Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File:                     23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier:          CK79+rDOMB5d125mms2kOxBj6ZUUUezWLM/WFFAmbcE=
Subject key identifier:   DE:68:A0:89:FB:0C:6E:BE:0F:23:D5:D2:BD:B2:80:4E:0C:53:40:5A
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer:       /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial:       074B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number:          0728
Signing time:             Mon 22 Jun 2026 22:04:06 +0000
Manifest this update:     Mon 22 Jun 2026 22:04:06 +0000
Manifest next update:     Mon 29 Jun 2026 22:04:06 +0000
Files and hashes:         1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: //dCpIjczgagG15aP96ZVUK6/c/2w/WuZynsU84yU/o=)
                          2: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw=)
                          3: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=)
                          4: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: 5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
                          rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 22:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
        Validity
            Not Before: Jun 22 22:04:06 2026 GMT
            Not After : Jun 29 22:04:06 2026 GMT
        Subject: CN=6a39b156-97e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:16:a0:64:72:63:69:9b:8a:ff:6c:43:f6:
                    c7:45:d6:a6:41:72:75:b1:ae:14:18:4a:47:bb:8a:
                    b4:1d:4c:3b:76:ca:e2:40:ae:6c:d3:2b:87:5b:b8:
                    22:ef:35:eb:0d:e6:9e:c3:fd:01:fa:f6:9f:64:e0:
                    44:d1:79:31:4a:6c:50:81:31:9c:11:d4:f1:86:21:
                    c4:cc:84:12:22:e3:2e:ff:87:04:b6:54:1e:e7:ca:
                    03:d8:64:cc:95:f1:46:e9:58:5e:7d:0e:d4:71:f2:
                    d0:e1:a0:66:e7:42:ad:81:79:11:d5:86:0d:85:94:
                    60:16:33:8d:8a:ea:34:94:59:7e:b7:ce:e2:50:49:
                    e2:4d:42:d7:66:75:b0:fe:f3:6b:f0:12:83:ab:58:
                    0b:ff:d4:1e:21:57:9a:e8:b5:05:85:e7:46:95:f3:
                    bd:ca:7c:d9:66:75:a7:e3:c5:2c:98:d6:d5:cb:59:
                    f7:c5:12:dc:23:e3:5a:ed:61:28:c7:57:01:a1:b1:
                    78:e4:31:76:a2:b0:0e:69:c8:2b:77:c8:b0:ed:2d:
                    12:6d:0a:a4:d4:f0:40:6e:c9:09:ed:ed:b0:dc:be:
                    7c:c9:bc:29:ea:a8:81:1a:53:c2:86:ca:89:a7:b0:
                    01:d8:bb:f4:55:54:c6:cf:79:1e:ae:74:b4:1c:a3:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:68:A0:89:FB:0C:6E:BE:0F:23:D5:D2:BD:B2:80:4E:0C:53:40:5A
            X509v3 Authority Key Identifier:
                keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5e:27:d9:30:81:50:d3:6b:28:b9:3e:94:1c:61:be:98:3b:
         e7:da:57:8e:1f:8e:95:5f:74:17:f5:be:f1:09:f2:bd:b0:93:
         61:08:e3:63:09:eb:5b:e3:1e:fa:f3:99:d3:9f:20:55:99:5b:
         45:e6:89:23:1e:8f:9a:00:57:91:38:a7:26:54:6a:e3:74:6c:
         d9:92:60:3d:80:9a:3d:61:94:9b:fc:40:d6:0b:e8:7d:c4:a4:
         8b:a9:93:f2:95:ef:c0:e7:fc:9f:75:5b:20:f8:e3:57:3d:df:
         44:c3:ad:aa:8c:10:10:aa:51:9b:27:b9:64:e7:6d:78:6d:79:
         33:96:9c:49:ba:db:9c:0c:55:b6:d5:40:05:98:d7:24:66:21:
         7d:eb:24:b2:f7:fe:71:73:3f:84:0a:40:89:7f:1e:14:e3:de:
         61:b0:72:d2:1b:fc:77:2e:42:e5:d3:4c:5c:c3:8e:0e:d3:d8:
         83:7d:2a:59:81:9b:0b:66:ce:23:bd:42:e3:47:e2:d4:1a:8a:
         a0:8d:7a:09:b8:b3:e2:98:9e:ee:5b:b8:ca:b2:ae:21:39:89:
         09:e5:ed:c1:4c:88:08:05:b3:11:48:39:e5:29:15:b0:33:63:
         7f:51:06:2d:48:63:50:36:0e:b7:67:ac:22:b0:6c:da:40:9a:
         30:50:65:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:00 2026 by rpki-client