Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
File:                     Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json)
Hash identifier:          Xef+R45MBb+tPgcB+9jzJz5peWZWHRxzwjZiLWKhNVo=
Subject key identifier:   F6:35:B4:5C:B5:8B:B2:A7:16:53:FA:50:AC:3F:B6:70:E5:B3:9C:A5
Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
Certificate issuer:       /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
Manifest number:          A9
Signing time:             Tue 23 Jun 2026 07:37:32 +0000
Manifest this update:     Tue 23 Jun 2026 07:37:31 +0000
Manifest next update:     Tue 30 Jun 2026 07:37:31 +0000
Files and hashes:         1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: zKUGeiOugbWgPc/rWftjrjrE7Qgwdl0WajibJev6CIU=)
                          2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: LK3Fx9ZDOnbQgLdeGCFpJxId6+acwMWw9HvmZv77xfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl
                          rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 07:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
        Validity
            Not Before: Jun 23 07:37:31 2026 GMT
            Not After : Jun 30 07:37:31 2026 GMT
        Subject: CN=6a3a37bc-31eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:8a:c8:dd:0d:ad:91:08:5e:14:07:8b:8d:
                    28:fb:a6:a8:42:bf:d3:d3:91:fc:85:b2:86:2f:2a:
                    64:73:11:7a:82:63:4c:fe:5e:d1:fd:9a:c7:bd:4d:
                    44:bd:af:0b:db:68:45:ef:ee:bc:3e:6a:8d:14:d7:
                    86:71:95:ff:22:5a:10:3a:f4:a2:3a:15:5e:74:e2:
                    61:6a:66:79:ff:82:0f:aa:9e:8e:19:34:12:56:fa:
                    4e:b6:27:42:2c:a4:bc:4c:d5:31:cf:67:d5:39:f7:
                    d7:e5:33:83:5e:b9:26:19:4d:39:7a:7b:b5:30:e0:
                    ab:62:3a:8b:19:51:cd:23:9c:77:bd:80:c2:86:2e:
                    87:65:82:fe:ad:ca:73:2e:ab:41:88:1f:a3:ce:9a:
                    16:98:67:1c:9c:84:3e:18:ad:0b:d3:f1:00:88:ef:
                    ad:58:bb:88:e4:fb:38:d1:b1:1a:61:7b:9e:fe:49:
                    3f:ec:3e:a7:f0:8c:df:04:2b:65:eb:4a:a2:7a:30:
                    a7:c1:24:b5:3a:10:38:77:1c:a5:98:11:f3:ce:ee:
                    c4:c2:91:32:66:c5:a7:cf:36:57:54:94:e1:94:40:
                    dc:bc:5d:2d:2b:58:81:ac:4b:ab:47:a9:54:24:a7:
                    9d:ca:0b:a8:24:a9:60:6a:49:02:98:92:fc:b7:92:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:35:B4:5C:B5:8B:B2:A7:16:53:FA:50:AC:3F:B6:70:E5:B3:9C:A5
            X509v3 Authority Key Identifier:
                keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2c:33:ae:42:33:cc:81:51:6c:06:e4:d4:8f:42:20:b3:8d:
         8e:49:d4:6b:ec:ef:a3:01:09:d7:6d:b4:54:ec:4d:ec:4c:aa:
         ed:e3:6b:65:e1:d0:58:de:a8:2d:30:27:f5:eb:8d:33:52:5f:
         9f:fe:8f:53:41:44:26:36:03:9f:bf:a8:df:98:ef:a5:9e:2f:
         4e:ba:f1:ce:11:11:16:59:41:29:b1:bc:28:47:98:01:c4:ae:
         c6:70:aa:95:91:ac:1e:92:5c:f9:ec:20:07:d5:64:63:44:73:
         43:e8:40:79:ff:d1:be:0e:31:0c:5a:2f:49:bf:93:a5:7e:f8:
         2b:8a:5b:38:c5:8e:7e:fb:76:98:8d:1a:a9:4c:e2:20:b0:e6:
         cb:b7:a0:a2:9f:ab:20:de:db:a1:b9:f9:6a:12:82:68:9f:f6:
         b3:33:d3:cf:ff:38:50:be:eb:5f:f8:25:3a:c5:bf:fc:4e:6f:
         66:36:97:32:95:91:44:1c:07:6a:88:5b:ff:e5:dd:fe:9b:3a:
         11:58:e9:a2:52:22:04:b2:7f:c9:87:73:9f:36:ee:41:c4:b4:
         ed:ef:49:fc:05:7a:64:1d:aa:a3:1e:e2:f4:f4:2c:42:7d:65:
         fd:f7:e3:64:bd:5a:b3:d8:51:1f:04:0f:15:c0:ed:bb:33:8c:
         24:92:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:30:54 2026 by rpki-client