Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
File:                     -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json)
Hash identifier:          6cJ04iVgZRl1QR/amadJXp/FmgQMh4BCuNvK60SPduE=
Subject key identifier:   06:D2:B8:0E:69:36:8D:5D:3E:98:08:8C:0D:A4:E1:F0:24:D7:C5:17
Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
Certificate issuer:       /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Certificate serial:       2510
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
Manifest number:          24FE
Signing time:             Mon 22 Jun 2026 15:44:38 +0000
Manifest this update:     Mon 22 Jun 2026 15:44:37 +0000
Manifest next update:     Mon 29 Jun 2026 15:44:37 +0000
Files and hashes:         1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: MSzmVGxHo1Xj0MPzvckJfV3OMZPQh/TMtmNZlv8DMl4=)
                          2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: 0nVh716qMxf5T71PANX2QzmNBRMbCGmc3vAqRWcki7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
                          rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 15:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9488 (0x2510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
        Validity
            Not Before: Jun 22 15:44:37 2026 GMT
            Not After : Jun 29 15:44:37 2026 GMT
        Subject: CN=6a395866-f001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:76:75:a3:b8:1e:82:88:05:d8:ca:3b:d0:
                    24:d9:43:59:10:ef:37:6b:39:4a:18:d6:e4:36:83:
                    d5:b6:14:f8:1d:a1:95:44:5a:19:47:89:f4:7b:66:
                    31:e9:32:34:eb:d1:88:74:a4:e2:db:2b:15:59:0f:
                    dd:10:5b:47:75:cd:a3:87:e6:3e:12:4f:aa:f9:09:
                    33:2c:5f:cd:25:28:91:02:1e:28:f5:2d:e5:e8:44:
                    ad:28:a5:7f:16:78:fa:02:05:c4:87:66:1b:a9:73:
                    42:aa:6d:fb:b4:ed:79:98:75:13:93:6a:24:69:4e:
                    88:d2:c9:9f:89:91:5c:c9:5a:70:8c:1d:6b:8a:4e:
                    b8:7f:9a:e2:b3:47:4f:7d:43:c5:da:b3:de:d8:fd:
                    d2:af:d1:c4:e7:73:67:22:d4:76:be:1b:a7:0c:50:
                    1b:e2:96:bd:b9:c2:92:0f:6e:da:33:05:06:78:48:
                    df:e4:85:dd:e2:17:bb:4f:eb:71:31:e7:cc:f0:b9:
                    fa:65:cd:67:ce:63:cb:f5:fa:a0:3a:fb:80:5a:e0:
                    68:7f:fb:16:92:d5:69:b2:1f:bd:dc:37:a2:28:22:
                    34:90:5c:e1:c1:ec:fb:cc:f2:01:99:bc:d6:04:a7:
                    40:9f:90:43:10:11:4d:b4:e4:55:d3:87:7c:38:5f:
                    4e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D2:B8:0E:69:36:8D:5D:3E:98:08:8C:0D:A4:E1:F0:24:D7:C5:17
            X509v3 Authority Key Identifier:
                keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:80:ab:15:d0:b9:b3:ff:a6:21:46:f7:28:a6:03:a9:81:98:
         0d:96:34:ce:bf:06:fa:53:cc:bc:d9:96:19:2b:68:f3:dc:2b:
         f6:cc:a0:91:3c:f3:48:16:84:9c:eb:70:9c:5a:e5:ed:01:58:
         1a:d9:2f:7c:c8:12:86:88:3e:15:aa:75:5e:8e:4e:f4:fc:ba:
         18:1d:8a:5e:86:9f:fc:54:9a:e8:a4:cb:67:92:86:58:d1:6e:
         d4:e6:fe:69:b0:f3:fa:cd:88:f5:77:9f:c3:d5:97:38:f3:81:
         cc:a7:74:60:db:22:91:f5:2e:05:e4:df:92:4f:0a:1c:e8:80:
         bd:f9:71:21:da:fc:85:10:ba:38:2f:e6:7a:9a:e7:a1:63:8e:
         89:f4:57:14:d7:46:7e:3c:08:77:47:5d:bf:74:de:64:43:31:
         5c:75:6e:fd:40:a5:0f:5b:10:f6:3f:3f:18:4d:39:63:b7:d3:
         5f:b2:45:2e:f4:8b:f3:4e:03:ab:5c:8c:82:7b:33:9b:8f:59:
         99:cb:3f:0d:dd:07:e6:01:be:a0:88:4c:17:f3:cc:39:ed:9c:
         6a:89:78:d5:39:3a:05:a8:5b:25:0c:f8:df:3d:a7:89:06:5b:
         29:f5:68:07:8e:ac:0c:da:cb:fe:d5:df:f3:e3:6a:54:8d:ec:
         a2:09:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:36 2026 by rpki-client