Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
File:                     bcDHAorrOzsmYx9pJXBQC2DtJxk.mft (raw, json)
Hash identifier:          ktvxQZa95IeGFD4ehcdMMRm+qhKoesV9rVparKikP3Y=
Subject key identifier:   8D:6E:B4:4E:4B:B7:4C:02:53:B2:96:F8:8E:8F:29:8D:8C:AE:49:F0
Authority key identifier: 6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19
Certificate issuer:       /CN=A913A81E/serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
Certificate serial:       07FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
Manifest number:          07F3
Signing time:             Mon 22 Jun 2026 21:19:37 +0000
Manifest this update:     Mon 22 Jun 2026 21:19:36 +0000
Manifest next update:     Mon 29 Jun 2026 21:19:36 +0000
Files and hashes:         1: bcDHAorrOzsmYx9pJXBQC2DtJxk.crl (hash: mbCZUEAVrPngeYAeXNPjVTIXKLlLSSsT7O3x34ZImYw=)
                          2: C562A08C34FC11EB9AA0EE7DC4F9AE02.roa (hash: qtrScKJeemzjIsu0EPYK7qa46I/IyYNJeryX2VPnVrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl
                          rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 21:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A81E, serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
        Validity
            Not Before: Jun 22 21:19:36 2026 GMT
            Not After : Jun 29 21:19:36 2026 GMT
        Subject: CN=6a39a6e9-fee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:7c:81:1a:e3:a7:44:ce:7f:03:62:02:38:
                    c0:29:a2:3c:96:b9:89:48:82:59:7d:6f:55:c0:1a:
                    5d:86:00:ce:a3:ab:73:ba:b1:e7:c3:c6:db:73:c4:
                    ee:25:5d:83:26:a0:b4:f4:b8:45:05:18:80:49:86:
                    46:e2:e4:e2:d4:e2:02:75:21:5a:b9:3a:96:d7:72:
                    a4:c1:cc:6c:07:17:7b:05:cc:85:c1:f6:e2:0c:98:
                    37:d0:ba:48:70:ec:22:54:ac:af:c0:4a:83:1f:79:
                    be:26:82:1c:d4:fe:e6:db:95:32:16:4c:db:4a:09:
                    55:5d:8a:b0:4b:e1:c6:7a:41:f2:39:2b:92:7e:04:
                    19:c7:0c:56:1d:13:75:67:0f:2a:8b:7d:a5:17:74:
                    27:e4:61:ee:41:fc:51:ce:6b:11:7d:c5:66:52:4e:
                    29:ab:0d:b9:67:5d:24:11:d0:40:16:4d:b6:70:0c:
                    91:3d:ee:cc:6b:1e:2f:93:a4:f6:b0:2d:5f:90:f8:
                    55:65:81:9f:59:55:7b:53:3a:75:a9:12:ac:71:e8:
                    b6:af:d3:c6:d3:e3:d3:69:a4:36:c1:05:b4:79:90:
                    72:de:95:6a:06:24:f2:0a:15:77:8a:c8:85:ff:3c:
                    fc:51:52:b8:d3:38:4f:33:bd:70:86:38:d5:2b:ad:
                    0d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6E:B4:4E:4B:B7:4C:02:53:B2:96:F8:8E:8F:29:8D:8C:AE:49:F0
            X509v3 Authority Key Identifier:
                keyid:6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fb:25:6d:c5:d1:2d:e1:a4:cd:65:c5:11:ec:5e:03:7f:72:
         a7:c8:ba:7c:ae:bf:b5:02:a9:a9:33:6e:45:a1:bc:a6:24:0b:
         1b:82:2c:eb:67:c5:f6:a7:47:66:a3:d2:05:1b:8a:ff:0f:72:
         63:e4:2f:2d:e5:98:39:5e:27:b6:70:98:73:92:11:f4:18:42:
         54:fb:c4:73:fa:a1:5e:05:21:86:1d:23:5d:af:3d:7d:c7:4d:
         2c:c3:8d:2b:77:71:a0:d8:b4:ed:67:31:f9:31:93:cd:b7:7c:
         ff:01:04:3a:b9:1f:7c:de:c9:24:f0:bc:b8:ed:cb:d1:b1:72:
         28:6f:3a:1f:29:96:6c:8a:4f:a6:03:2b:49:01:89:f1:45:82:
         36:a1:0a:b6:0b:19:36:15:a4:94:90:ce:36:95:b1:47:52:4a:
         2f:c7:c1:18:4c:db:8a:d6:8f:7d:1a:37:79:ab:53:48:37:6c:
         e2:8f:7b:44:9c:b2:1e:99:05:91:fb:f4:64:80:03:e9:44:e3:
         1e:37:3a:bb:c4:ab:a0:96:10:a1:71:1f:87:28:d4:e9:2e:7e:
         71:59:1d:41:59:65:44:b4:86:34:94:97:6b:cb:e1:a1:2b:87:
         85:c5:b1:dd:e6:9d:9f:63:f5:2e:33:7f:11:38:1d:72:5d:1d:
         a0:b8:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:01 2026 by rpki-client