Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
File:                     rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json)
Hash identifier:          JPoStUs0/veNXVhl0hufBWVqR6u3sW6p/VIN/pSZ0Q4=
Subject key identifier:   B2:C7:D3:C8:EA:12:42:C0:74:9E:3D:0C:A0:8D:0F:54:11:36:2B:F6
Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04
Certificate issuer:       /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
Manifest number:          0167
Signing time:             Mon 29 Jun 2026 05:27:57 +0000
Manifest this update:     Mon 29 Jun 2026 05:27:56 +0000
Manifest next update:     Mon 06 Jul 2026 05:27:56 +0000
Files and hashes:         1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: rVQCXeD8g0TzUNq0liUzsxi0838h1QS7Xo76s+6jti8=)
                          2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: uV62YvsKnuEUdWquqH2JLcNuEUU3algiTlAGdgEQfJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 05:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
        Validity
            Not Before: Jun 29 05:27:56 2026 GMT
            Not After : Jul  6 05:27:56 2026 GMT
        Subject: CN=6a42025c-753d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:a5:46:30:ec:71:36:2d:0e:a5:d5:25:65:
                    c7:bb:10:49:3d:29:0b:be:df:1e:35:62:db:12:87:
                    ac:71:ad:c6:42:56:c2:b7:68:66:e5:fa:c6:10:58:
                    d1:a4:f8:9a:6e:2e:ed:d0:54:72:a5:d2:2c:e6:8a:
                    51:d8:77:b8:54:ea:c7:ba:8c:38:4d:19:28:1c:77:
                    84:5a:65:60:3a:2b:bd:30:2e:94:94:58:79:82:61:
                    fc:60:e0:29:ba:f9:c7:7c:f5:dc:b6:67:25:67:5b:
                    2a:25:b7:98:a7:2f:35:c9:bd:d2:e0:da:d8:ad:f8:
                    ae:41:bc:5e:28:2e:8a:21:65:d5:6a:fc:77:ac:d3:
                    e4:5b:80:a0:97:e6:61:9e:7f:6d:e5:8b:8d:cb:c2:
                    29:cc:44:27:98:c4:f3:22:e0:9b:74:d2:c9:bd:54:
                    cc:ef:1c:08:26:86:bd:50:cf:fa:c9:1e:f8:90:aa:
                    68:c1:0a:b6:d6:69:a1:da:c0:c7:56:75:f1:f3:06:
                    46:15:4d:fd:53:52:8f:51:05:8f:b1:60:77:b2:12:
                    2b:79:49:0a:3e:de:c5:88:d3:47:39:10:e9:1a:a7:
                    03:be:94:7b:0f:39:7e:e3:91:92:21:20:d5:2e:c3:
                    6e:34:3f:05:21:1c:f5:dd:5f:23:70:b9:2d:8a:1d:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C7:D3:C8:EA:12:42:C0:74:9E:3D:0C:A0:8D:0F:54:11:36:2B:F6
            X509v3 Authority Key Identifier:
                keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:96:5b:1d:04:be:c1:b5:d3:a2:3a:5b:8a:d0:7d:cc:4a:90:
         14:bd:31:8f:02:2b:3f:5c:9d:ab:88:10:ec:ad:7f:32:12:45:
         18:1d:ec:31:94:a7:b7:8c:60:36:87:f6:1b:fa:57:7b:c0:54:
         37:98:b5:3f:53:64:5a:87:03:98:64:5a:a2:32:7e:d8:f2:03:
         18:de:66:b9:8f:77:b3:77:ca:fd:62:be:d6:9c:80:15:4f:5c:
         57:8a:26:d9:c7:f8:44:49:7c:3b:c0:1e:9f:4c:65:39:cf:a8:
         02:80:54:ea:e3:7e:20:0c:12:4a:7a:78:a1:98:77:29:e0:93:
         20:c8:97:4f:7e:89:fb:af:85:a4:85:74:fd:80:e0:68:27:ad:
         9b:2a:fa:2b:1c:b9:70:4a:5c:30:c1:46:b2:f9:43:44:4d:7f:
         2d:80:95:d4:08:ab:56:b8:28:70:4f:44:72:18:cc:63:e2:26:
         b1:fb:46:35:4a:b8:9e:0d:85:18:89:60:49:59:b2:97:cb:65:
         d2:a7:88:a1:1c:ea:8b:33:01:d0:18:39:e4:ab:2a:24:e3:e4:
         3b:e0:35:ec:c0:da:1b:99:87:6a:bb:34:c1:7e:02:8a:17:35:
         e2:e1:6b:9e:3b:28:4b:83:40:69:53:3a:d0:1c:22:e5:f6:d4:
         ca:28:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:18:51 2026 by rpki-client