c:86:36:
                    89:b2:72:e0:9d:57:b0:71:6b:f5:9e:af:76:69:d1:
                    cb:b9:d6:4d:43:ad:0b:b6:63:e5:4a:5d:b2:38:c9:
                    99:b8:f6:89:59:0d:18:99:5d:dc:b3:1d:26:9b:a0:
                    72:7f:7d:5e:67:81:ef:de:a3:3f:d2:27:e5:5a:50:
                    df:ad:22:ad:88:92:c1:6c:5a:44:16:f0:6f:04:8a:
                    2b:9e:94:27:90:f6:eb:b8:4f:a9:85:fc:1c:96:9b:
                    4d:ef:1e:c1:7e:cd:66:f4:aa:f3:76:10:e6:a7:e1:
                    0e:9e:f6:43:19:9d:18:b7:a9:db:22:11:c9:c8:73:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AB:92:7B:8E:12:59:22:5F:DF:5D:99:E1:BA:2C:41:8E:C3:C2:1F
            X509v3 Authority Key Identifier:
                keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fc:63:b8:64:0b:7c:90:b6:38:34:c3:df:92:e8:b5:d7:0d:
         7b:b2:6a:d1:f9:de:50:71:87:97:d7:1e:24:4a:b9:13:62:d0:
         7b:e3:23:76:b8:25:9b:9f:64:2f:a0:90:84:5f:e7:72:f9:b5:
         67:c8:45:cc:f1:ee:ad:46:f1:d5:c5:69:dc:fc:be:9b:6c:94:
         1f:cd:d3:4b:bd:f8:38:84:4e:29:ae:e2:7b:77:b6:15:6a:e6:
         48:2b:7c:dc:3c:ee:ef:b9:b7:dd:8f:1d:d7:33:4e:62:40:75:
         7a:b4:af:e9:00:ea:73:3a:62:3c:7e:ab:8d:b9:1e:22:e1:c7:
         69:10:68:a9:3e:03:35:72:c2:09:f6:14:12:3b:5e:1c:cc:51:
         9a:b8:c4:44:87:cc:82:ee:ce:63:b0:97:ce:bb:06:a6:80:1b:
         c1:8a:73:82:6a:78:d7:2d:5b:6f:dd:79:31:01:49:aa:ff:d1:
         21:97:ad:1f:28:d6:27:22:04:b9:7b:62:00:07:ea:4a:ed:15:
         91:df:b4:c3:5a:98:df:7d:6b:8a:4e:af:eb:b8:fc:c6:17:23:
         7f:60:13:1c:76:be:57:35:69:12:ed:7d:5a:24:d1:0d:28:51:
         51:cd:04:4f:ab:33:12:ec:9e:32:85:31:4f:84:38:84:b1:fa:
         ac:2c:ce:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC
RkNBQ0RDOTgwHhcNMjYwNjIzMDQyNDIwWhcNMjYwNjMwMDQyNDIwWjAYMRYwFAYD
VQQDEw02YTNhMGE3NS05ZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr41fzkv4W7jJTxWwb/U6yYOxnNNkscN2BxH1h9POAjnYT9T7Vlsu0ZRapF+E
xzM8nvt1pOBYZ/k9RkpgEO91OcRe3LGJa+Du317JWDx1QAIF/u0oSHLqN6X2rV97
cGKe1RyEfAHJycmYnuKRihp+MnZDDT5gj90BxeZEAM8gTn8FMySMhjaJsnLgnVew
cWv1nq92adHLudZNQ60LtmPlSl2yOMmZuPaJWQ0YmV3csx0mm6Byf31eZ4Hv3qM/
0iflWlDfrSKtiJLBbFpEFvBvBIornpQnkPbruE+phfwclptN7x7Bfs1m9KrzdhDm
p+EOnvZDGZ0Yt6nbIhHJyHMGiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGrknuO
ElkiX99dmeG6LEGOw8IfMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy
RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK
bVdRM0hLN2lZZy1feXMzSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM/xjuGQLfJC2ODTD35LotdcNe7Jq0fneUHGHl9ceJEq5E2LQe+Mjdrglm59k
L6CQhF/ncvm1Z8hFzPHurUbx1cVp3Py+m2yUH83TS734OIROKa7ie3e2FWrmSCt8
3Dzu77m33Y8d1zNOYkB1erSv6QDqczpiPH6rjbkeIuHHaRBoqT4DNXLCCfYUEjte
HMxRmrjERIfMgu7OY7CXzrsGpoAbwYpzgmp41y1bb915MQFJqv/RIZetHyjWJyIE
uXtiAAfqSu0Vkd+0w1qY331rik6v67j8xhcjf2ATHHa+VzVpEu19WiTRDShRUc0E
T6szEuyeMoUxT4Q4hLH6rCzOag==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:32 2026 by rpki-client