Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
File:                     fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json)
Hash identifier:          ATnFpijyhdRjTwlr7afO3Ia7y2K0LhxTm7JjvvmddJ4=
Subject key identifier:   5E:D7:C9:E2:B0:E9:26:42:C0:10:F7:B9:67:13:69:79:35:24:2F:3F
Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Certificate issuer:       /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
Manifest number:          011D
Signing time:             Mon 01 Jun 2026 06:36:04 +0000
Manifest this update:     Mon 01 Jun 2026 06:36:04 +0000
Manifest next update:     Mon 08 Jun 2026 06:36:04 +0000
Files and hashes:         1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: 5zje0eFET+GOvy/9UEnDyArpvOA8iNfnKWUjI2r4fnI=)
                          2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: pMb/fzhxQo8B4/8r3buBhCAOx+HEOaBzUhA5CpNJUgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl
                          rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
        Validity
            Not Before: Jun  1 06:36:04 2026 GMT
            Not After : Jun  8 06:36:04 2026 GMT
        Subject: CN=6a1d2854-fdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:2d:49:6e:21:02:74:a0:c1:4a:a0:cf:f0:
                    36:11:bc:b2:b8:16:0d:96:31:5c:1a:1f:aa:51:97:
                    fd:d8:cd:36:f7:3d:86:4d:9e:bf:99:72:1a:3b:ed:
                    0a:dd:18:dc:b9:3f:bc:56:22:29:a5:a9:c5:8f:fa:
                    5c:86:06:e3:07:2f:f6:0a:9c:b1:b4:6e:67:93:62:
                    82:d2:fd:78:d7:39:8e:a6:fb:e7:0e:6b:45:8e:40:
                    b2:3f:5d:92:9b:16:1b:7c:ee:40:22:29:04:e9:6f:
                    da:9a:12:b2:66:5d:18:01:62:fa:49:e3:52:8e:fe:
                    f4:20:3e:77:12:91:f1:1d:93:1d:d6:4e:1f:19:40:
                    46:16:61:4e:ab:8a:8a:6a:79:d8:86:de:73:7e:cf:
                    68:6a:99:a7:cb:22:a8:4f:57:58:74:89:48:08:c9:
                    90:f2:13:0e:40:6d:b2:6b:47:c9:f9:fd:b3:00:83:
                    74:68:12:99:fa:70:98:32:0e:d3:7c:68:ae:e9:73:
                    13:10:ad:fa:d6:83:99:bb:66:1f:d1:f9:68:72:21:
                    6b:c7:4c:8f:ea:59:fd:91:4f:d4:b5:ea:18:1f:d2:
                    85:b9:b6:54:28:5a:b6:b1:7b:72:4c:c1:0f:c0:b5:
                    54:3e:0d:2d:90:2f:bd:6a:a9:6d:e4:87:f2:07:58:
                    a7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D7:C9:E2:B0:E9:26:42:C0:10:F7:B9:67:13:69:79:35:24:2F:3F
            X509v3 Authority Key Identifier:
                keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:79:f8:99:fa:92:4e:ea:34:dd:ba:9f:e1:a9:64:f9:75:04:
         92:b9:1c:1e:01:32:83:87:48:27:ff:dd:15:cc:ed:5f:fd:f3:
         7f:1f:ab:f2:7e:0f:79:2b:df:0d:b1:a9:7f:de:57:1f:3f:3f:
         1f:19:db:75:16:d1:43:26:fd:e4:ad:14:2e:bc:16:36:a1:72:
         6a:af:c4:c1:fd:72:cc:61:43:99:1c:3b:ba:63:99:2e:f1:26:
         2e:3a:96:f7:0f:74:fc:0f:25:81:52:13:fa:f9:c4:e0:24:ec:
         6e:16:03:b5:3a:9c:00:b0:01:3d:c9:d7:7a:d0:4e:16:f7:09:
         f5:68:f1:d2:8c:ce:6b:dd:b7:43:fc:d9:78:ab:ba:48:77:28:
         47:b3:01:84:5e:dd:29:47:5e:1b:68:75:dc:09:76:36:de:ed:
         c4:1b:40:79:d7:54:dc:31:5a:b3:04:f9:dc:b0:8c:6a:a3:c9:
         69:1d:af:8d:6e:d4:2a:dc:f8:47:5d:83:bf:37:d9:f1:c5:88:
         77:84:87:51:81:5a:c4:de:d9:c8:60:d6:ca:4c:10:75:a1:a5:
         cd:83:94:3f:58:8f:aa:19:ef:f7:1c:99:3f:28:5e:90:8a:c5:
         18:78:c6:76:fc:2f:a9:f2:2c:fe:a8:17:ef:f7:d1:ca:16:0d:
         67:06:84:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:13 2026 by rpki-client