Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
File:                     ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json)
Hash identifier:          dGmk58dX4y15ROnycZkNrRk/CBfBqHZ7V4dVorSTWUU=
Subject key identifier:   E6:4F:D9:A0:5A:BA:A5:3A:3B:DC:D5:48:89:6D:E5:3B:7E:7E:6F:5E
Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
Certificate issuer:       /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Certificate serial:       068A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
Manifest number:          0683
Signing time:             Thu 04 Jun 2026 22:37:29 +0000
Manifest this update:     Thu 04 Jun 2026 22:37:28 +0000
Manifest next update:     Thu 11 Jun 2026 22:37:28 +0000
Files and hashes:         1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: CpZebWYo9b5G08WefMzY4V9gXR+Si/pMZ+7T4yj5ajg=)
                          2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: TOu4rTok/YTcP4XYz+qFAKVXMljHMOdt2vuAWSKuetQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
                          rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 22:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
        Validity
            Not Before: Jun  4 22:37:28 2026 GMT
            Not After : Jun 11 22:37:28 2026 GMT
        Subject: CN=6a21fe29-6bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:3c:ef:34:35:77:38:f5:d4:21:4d:54:3a:
                    a7:c9:ba:90:3d:cc:53:ab:c9:18:85:8d:a4:7d:45:
                    02:be:36:05:b3:17:1a:87:f1:92:37:9b:02:6b:87:
                    15:bb:44:8e:6c:d0:95:8e:b4:51:9e:4c:95:62:ca:
                    31:db:73:4a:15:48:73:be:90:99:57:89:78:ec:d6:
                    e7:d4:38:d6:20:69:81:94:40:97:df:4d:33:13:0c:
                    1a:08:ee:ee:d0:02:77:8f:26:3f:c1:07:aa:c7:49:
                    97:bf:7b:c8:d5:aa:aa:aa:4f:54:33:dc:37:d6:37:
                    78:67:6f:7e:59:7d:d1:f1:22:cd:f9:18:7b:0f:67:
                    a4:b4:de:cd:d3:f5:c5:0d:6f:81:d5:66:25:96:6f:
                    8c:e0:95:2d:1e:73:b2:1d:e9:e2:23:05:5e:d6:47:
                    48:98:ba:f6:6e:e9:ab:14:cd:99:b4:28:ea:ee:f7:
                    55:fa:71:af:42:47:6b:97:1d:64:9c:8f:fc:d7:58:
                    df:cd:46:3f:a5:98:af:98:83:c7:40:3f:1f:c6:cc:
                    65:77:07:d9:98:48:fd:e6:9d:3e:cd:78:f6:4f:b6:
                    16:92:c3:19:63:9a:da:01:59:f6:fc:f2:58:97:e1:
                    33:15:32:83:0b:45:42:18:c0:78:3f:11:bb:51:68:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4F:D9:A0:5A:BA:A5:3A:3B:DC:D5:48:89:6D:E5:3B:7E:7E:6F:5E
            X509v3 Authority Key Identifier:
                keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:21:ba:ed:b2:7e:57:6e:fc:2d:14:f1:cc:c7:80:9a:c2:
         4d:6f:45:9e:65:58:61:d9:ba:f4:c6:ae:2c:4d:55:ff:c0:2d:
         03:7f:35:ea:8f:e5:c4:4c:e2:96:96:99:b0:43:ed:44:f4:cb:
         af:45:23:2e:2e:81:ba:46:4d:c5:69:0d:00:7b:a2:83:fe:d0:
         e9:eb:5f:ef:da:bc:dd:93:50:be:c8:ed:b8:52:be:2f:f2:6c:
         80:97:6b:1f:d7:d9:ca:fd:99:95:66:60:22:1f:d8:3d:f7:d4:
         35:6f:49:ea:62:d8:98:b2:f7:7c:9b:e3:20:e9:8f:3b:42:75:
         ed:f5:b0:89:48:d8:11:21:9a:26:fc:16:14:eb:d0:93:51:7d:
         b0:db:c1:16:4b:eb:b1:18:a0:a6:c9:a9:58:dd:44:da:bb:90:
         5d:e5:d0:79:1d:cc:f4:df:b4:fb:d6:1b:d6:56:57:3a:ba:a8:
         74:45:86:15:12:97:81:90:42:c3:e3:7b:9e:7f:28:fe:e9:51:
         3d:33:e9:54:ca:7a:5a:a1:c3:a8:54:3d:a1:01:b4:86:66:01:
         58:49:39:c4:86:c1:6f:1f:c7:9f:9a:5f:bd:9a:62:cb:13:0f:
         33:67:54:47:72:8c:88:7e:e2:a3:cd:46:bf:5a:a3:cc:6f:38:
         53:f8:3e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:14:18 2026 by rpki-client