Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
File:                     znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json)
Hash identifier:          ApZThurjjU36uUb/0JytFiVdmkVegX5PDdQsuScQWI4=
Subject key identifier:   46:37:C7:C2:C4:62:72:40:3E:FC:ED:FE:93:BF:80:6D:E7:1B:9F:9D
Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
Certificate issuer:       /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
Manifest number:          026F
Signing time:             Tue 23 Jun 2026 02:10:30 +0000
Manifest this update:     Tue 23 Jun 2026 02:10:29 +0000
Manifest next update:     Tue 30 Jun 2026 02:10:29 +0000
Files and hashes:         1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: 7Kj1Kqkx7M1gOLRRenFgXkIkYi3zNMib8rJEZBszMxM=)
                          2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: 0tGrUYawd9sMWVYCt8qeQNs8Dy+OY7IGn4NZ/aaWN2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl
                          rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 02:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136C5E, serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
        Validity
            Not Before: Jun 23 02:10:29 2026 GMT
            Not After : Jun 30 02:10:29 2026 GMT
        Subject: CN=6a39eb16-2a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:f3:c4:46:f5:a0:d4:94:62:d5:fe:66:01:
                    af:e9:bb:ae:33:79:9b:bb:c4:b7:6b:6c:69:c1:b6:
                    8d:6c:45:2e:cf:e0:b4:84:28:33:6a:18:ca:fa:d9:
                    9e:08:74:b6:89:90:ef:a5:e0:97:17:4b:c3:07:dd:
                    fe:a9:a0:f7:a7:90:d5:90:f8:58:d9:36:79:b3:fc:
                    e1:89:8b:e3:61:bd:dd:df:48:17:05:58:0a:18:dc:
                    55:26:53:3f:d8:57:f0:e5:28:25:34:6b:7b:ce:1c:
                    5e:3f:36:d0:6e:01:af:01:c3:83:c2:97:bd:90:3b:
                    f4:a2:b7:23:3b:ed:9e:c1:5c:0e:7c:00:5a:9f:28:
                    69:db:a8:3e:a9:a0:58:23:1e:b9:94:a3:c8:17:ee:
                    c5:f3:01:0c:ff:f6:a1:4c:93:78:3a:2c:b8:2d:84:
                    8e:d2:4a:fe:a1:2f:39:d2:9a:9c:23:44:91:0b:d1:
                    50:31:bc:f3:e5:36:d1:83:f3:ef:80:0a:b2:c7:ff:
                    b7:41:45:ac:ae:8f:b5:b5:22:83:4e:83:c8:22:e2:
                    30:1a:2a:ef:5a:55:3b:41:06:25:9a:44:14:bc:25:
                    a8:d2:8e:5b:1c:5f:25:43:f9:2f:2a:f7:f6:d4:32:
                    a5:0d:30:c7:8e:e5:f2:9d:5d:84:8c:b8:d5:15:13:
                    4a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:37:C7:C2:C4:62:72:40:3E:FC:ED:FE:93:BF:80:6D:E7:1B:9F:9D
            X509v3 Authority Key Identifier:
                keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:35:98:f1:3e:b7:49:09:63:ab:5f:a2:ff:0f:37:f1:5b:fa:
         f6:d3:ca:8e:1b:5d:66:ee:0e:7e:38:00:44:1f:69:30:ae:3b:
         fb:b1:69:41:1c:76:2c:7a:6b:dc:2a:eb:39:32:62:d7:5b:7e:
         4a:27:d1:13:e2:99:07:bd:53:75:8e:12:45:f6:95:75:a2:cb:
         c4:3b:87:9e:51:6f:92:68:c9:6e:24:cc:23:d3:4b:0c:2e:9c:
         a6:c1:84:7f:db:fa:f0:15:ac:e3:ff:c7:72:8e:a6:17:95:fb:
         18:a7:29:d7:09:32:f2:57:a8:c0:0d:1f:5a:49:c8:b0:87:44:
         64:aa:57:48:f4:d1:89:d2:c8:4b:d4:4e:9a:21:62:7e:f7:ab:
         d9:31:5c:49:fb:3a:60:96:46:35:8e:bc:3c:cb:8e:e1:a2:6e:
         84:d5:3e:46:9a:6b:2c:57:74:ee:94:3e:a3:8e:28:d2:8b:cd:
         bf:40:81:d5:4c:46:6c:0d:8a:5e:41:e1:6f:dc:cb:c0:e4:86:
         be:7f:ad:4c:1f:49:b8:1e:dd:df:93:b5:f7:e7:05:48:29:cd:
         27:e4:30:0a:ba:84:f9:d5:e4:a3:5c:9b:49:58:40:58:6a:75:
         24:5a:7f:98:ff:69:cf:4d:8c:18:79:51:dc:0f:6d:72:74:e9:
         f6:d3:ed:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:32 2026 by rpki-client