Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
File:                     ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json)
Hash identifier:          fLMgy5d2BuzD6epGbNH7CAVikBmHOdLniETzrno0J3o=
Subject key identifier:   A0:D4:CA:74:91:6A:83:56:83:04:1D:26:40:A8:61:26:AC:0B:11:F3
Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
Certificate issuer:       /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
Manifest number:          01F0
Signing time:             Mon 01 Jun 2026 04:04:36 +0000
Manifest this update:     Mon 01 Jun 2026 04:04:36 +0000
Manifest next update:     Mon 08 Jun 2026 04:04:36 +0000
Files and hashes:         1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: ULi2wU2+yD9vDZdSA4xrFACUXfFCMwg7Jt7TtMcp6Ys=)
                          2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl
                          rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
        Validity
            Not Before: Jun  1 04:04:36 2026 GMT
            Not After : Jun  8 04:04:36 2026 GMT
        Subject: CN=6a1d04d4-fa9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0c:2a:3f:c9:89:14:db:ee:9e:73:08:69:d4:
                    78:5b:6b:ac:be:2b:9e:93:b5:de:8f:c4:19:f1:61:
                    20:80:9a:71:ca:9f:10:ed:9d:ba:04:8a:5d:a8:4a:
                    d0:6a:1d:18:d5:84:88:7d:a9:4c:29:c2:14:c4:8d:
                    cb:08:9b:6c:3c:fb:67:1a:3d:1e:05:af:b9:12:d0:
                    1a:33:a9:69:cb:32:cf:42:8f:73:a8:35:8e:9f:a0:
                    b5:d0:97:77:0c:0a:e6:55:88:f1:35:3c:de:0f:e6:
                    54:9a:7a:7a:76:43:45:38:e2:8d:6a:89:88:07:40:
                    27:c7:52:88:d2:24:57:96:ac:e1:f8:34:2d:52:cf:
                    87:f4:25:83:4a:b0:eb:2a:53:84:d5:55:05:2b:cc:
                    36:d8:e9:da:e7:c3:3f:95:49:48:c4:28:18:ce:32:
                    72:d7:e0:12:dd:fa:89:cf:2d:ad:02:81:27:26:84:
                    c4:ff:d6:67:52:81:61:ad:cf:6f:92:03:7d:1f:10:
                    18:3c:bc:2c:06:02:f2:78:63:16:1f:17:2e:e8:7e:
                    94:20:bf:2b:1a:95:7f:a1:0b:ee:9d:05:df:ca:af:
                    12:1d:b4:38:86:58:b8:91:d7:2a:72:b6:5f:1d:fb:
                    5d:41:97:7d:5b:5f:db:8a:4c:c1:98:89:46:0d:8b:
                    4b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D4:CA:74:91:6A:83:56:83:04:1D:26:40:A8:61:26:AC:0B:11:F3
            X509v3 Authority Key Identifier:
                keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:09:ca:44:cc:c5:70:7d:91:06:9d:bb:06:9a:af:84:52:d0:
         50:b1:1d:c4:45:cd:f6:b1:e4:3c:f8:3e:03:a6:52:ad:4b:0e:
         44:02:b1:d6:89:21:15:e0:9e:cd:69:03:a9:f8:fa:f7:6a:43:
         ae:b8:5c:59:f3:15:a1:11:7c:17:04:a0:fb:01:2f:cc:fa:a9:
         87:84:13:be:cf:c6:6e:68:ce:e9:a6:3a:8d:54:51:0f:d3:63:
         22:15:08:84:18:fe:9b:b3:c2:3c:6a:7c:71:1e:68:34:be:ef:
         aa:9a:65:bf:47:18:0c:ed:c8:ab:dc:44:3d:db:c5:47:b0:7a:
         b1:82:10:4e:d6:e8:b0:c7:f3:87:a9:87:99:84:2a:0e:8c:4e:
         6e:a6:d4:0b:3d:aa:42:d4:3b:ce:3e:5b:26:59:df:bf:4b:3a:
         fc:e8:fc:d6:b0:6c:38:1e:a3:76:3c:bd:29:d6:41:d5:62:e8:
         33:a2:12:04:9f:c1:5b:e5:fc:0d:7d:b3:4e:9e:73:bb:2d:62:
         17:35:9c:1d:06:f5:77:da:f5:29:a9:28:f4:26:a4:95:d5:ba:
         dd:1f:b8:fe:5d:53:5e:67:1f:d4:9e:3c:c5:b5:22:fe:01:df:
         dd:4a:9d:f7:ea:bf:12:5f:97:8d:77:22:dd:4b:2b:20:f7:05:
         de:2f:ae:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:15:21 2026 by rpki-client