Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.mft
File:                     9MMKd261o-yKw-4ApaqmCiPvLng.mft (raw, json)
Hash identifier:          MvV7e3xxlMEVByVtOupkEtuJNR+w5YsdOsOQfAcgd38=
Subject key identifier:   13:6D:77:45:09:3A:3F:9C:17:0B:B7:51:61:98:44:01:D2:EE:E7:EB
Authority key identifier: F4:C3:0A:77:6E:B5:A3:EC:8A:C3:EE:00:A5:AA:A6:0A:23:EF:2E:78
Certificate issuer:       /CN=A911DD4C/serialNumber=F4C30A776EB5A3EC8AC3EE00A5AAA60A23EF2E78
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMKd261o-yKw-4ApaqmCiPvLng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.mft
Manifest number:          1E
Signing time:             Thu 11 Jun 2026 11:12:48 +0000
Manifest this update:     Thu 11 Jun 2026 11:12:47 +0000
Manifest next update:     Thu 18 Jun 2026 11:12:47 +0000
Files and hashes:         1: 9MMKd261o-yKw-4ApaqmCiPvLng.crl (hash: O0nm+zBkquIiGlJB/4JopBjXu1JoQUq10/UM8AV2Iss=)
                          2: 2FCFD692395C11F1A22F7EE2CB833773.roa (hash: N0Hc/HxaJxuTJcm6mTEnZUv6QgPmxBhvGFlA3gJBs0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.crl
                          rsync://rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMKd261o-yKw-4ApaqmCiPvLng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DD4C, serialNumber=F4C30A776EB5A3EC8AC3EE00A5AAA60A23EF2E78
        Validity
            Not Before: Jun 11 11:12:47 2026 GMT
            Not After : Jun 18 11:12:47 2026 GMT
        Subject: CN=6a2a9830-7bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:93:f8:97:b4:64:87:8e:bd:7d:ad:26:0e:
                    40:e9:52:8f:b9:3c:6f:47:74:31:51:9c:82:05:3a:
                    5d:f2:1a:f1:70:58:1a:c7:3c:05:b9:07:43:9d:83:
                    11:bb:9b:31:36:00:62:29:23:c4:b6:19:a7:45:ee:
                    cb:04:7f:33:d9:2b:fa:c4:4f:e0:44:44:b3:72:57:
                    0e:9f:9a:0d:21:bf:76:e3:b4:79:1f:79:a0:09:72:
                    b1:98:e5:77:17:a5:ee:35:3d:ee:86:de:f1:ee:6a:
                    cb:3b:3b:ed:36:8c:5f:3c:7c:74:1e:7d:28:df:3f:
                    96:63:05:84:8f:00:0d:e4:3c:04:cf:c5:95:c7:a1:
                    73:45:65:22:49:98:62:81:59:6a:e5:26:5f:f7:2b:
                    ec:9b:53:93:3e:bf:00:4e:0e:20:12:9f:92:d0:08:
                    1f:ce:83:50:49:6b:54:2e:34:42:65:0a:be:6a:2a:
                    26:59:2a:b9:32:3e:98:95:50:50:ca:af:ac:29:dc:
                    de:b8:bc:6c:4e:6f:25:4f:97:e1:c8:ea:8c:51:47:
                    8b:26:c5:4a:86:76:47:7e:07:b6:d6:1e:44:c7:72:
                    83:92:9d:ad:ca:81:85:56:02:5b:57:fc:9b:34:7c:
                    0f:eb:53:44:56:b1:53:10:dd:4f:e3:fd:75:13:49:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6D:77:45:09:3A:3F:9C:17:0B:B7:51:61:98:44:01:D2:EE:E7:EB
            X509v3 Authority Key Identifier:
                keyid:F4:C3:0A:77:6E:B5:A3:EC:8A:C3:EE:00:A5:AA:A6:0A:23:EF:2E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMKd261o-yKw-4ApaqmCiPvLng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ce:31:5a:78:33:10:64:2a:d1:33:c3:03:a3:c4:67:bb:0e:
         0b:ad:0a:28:03:c6:ff:43:10:f9:06:6c:8e:13:56:bc:00:70:
         59:2d:5e:f9:33:9a:61:8e:dd:8f:c7:bb:d0:6f:86:ac:d5:e7:
         32:eb:9f:32:a4:ea:94:5a:39:61:d9:b8:e5:34:f1:fe:85:53:
         53:7e:67:de:4a:8a:27:35:9f:2d:2e:55:94:ca:b5:32:eb:37:
         ea:94:bb:da:40:5f:72:60:3e:88:c9:7e:4e:ea:a9:fd:d6:9d:
         d1:27:04:67:87:ec:04:39:f1:35:0e:ea:b6:a2:5a:69:48:09:
         e0:dc:78:9b:fd:9f:35:f5:1f:3c:7c:77:fb:cf:da:c9:11:62:
         f1:8e:9b:a0:75:af:91:e0:18:b4:fc:12:0f:d5:2e:5a:ab:64:
         94:1e:24:6c:d5:3f:3a:9d:fe:fc:58:0f:55:88:63:35:e3:d1:
         32:63:aa:6a:28:ec:e1:49:bf:d3:f3:f3:4c:d8:9b:bc:6d:d7:
         99:e4:06:fa:6c:d4:41:24:43:01:f4:7a:23:84:c1:63:70:e6:
         1c:59:06:69:63:d4:06:bc:44:82:c3:9c:4b:8a:5d:58:63:23:
         d9:b4:43:7a:05:65:e6:cd:45:62:6a:90:64:00:63:e0:46:e2:
         06:67:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:03:06 2026 by rpki-client