Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
File:                     MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft (raw, json)
Hash identifier:          yCH4nbXpSCdNN1Q7V6VqykGbr34VHPRluqBdbn04ptE=
Subject key identifier:   E8:3A:E0:69:B1:A2:E4:77:E8:89:89:68:0B:4B:1E:AB:9F:46:3D:F2
Authority key identifier: 31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
Certificate issuer:       /CN=A913CB06/serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
Manifest number:          42
Signing time:             Fri 05 Jun 2026 08:57:08 +0000
Manifest this update:     Fri 05 Jun 2026 08:57:07 +0000
Manifest next update:     Fri 12 Jun 2026 08:57:07 +0000
Files and hashes:         1: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl (hash: w1igB7vSeMSV4RBevpfh6YZ+Ufiq553j3J7T9aI9Pt0=)
                          2: BA419250081C11F1AD289B7B323D8C67.roa (hash: rFS/SZQK8Yk9ioV0Y+bTAAI4kAqBKXvpYRG0EHKZ9fI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
                          rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB06, serialNumber=31D4439467161068DD30457C3838FE6356927D3E
        Validity
            Not Before: Jun  5 08:57:07 2026 GMT
            Not After : Jun 12 08:57:07 2026 GMT
        Subject: CN=6a228f63-288e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:c7:72:ad:a5:be:28:a2:af:da:d7:67:d2:
                    ca:8d:d9:51:a9:24:02:d9:06:6c:e1:48:ed:c2:38:
                    23:4b:6a:e0:00:58:9a:99:e3:18:91:7d:91:c9:ca:
                    57:44:05:f6:42:3c:3d:d8:6c:6c:e0:75:4e:ee:4a:
                    36:29:90:59:0d:21:94:04:5f:09:60:c5:62:fe:1b:
                    42:11:87:69:54:a6:fd:0b:4e:91:8c:82:6a:b5:3a:
                    24:57:0c:6d:f4:b3:0a:23:8e:13:76:e6:70:46:5e:
                    3c:f4:04:7e:ba:f2:61:81:a6:a6:72:44:a4:f6:6b:
                    47:84:78:a4:1e:bc:ef:13:99:3d:9b:3e:43:b1:24:
                    04:40:aa:7f:9d:e6:66:8e:10:da:07:65:32:2d:78:
                    0b:1a:2c:34:2b:80:5f:38:ee:b3:01:c6:d5:a6:23:
                    dc:ba:c9:5d:66:55:d8:e2:bf:f5:0e:5d:ea:ac:e1:
                    9b:72:14:db:ea:12:53:55:ee:36:39:9a:e3:53:1c:
                    0f:b0:d7:71:8e:47:6d:03:6b:cc:9d:4d:17:09:66:
                    47:f4:dc:c5:ef:31:72:ac:20:da:06:4a:f7:05:4f:
                    91:91:ce:a4:13:3a:b8:f7:c1:7a:54:b7:3f:96:13:
                    af:ab:06:d9:73:83:c9:77:6f:4e:30:5b:9b:06:f3:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3A:E0:69:B1:A2:E4:77:E8:89:89:68:0B:4B:1E:AB:9F:46:3D:F2
            X509v3 Authority Key Identifier:
                keyid:31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b7:e3:be:bf:ef:e2:d1:1f:d4:05:c6:91:82:c7:5b:53:d0:
         3c:26:1d:79:53:2e:fd:9a:e3:02:27:bc:1c:3d:b0:fb:85:d7:
         4b:e3:1a:2e:cf:4e:6b:39:17:58:18:c8:86:a5:f6:b2:e7:44:
         ad:39:34:d3:6c:ad:91:ee:35:f8:cb:dc:83:c5:c2:aa:ae:2e:
         b5:16:0f:32:cb:3f:41:aa:33:7c:a8:f9:a5:5d:81:2d:1e:af:
         d4:c4:75:2d:d8:b7:51:14:05:ad:95:a1:ce:1a:33:92:77:e0:
         0c:db:da:b5:a9:38:96:6c:0b:7f:53:79:67:aa:a3:61:cf:ac:
         11:0d:e6:7c:e9:32:2c:42:21:a6:94:83:1e:f8:7a:c2:0f:36:
         b0:ff:42:ed:30:cd:2c:ae:ce:41:b2:f6:11:db:80:39:ee:51:
         7e:47:95:fd:41:d2:b0:14:79:f1:e9:d3:99:6e:e1:01:fc:a1:
         b6:5b:6e:80:0b:58:5f:aa:ae:a1:2c:95:60:55:59:17:8f:0b:
         0e:bd:fd:22:72:1d:ae:26:15:10:c6:5c:30:4d:70:47:cf:ac:
         92:05:91:9a:ba:ba:37:a9:87:16:c9:1a:35:d4:93:cf:73:ef:
         f5:ec:e8:9a:35:f1:b2:e6:61:4f:ae:72:44:ed:7d:67:76:fa:
         10:89:ee:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:23:19 2026 by rpki-client