Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
File:                     0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json)
Hash identifier:          z4EY9N69UgRTa9XcUfDGqTq5dv9fkx153x/OeyR20Cs=
Subject key identifier:   CC:93:68:2B:F2:24:74:1C:9A:85:24:F8:B4:E9:A9:0A:95:89:C6:56
Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0
Certificate issuer:       /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
Manifest number:          0168
Signing time:             Mon 01 Jun 2026 05:34:38 +0000
Manifest this update:     Mon 01 Jun 2026 05:34:38 +0000
Manifest next update:     Mon 08 Jun 2026 05:34:38 +0000
Files and hashes:         1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: h21hPwMZLI9FKSi4k17jwtkYQnqyH9MIwODsmJLHIiU=)
                          2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: 6hllB+BhAvPyfA1E4UvoCy4BNkepXgO0emT4SO5EHvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl
                          rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
        Validity
            Not Before: Jun  1 05:34:38 2026 GMT
            Not After : Jun  8 05:34:38 2026 GMT
        Subject: CN=6a1d19ee-fe66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:ea:21:a6:ba:20:5f:d0:51:5d:c9:38:26:
                    d4:e0:5c:46:0f:94:07:4e:c4:4d:19:4f:bc:7b:52:
                    cb:26:eb:1c:2d:9c:97:01:67:8e:af:7f:d8:3a:60:
                    e6:3d:3f:6e:3a:bc:5e:2b:21:f9:27:35:f4:cd:a0:
                    15:a1:ca:ad:24:cf:4c:e6:58:3d:04:fd:9f:dd:f8:
                    6c:b1:90:61:0f:4c:e2:43:51:be:a2:f3:c9:c7:19:
                    5c:09:44:d0:09:ea:10:e2:08:2b:74:37:5f:43:d9:
                    2a:ec:07:70:91:f6:82:9f:a0:a8:ea:22:cb:ce:8a:
                    54:74:e5:7a:bd:75:27:64:21:61:2c:28:03:be:4e:
                    ef:d2:31:2a:02:26:49:26:d5:4d:6b:eb:fb:d6:12:
                    8d:ad:03:72:2d:89:0e:71:b3:7d:47:d4:61:cb:50:
                    7f:36:f1:a0:77:13:83:de:8a:9f:9b:5a:61:a4:66:
                    ce:14:20:24:bd:12:6b:79:f7:32:59:f3:fe:e2:48:
                    ce:d6:31:22:b7:0b:7b:36:b6:e7:1a:e0:e4:11:7a:
                    9b:6a:8f:29:7d:45:ea:2f:d6:83:ce:3c:6d:49:a1:
                    af:e5:24:52:01:e5:6a:9d:e9:9d:ed:f2:63:bf:fd:
                    fe:96:87:5f:7a:95:bc:c1:a2:ce:2d:ab:71:8d:02:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:93:68:2B:F2:24:74:1C:9A:85:24:F8:B4:E9:A9:0A:95:89:C6:56
            X509v3 Authority Key Identifier:
                keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:a3:bb:5f:a8:a9:5f:51:75:ef:31:1d:bb:73:a1:aa:fa:96:
         45:38:5e:6e:ec:5c:ab:64:c7:c9:a5:eb:c5:72:a9:b4:1b:9a:
         11:b0:ac:44:c1:c0:d1:d9:a1:9b:c2:6d:21:f2:af:f3:e2:1b:
         72:cf:45:e6:cd:78:a5:77:80:12:6b:f9:68:3c:15:55:29:14:
         47:c2:cd:41:e7:65:11:7a:48:37:6d:07:94:de:54:52:8d:1f:
         7b:bb:06:61:ac:34:b1:f3:95:d4:24:45:65:a0:37:52:21:d4:
         59:86:86:79:14:d6:9e:92:6e:a0:d6:32:7d:ad:95:f4:24:11:
         af:cb:ca:c7:49:c9:e0:49:da:f7:03:68:5f:34:f6:1d:2d:19:
         9f:1f:14:25:69:8c:22:70:10:f5:cc:50:d7:c6:79:3c:e4:12:
         02:76:93:b6:62:cb:fc:45:e2:b8:7b:df:02:54:a2:33:63:43:
         ac:30:2e:fe:5d:3c:7e:ff:51:71:10:06:95:ba:83:e7:e2:0a:
         a9:21:a0:d4:45:c9:c1:7e:94:78:46:69:a5:ab:fd:6b:6f:1a:
         ce:32:64:a3:62:d4:d4:fc:41:9c:ea:14:c3:5e:41:bd:43:52:
         86:5e:28:f8:05:66:0e:d0:d1:f7:73:71:1e:8d:63:90:52:93:
         58:23:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:38 2026 by rpki-client