Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
File:                     G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json)
Hash identifier:          Hlyef0Cjaf+NPFZjcHH2nlIR0D3hFgG401BFG7P0FjE=
Subject key identifier:   EB:C4:E7:23:D8:AE:B5:B3:FB:8B:3A:6F:CB:BF:2F:79:A4:33:0E:77
Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
Certificate issuer:       /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Certificate serial:       0C85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
Manifest number:          0C7C
Signing time:             Mon 22 Jun 2026 18:38:51 +0000
Manifest this update:     Mon 22 Jun 2026 18:38:50 +0000
Manifest next update:     Mon 29 Jun 2026 18:38:50 +0000
Files and hashes:         1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: uxGiWeMAYHHSo+mAhn98kH0Ir8lIroXYyJdNAQQAkjc=)
                          2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: rmYnuMOnsWqJ1EMxIYJ3/6l6BUhvQSL5XzWmFrIJCBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
                          rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3205 (0xc85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
        Validity
            Not Before: Jun 22 18:38:50 2026 GMT
            Not After : Jun 29 18:38:50 2026 GMT
        Subject: CN=6a39813b-c974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:b6:95:43:55:d7:77:52:59:a7:3c:28:df:
                    72:7c:40:48:65:1c:63:fe:42:bf:45:83:0c:f4:49:
                    26:b4:1f:44:09:c1:3d:15:4b:9a:6f:c1:74:58:04:
                    7f:88:09:d5:b0:fc:c5:70:16:d6:13:05:d1:42:36:
                    c5:86:82:ee:35:9f:cb:2b:85:59:d0:19:69:80:a1:
                    4d:37:2f:09:17:1a:37:19:1e:80:88:93:bd:f3:f0:
                    ec:46:a2:49:d9:02:64:a0:49:68:21:7e:87:19:22:
                    74:34:45:c4:3f:78:37:35:bc:0e:a3:f5:72:28:e0:
                    43:fc:78:2f:2f:65:5b:84:0e:47:af:9f:eb:eb:58:
                    99:b4:fe:54:26:34:77:68:5b:17:fb:52:91:13:ec:
                    bd:0a:36:ed:fd:38:b0:1c:7f:7b:54:d4:75:fa:2c:
                    0e:c3:56:90:98:70:e3:0b:8c:dc:a8:69:c9:2f:12:
                    e9:52:8c:dc:b4:0f:32:b3:df:3e:35:80:48:f3:9c:
                    77:63:49:66:87:55:ac:e8:52:06:79:f9:d2:c4:95:
                    1c:e5:c3:01:08:6d:af:ea:6a:11:5a:91:52:a9:69:
                    bb:d7:00:d5:1d:fa:81:1f:c8:49:ad:bf:0e:18:4a:
                    7d:c0:e2:f0:e6:12:13:8a:e7:15:df:99:e0:46:0a:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C4:E7:23:D8:AE:B5:B3:FB:8B:3A:6F:CB:BF:2F:79:A4:33:0E:77
            X509v3 Authority Key Identifier:
                keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:be:07:ac:35:c9:ff:7b:eb:05:30:b7:74:06:70:7c:d5:a9:
         6d:6c:6d:97:33:86:34:8f:2e:f4:ca:fe:a8:1a:2f:61:dd:d5:
         ec:8c:73:d3:e4:fd:d3:2e:f9:52:9d:39:dc:4c:8d:19:54:d5:
         0a:6b:d7:6c:34:ea:1b:d5:f2:4e:3b:ba:65:53:ee:af:94:d4:
         f1:e5:0b:f0:2a:8d:12:df:68:14:12:25:22:e3:89:10:9c:21:
         95:da:31:4d:b3:2a:df:a1:56:49:72:8f:5b:91:99:3c:04:ba:
         f7:a2:e6:b5:69:58:ae:8a:46:5e:40:b6:27:df:13:d0:df:3e:
         e7:93:95:67:2e:ed:88:1a:9d:26:d0:66:1d:09:b4:5d:81:9b:
         99:af:47:31:7e:76:9d:1a:cb:c6:b0:44:03:0c:13:0f:d4:6e:
         0b:f1:45:08:52:15:fb:32:14:72:2c:a9:36:f7:03:ea:e3:d1:
         62:46:31:c0:31:c3:8a:81:60:e0:21:b7:64:5a:e8:30:03:a7:
         2e:e6:e5:80:f9:41:de:0a:f3:df:2c:3f:78:64:0e:b4:d5:51:
         76:3e:b1:df:77:0c:96:5f:42:39:9d:d1:4e:85:35:32:a1:65:
         32:95:03:d1:f0:34:38:71:65:5f:2f:f3:35:ef:18:a5:ee:6a:
         06:5c:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:32:55 2026 by rpki-client