Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
File:                     Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft (raw, json)
Hash identifier:          vmxc6r+oSarVN5Yji0JYE32gYnxRt0bkCeBegM0YyeI=
Subject key identifier:   12:BC:07:8A:E6:A6:B0:83:10:A9:3F:32:C7:24:EE:5A:96:F9:12:B8
Authority key identifier: 42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E
Certificate issuer:       /CN=A91F9BB3/serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
Manifest number:          61
Signing time:             Tue 23 Jun 2026 08:21:07 +0000
Manifest this update:     Tue 23 Jun 2026 08:21:07 +0000
Manifest next update:     Tue 30 Jun 2026 08:21:07 +0000
Files and hashes:         1: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl (hash: n1RvBl4B27oNqFhOQyC98ke+GUIg5r98dXx1rQR3GQQ=)
                          2: DB9D3A1AE24411F0BBC3E4F5716F56BC.roa (hash: FGeU1tZaj6B6d9kcXemk68XFxPuUp5ULKxFkHVuu17c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 08:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9BB3, serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E
        Validity
            Not Before: Jun 23 08:21:07 2026 GMT
            Not After : Jun 30 08:21:07 2026 GMT
        Subject: CN=6a3a41f3-c7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:92:10:50:0f:68:14:f1:e6:a0:e6:5b:48:
                    cd:70:87:c9:5f:6c:94:2e:f6:f2:6d:d6:66:e2:40:
                    1f:63:0a:f0:16:a4:ab:2d:39:3c:24:b7:e1:64:eb:
                    a7:a4:df:77:eb:f8:57:1e:a9:a1:11:9f:96:f5:07:
                    6f:d6:0d:a4:f5:91:a1:93:b9:57:80:2f:41:0d:ee:
                    32:90:a2:bd:7c:71:ed:5e:0e:64:af:fe:65:2b:60:
                    b5:a0:2f:31:f4:c2:de:7b:db:58:5c:d9:e4:3e:d9:
                    28:eb:53:f9:7f:c4:6a:69:b8:f3:ca:fa:8f:42:40:
                    f5:94:42:cd:69:ee:4b:7d:5a:bd:08:f6:c0:be:78:
                    ba:c1:31:ae:0b:71:0a:b9:be:21:28:36:ae:9d:65:
                    83:83:b3:54:cf:ce:5a:8f:b6:bb:d6:1c:95:ae:e7:
                    68:8c:f2:f7:49:aa:c5:cd:fe:9d:4e:61:49:35:97:
                    6b:7f:40:a4:09:d9:26:c5:2f:f8:c8:03:a5:3a:56:
                    c6:4d:51:eb:49:56:be:a8:87:d9:c4:bb:bb:60:54:
                    e2:ac:d7:45:8b:cc:88:18:f9:09:98:07:34:be:c2:
                    bc:b5:32:8d:a7:69:5d:f1:26:fb:b5:00:c7:7f:01:
                    d9:7d:68:8c:50:b4:a4:57:f3:ec:1f:94:15:94:52:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BC:07:8A:E6:A6:B0:83:10:A9:3F:32:C7:24:EE:5A:96:F9:12:B8
            X509v3 Authority Key Identifier:
                keyid:42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0a:d6:7b:a4:ef:12:0a:44:64:7f:db:9f:4c:14:b1:a0:f7:
         30:fa:06:52:fe:69:0a:14:b3:d4:b0:5b:b6:4b:bf:24:27:4a:
         08:ae:b8:1e:ce:12:d1:90:f2:57:e3:f5:fb:04:2c:58:9d:71:
         8d:66:b0:57:05:00:2c:12:69:c9:9e:57:82:43:e9:d2:86:ba:
         7a:0c:eb:28:fb:09:26:de:d3:09:86:32:81:22:81:1c:b3:75:
         7b:36:92:8d:38:07:91:f6:0a:23:9f:75:97:27:e3:06:12:ba:
         d1:34:5d:b0:08:40:0b:7b:84:30:cc:bb:62:7c:a5:4b:cc:b0:
         83:87:7a:72:f9:b4:7e:a5:26:a6:b8:43:c5:6d:c2:28:42:9d:
         2a:36:eb:8b:37:51:2b:7f:91:94:97:76:ee:7f:40:f2:fc:e8:
         57:81:db:f8:2e:b5:a4:04:d3:cf:e8:23:71:41:d4:79:de:33:
         c0:ea:fb:e7:6b:6a:ae:32:e4:d9:8a:e3:23:7c:5f:1d:9a:d7:
         20:48:4c:9c:fa:65:b4:f2:7e:6f:67:10:7c:94:c2:80:57:e8:
         df:23:71:c5:6d:5e:c7:26:22:4b:91:5a:a0:18:ea:73:00:ea:
         6a:28:74:20:4a:2a:f6:b2:bd:56:39:7a:27:f6:cd:3e:21:b1:
         2f:57:26:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:55 2026 by rpki-client