Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft
File:                     pThhh8LmHJfmRGCcsqc3tTA4jXo.mft (raw, json)
Hash identifier:          k3bnavfTUhx8UDFfV9BKZbok/g79V4FcvHvVpE4ZWPE=
Subject key identifier:   24:D2:C7:55:1B:39:39:F4:74:A0:54:3C:FC:6E:1D:A3:2D:D1:B9:9B
Authority key identifier: A5:38:61:87:C2:E6:1C:97:E6:44:60:9C:B2:A7:37:B5:30:38:8D:7A
Certificate issuer:       /CN=A9118A92/serialNumber=A5386187C2E61C97E644609CB2A737B530388D7A
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft
Manifest number:          02
Signing time:             Fri 05 Jun 2026 03:20:55 +0000
Manifest this update:     Fri 05 Jun 2026 03:20:54 +0000
Manifest next update:     Fri 12 Jun 2026 03:20:54 +0000
Files and hashes:         1: pThhh8LmHJfmRGCcsqc3tTA4jXo.crl (hash: mV0U63xwq7pF2CqJntPhzn37dt+teO4dCLuqEpUVaPQ=)
                          2: 867F014A608D11F198BDDF067147A888.roa (hash: 8EhraSIzH4oaYfgFFJo0sPTRH2u+0vUdpc1EYUGBpAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.crl
                          rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 03:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118A92, serialNumber=A5386187C2E61C97E644609CB2A737B530388D7A
        Validity
            Not Before: Jun  5 03:20:54 2026 GMT
            Not After : Jun 12 03:20:54 2026 GMT
        Subject: CN=6a224097-39bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:fd:7b:c8:74:76:cf:df:ea:66:ec:e5:a5:
                    29:c2:78:75:4f:ff:2a:4d:8e:5a:74:f6:2d:97:e8:
                    e9:2f:e7:4a:4d:2c:d3:b8:d4:d1:cf:d2:90:8d:fa:
                    a7:52:8e:06:10:df:01:5f:5b:f4:02:c0:55:e4:98:
                    4f:fb:94:aa:1b:06:2a:bd:34:60:3c:45:21:1e:75:
                    4b:5c:0a:1d:5c:49:59:f8:bc:bd:2a:1a:7b:38:57:
                    74:06:ba:26:8a:bb:21:18:54:ca:de:ae:67:a3:52:
                    e4:27:89:71:a1:85:80:11:a3:48:44:9e:88:2d:a5:
                    9d:79:d1:3d:f0:78:a9:d0:f0:a2:7f:d9:88:b5:77:
                    fe:00:90:4d:be:7f:2d:02:b0:e9:37:ca:11:55:6f:
                    a8:3f:6f:f5:d1:73:c0:96:2d:9c:7f:1b:07:3e:1b:
                    d8:2d:33:58:e4:c0:bc:a5:b7:b8:4b:e7:c9:40:97:
                    27:3c:6a:c4:9d:1f:3b:03:57:af:b8:cb:f5:84:2e:
                    e7:0f:9b:87:ea:be:e4:a5:fc:6b:4f:57:22:b5:17:
                    47:af:26:bf:b4:36:3a:71:02:c8:fa:99:b7:b3:28:
                    b6:c4:32:da:d6:ea:b2:86:02:89:14:72:8f:b4:e9:
                    5e:9e:01:aa:c5:fd:75:b5:14:2b:b0:9d:ee:7b:b5:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D2:C7:55:1B:39:39:F4:74:A0:54:3C:FC:6E:1D:A3:2D:D1:B9:9B
            X509v3 Authority Key Identifier:
                keyid:A5:38:61:87:C2:E6:1C:97:E6:44:60:9C:B2:A7:37:B5:30:38:8D:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ce:14:1d:82:2a:57:f7:c9:81:46:79:46:33:25:0d:a2:db:
         a4:6f:69:87:ee:40:49:24:c1:3d:80:1e:04:d6:44:6e:30:07:
         73:e0:a7:81:12:88:84:4f:f5:e0:55:f3:e9:c6:dc:5b:7e:64:
         56:54:01:bf:03:a3:b3:c4:17:a3:84:ff:fd:40:f3:5e:1f:8b:
         2e:03:6b:02:9f:70:42:7a:8c:63:2c:7c:41:07:f8:00:7d:e1:
         e9:00:fb:1a:cb:17:95:ea:f9:87:04:3c:ce:0c:e0:34:5d:56:
         9e:6b:99:ec:e7:f0:ce:24:54:2e:83:73:13:a3:34:20:38:d0:
         7a:94:f1:13:7a:81:38:2d:de:67:59:26:cd:4f:2f:f5:2d:16:
         80:67:08:7e:a6:7c:bc:c2:7c:9e:d1:03:6e:38:63:6c:47:83:
         fd:21:dc:ec:70:c7:89:53:fc:c0:ac:62:54:39:b7:d0:ca:19:
         7c:da:00:53:45:ab:fd:d3:ef:89:bf:f2:d3:d8:aa:7e:7d:06:
         db:f1:a7:72:37:66:cf:58:87:c8:31:a9:58:f8:01:42:61:59:
         ec:68:d6:77:4d:72:39:90:7c:54:b5:48:d1:8d:2e:ad:0a:d4:
         ff:71:0e:83:e0:3e:5e:eb:3c:34:ad:ef:39:c8:ed:59:53:bb:
         d4:9b:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:47:14 2026 by rpki-client