Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft
File:                     -D5VvcZ7iLBYj5Yplze0oce1u3o.mft (raw, json)
Hash identifier:          cysTJSchjOz2F0CAoVdLdbWdfG34c1GKi3JZl6fOLl8=
Subject key identifier:   E0:C1:D2:AD:D5:39:0A:4D:15:2D:0C:8F:8C:DA:62:C9:4C:24:33:24
Authority key identifier: F8:3E:55:BD:C6:7B:88:B0:58:8F:96:29:97:37:B4:A1:C7:B5:BB:7A
Certificate issuer:       /CN=A9134ACE/serialNumber=F83E55BDC67B88B0588F96299737B4A1C7B5BB7A
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D5VvcZ7iLBYj5Yplze0oce1u3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft
Manifest number:          09
Signing time:             Sat 27 Jun 2026 09:48:45 +0000
Manifest this update:     Sat 27 Jun 2026 09:48:45 +0000
Manifest next update:     Sat 04 Jul 2026 09:48:45 +0000
Files and hashes:         1: -D5VvcZ7iLBYj5Yplze0oce1u3o.crl (hash: P7CaWvG9V+PIhUS4+W+R1BItXM5ebacVbVD00MsPIlI=)
                          2: 289627426EC111F198F60F1C67A30FBC.roa (hash: uxG9NYEWiWnvCGI2UhFJaVgVq808jt/a6Bx2/OzeOec=)
                          3: 29CA3D926EC111F198F60F1C67A30FBC.roa (hash: PgVXYKG5QBRfwHOvukm3uo5F96YGB/Dd8aZakX2oSl8=)
                          4: 55C241CA6F6511F1B4C954875DA30FBC.roa (hash: 5dBmRYYWI0L5PUh0/9O11W0jeEUK5EK4hYrRoUKe5IA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.crl
                          rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D5VvcZ7iLBYj5Yplze0oce1u3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Jul 2026 09:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134ACE, serialNumber=F83E55BDC67B88B0588F96299737B4A1C7B5BB7A
        Validity
            Not Before: Jun 27 09:48:45 2026 GMT
            Not After : Jul  4 09:48:45 2026 GMT
        Subject: CN=6a3f9c7d-d503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:69:b5:0d:68:25:8e:cf:c6:01:85:0d:c7:
                    1e:da:25:1a:ee:0b:86:11:c6:0f:ab:26:d5:23:e2:
                    4a:bb:54:47:74:70:7d:7d:7f:61:02:67:b6:d3:91:
                    e0:87:ea:d8:24:9b:7c:5f:2a:5b:f6:ac:41:00:b7:
                    43:73:c2:53:95:36:62:00:a3:2f:6f:03:60:2a:dd:
                    ed:31:17:0d:52:48:3c:cb:62:10:cd:d2:c9:4e:02:
                    70:d5:4b:85:c4:00:3f:81:b7:48:fb:91:bd:f4:22:
                    dd:aa:00:00:cf:c1:79:af:b5:89:80:31:38:ba:f7:
                    91:8f:20:94:61:2b:93:a8:0a:9d:37:52:04:fa:e4:
                    eb:27:c9:f2:9a:94:c4:ed:54:1f:ff:17:13:d8:08:
                    fe:d2:19:9d:0c:15:1d:01:3e:38:d3:89:eb:11:92:
                    ed:b3:5f:b7:9e:ee:ee:45:7c:80:a5:27:88:e8:b9:
                    44:c3:98:91:02:37:5d:42:a5:ac:45:df:a6:9b:37:
                    e5:24:61:44:1e:9c:da:0e:97:41:47:e6:87:b0:9d:
                    bd:4f:8b:0f:2c:ec:f5:c4:73:f4:73:fe:de:93:68:
                    7b:d3:a3:74:af:22:32:dc:3e:35:38:68:05:d2:d7:
                    d7:24:64:e1:a4:e0:35:26:1b:c1:e5:e8:53:66:56:
                    fe:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C1:D2:AD:D5:39:0A:4D:15:2D:0C:8F:8C:DA:62:C9:4C:24:33:24
            X509v3 Authority Key Identifier:
                keyid:F8:3E:55:BD:C6:7B:88:B0:58:8F:96:29:97:37:B4:A1:C7:B5:BB:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D5VvcZ7iLBYj5Yplze0oce1u3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0a:fb:ce:07:f3:8d:3e:6e:16:5e:9b:d9:d6:c6:35:04:26:
         74:d7:2a:7e:42:be:b1:52:0f:b7:20:da:f5:89:44:36:0c:76:
         7c:9c:62:6b:21:9a:a2:5f:98:0d:97:a5:61:6b:28:f4:3f:e0:
         4e:a3:be:40:a9:45:68:e5:dd:75:6f:60:4e:ce:4a:1e:6f:a2:
         9f:52:55:ff:d7:96:3a:0c:ba:a1:57:b2:fe:74:a1:26:65:14:
         bd:51:37:88:f7:ff:b2:ba:22:6c:88:48:9a:c9:7f:b6:1e:0b:
         16:32:31:c5:e5:0d:c5:09:2f:07:7a:e0:38:90:5b:8b:06:88:
         c3:62:83:06:a4:5c:8e:37:3d:39:f1:e6:62:35:15:af:9d:c8:
         04:7d:76:af:4a:25:c6:0c:79:20:51:59:6e:29:d7:fe:ca:8a:
         39:c2:63:78:5d:f6:69:0e:e6:5f:07:d8:d8:80:a5:0e:6e:63:
         24:2e:02:63:c7:10:6c:6e:46:3d:f4:a9:a1:6c:f5:89:ff:27:
         3a:b0:38:dd:c7:5d:23:2f:0b:10:e5:f8:ba:c7:36:2b:0d:a6:
         ee:67:de:25:a4:3d:0c:ef:65:cc:5c:64:e5:e5:bd:86:1f:7a:
         2b:1a:04:31:bf:61:35:86:40:55:3f:e9:f3:9c:04:d0:68:95:
         50:e6:80:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:32:26 2026 by rpki-client