Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
File:                     F61gXQbH7QoUSFwCoS8AFwmiLWI.mft (raw, json)
Hash identifier:          4cCkH56cczBMCS6MiChgFDlwADPdGbmmxsRct+NyYb8=
Subject key identifier:   26:16:F1:7B:73:9B:18:C3:D1:5A:E2:A6:B3:AA:9F:00:E7:4F:AE:5A
Authority key identifier: 17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62
Certificate issuer:       /CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
Manifest number:          0213
Signing time:             Tue 23 Jun 2026 03:05:11 +0000
Manifest this update:     Tue 23 Jun 2026 03:05:11 +0000
Manifest next update:     Tue 30 Jun 2026 03:05:11 +0000
Files and hashes:         1: F61gXQbH7QoUSFwCoS8AFwmiLWI.crl (hash: k0tR/MzWUv1ZQQe6VUbhQAZnWzch379hPd2E+Kagg3Q=)
                          2: 0294C902459511EE982FBC6DC4F9AE02.roa (hash: dCOu9SWE3pUxFDJykl6C0mTQJtKqMJIuuUM8T2xcP1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl
                          rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 03:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BEA7, serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
        Validity
            Not Before: Jun 23 03:05:11 2026 GMT
            Not After : Jun 30 03:05:11 2026 GMT
        Subject: CN=6a39f7e7-8693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:9f:24:ed:df:04:5d:fd:03:6a:df:24:5f:
                    f8:89:36:3d:d7:dc:52:e7:7a:f7:3d:d9:26:71:55:
                    77:ea:ad:c7:37:4e:19:6b:b9:6a:71:9b:4b:ec:86:
                    fd:c6:7c:8a:1a:3d:8f:b5:eb:c1:37:86:7e:c6:57:
                    44:a9:7c:ee:c3:c0:2f:f6:15:25:07:8c:37:d7:74:
                    5a:f7:ac:93:bb:be:0a:4b:93:9b:97:e6:14:32:31:
                    cb:e8:d2:cf:83:19:82:fc:20:fb:a0:1c:c5:77:01:
                    7d:ea:f9:63:70:a8:03:ce:c5:68:1b:7e:e4:32:9f:
                    02:e3:5a:28:06:ba:46:54:7e:69:06:dd:0a:21:b0:
                    9c:ef:b4:16:73:9c:41:20:e5:60:6f:81:19:63:63:
                    ec:bb:12:7d:79:ff:c2:5d:20:cf:1a:f1:01:ec:77:
                    80:6c:f1:5c:67:48:fb:9c:85:fa:6e:48:23:47:47:
                    53:7c:52:ff:44:8a:52:fe:c5:e6:a4:8b:ef:3c:d4:
                    f3:50:f6:7a:e3:7b:37:9d:ee:1e:a8:a5:b8:48:d8:
                    a9:0f:d2:51:57:31:11:31:73:8e:40:ab:82:42:0c:
                    c2:76:d4:30:8d:39:11:b1:b1:90:ca:2a:11:b7:8b:
                    1f:fb:e9:b2:2e:ec:64:3a:33:3c:3d:b0:47:b9:bc:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:16:F1:7B:73:9B:18:C3:D1:5A:E2:A6:B3:AA:9F:00:E7:4F:AE:5A
            X509v3 Authority Key Identifier:
                keyid:17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:53:fb:39:de:89:35:ce:49:a6:44:ed:cc:d1:97:ce:e8:
         8f:e4:6b:c4:45:1d:9d:85:7e:08:17:4a:34:be:85:c9:1c:e1:
         69:81:94:6c:b8:43:e5:b5:cc:5a:62:1e:47:30:61:dd:e9:36:
         fa:09:65:64:8a:69:44:81:31:f3:58:74:4b:c9:c5:e8:d8:bd:
         9b:07:0a:69:10:0e:69:c5:aa:5f:1d:b3:25:bc:61:ea:b5:9e:
         2a:96:42:dd:9f:c5:92:f1:76:be:35:0a:56:10:be:98:97:8b:
         54:9f:3a:da:1b:3c:1c:61:f4:dc:51:6f:78:4b:fa:3e:25:32:
         7d:44:58:13:8f:f0:4d:9b:d1:2b:06:6a:d3:39:61:35:6e:85:
         1c:7e:c2:62:d7:9e:d2:1d:b1:1a:bc:f3:dc:de:78:ea:74:fe:
         09:ac:81:79:75:54:c9:db:41:66:2a:5e:a5:7d:91:cc:dd:d9:
         74:c1:52:1e:6c:48:07:c6:b0:ff:4f:e9:57:e4:92:9a:a4:59:
         e6:92:27:48:d5:be:5f:24:4a:ab:70:5a:b2:e0:8c:a0:04:cb:
         cb:1e:c4:7c:af:ac:60:a5:0b:f9:e9:51:9b:fc:d0:4e:81:62:
         7e:20:55:11:db:52:2a:e4:3f:70:88:93:dc:98:67:ba:3a:7c:
         a1:b2:1a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:30:14 2026 by rpki-client