Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File:                     cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier:          aVX5jmV7NH8+A44uJT+Ll5i3mdcA8tKwciKzc7ZaLrA=
Subject key identifier:   71:1C:1F:CF:CC:0E:21:60:D3:E0:F2:86:BF:D9:AA:82:C9:94:D3:68
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer:       /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number:          6B
Signing time:             Wed 13 May 2026 08:00:45 +0000
Manifest this update:     Wed 13 May 2026 08:00:44 +0000
Manifest next update:     Wed 20 May 2026 08:00:44 +0000
Files and hashes:         1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: 9x+ETqw7DJWHfkr19ajsdI2aCNf+iEHYcPk9+ZqRIIs=)
                          2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
                          rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
        Validity
            Not Before: May 13 08:00:44 2026 GMT
            Not After : May 20 08:00:44 2026 GMT
        Subject: CN=6a042fac-d922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:fc:51:18:c4:d1:be:84:c4:4f:83:7b:87:
                    b0:a1:a8:b4:71:4a:ee:c9:b2:f5:71:4f:fa:f1:6d:
                    ef:4d:73:34:ea:cf:eb:c2:37:71:04:1a:89:34:bb:
                    49:0b:1b:9b:eb:c1:4a:15:53:78:f2:e8:3b:e3:f1:
                    d6:86:e7:42:07:29:b3:94:99:94:8f:c5:77:ff:a9:
                    df:d0:a2:a0:17:31:f7:f4:8e:e3:09:4e:8c:3c:d5:
                    47:5b:2d:34:1f:e9:6f:46:eb:10:34:13:84:6f:4d:
                    eb:f2:70:f2:4f:9c:90:4d:8e:c8:6d:5b:d4:dd:aa:
                    31:20:c6:68:3e:09:09:b5:4d:77:4a:a1:2b:2b:6f:
                    a9:20:63:a0:7f:01:ef:2a:b6:1e:52:92:cb:14:e6:
                    2e:a1:78:04:16:37:2e:6c:cc:e4:c3:31:80:f3:a0:
                    54:2f:c7:cc:6b:ca:89:6b:66:6e:ee:5f:89:48:aa:
                    f9:53:e9:1f:8b:b9:75:24:50:a6:90:3b:92:ea:04:
                    ea:aa:41:69:f4:50:2c:5f:0d:f9:24:fd:5f:9a:b7:
                    19:48:50:9b:77:37:b8:6b:18:d9:0e:52:f4:bc:83:
                    d4:cb:08:96:15:a0:53:fb:9f:60:c5:d6:53:b8:17:
                    c3:61:25:a8:e5:02:7c:4b:bd:69:16:16:37:84:27:
                    5c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1C:1F:CF:CC:0E:21:60:D3:E0:F2:86:BF:D9:AA:82:C9:94:D3:68
            X509v3 Authority Key Identifier:
                keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:79:c9:eb:a8:a8:d5:b3:64:dd:a9:53:cd:f0:8b:9b:ea:
         c0:4c:22:7a:48:8f:ba:eb:8d:63:0c:b8:13:05:df:40:f6:83:
         d2:4e:80:8f:7d:c7:cd:9e:c1:71:cf:5a:d6:3a:0a:e2:87:04:
         39:dc:12:85:91:1b:85:6d:83:7c:e2:a0:a3:36:19:5d:d7:46:
         53:fc:04:6e:28:1c:c6:f5:50:1d:aa:59:d2:47:1a:fc:ac:e1:
         22:86:16:9a:3b:9f:83:fd:56:13:1c:24:39:07:a2:06:55:48:
         95:7f:a8:b5:13:eb:d9:62:cd:8f:ce:6a:e7:eb:3c:5a:af:53:
         06:ea:b0:20:8d:6c:16:d6:07:90:a8:9d:ea:12:39:ea:d0:16:
         b8:cf:19:e3:5a:54:be:df:91:4c:fd:ae:ef:45:a6:a7:ea:c4:
         15:f0:d8:25:e5:30:78:f4:5f:83:ea:df:cb:a9:2c:68:4d:b7:
         e6:a1:ce:3b:89:b9:4a:f7:34:6d:45:a2:25:7c:99:27:d8:42:
         31:dc:19:cd:6e:17:46:0a:24:be:4d:e7:4c:0c:17:3c:3a:5d:
         79:7e:37:a9:1f:90:1d:2a:0c:19:be:2b:5e:ae:c9:e3:ac:94:
         ba:19:f3:06:f2:bf:e2:84:bf:6f:16:ef:ea:88:54:86:59:ca:
         9c:ba:0d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:44 2026 by rpki-client