Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
File:                     8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json)
Hash identifier:          nC0nUo9avPQxwkGC5ZbqJ4ic9vjTzWt5dDEb+ktwAvE=
Subject key identifier:   2E:C9:21:B0:B7:48:37:45:21:13:D4:89:5C:1B:3B:4A:DB:7C:26:E6
Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84
Certificate issuer:       /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84
Certificate serial:       0977
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
Manifest number:          0963
Signing time:             Mon 22 Jun 2026 20:08:10 +0000
Manifest this update:     Mon 22 Jun 2026 20:08:10 +0000
Manifest next update:     Mon 29 Jun 2026 20:08:10 +0000
Files and hashes:         1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: BrEdvZlybW6w3Yfg2S/A4bBRHsEfixzJu2KA2eeYqvY=)
                          2: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: P0LfgNEy7CqKh9pIHhj4qcJ24rvxzx8Qqj45ZPVVKg0=)
                          3: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: ul9W/1RlUrao2bUQHEAmxw4LEk3UxsOyixNynrFr2rQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 20:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2423 (0x977)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84
        Validity
            Not Before: Jun 22 20:08:10 2026 GMT
            Not After : Jun 29 20:08:10 2026 GMT
        Subject: CN=6a39962a-224b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:28:35:01:f1:1b:9c:43:fa:5f:cf:0e:9d:
                    ec:72:2a:9d:ad:a0:5e:e8:29:0f:62:7a:d9:14:70:
                    bd:30:50:55:d8:39:ca:01:0e:2e:98:e1:fe:32:88:
                    b5:13:02:07:53:f1:19:43:78:3c:ca:1d:a6:a6:21:
                    a7:47:28:71:3d:8c:38:96:6c:54:9c:cd:8c:48:bf:
                    90:1b:69:ba:8f:84:ed:2d:20:b9:70:88:d7:d0:9a:
                    09:9d:40:a7:5e:38:e9:41:e4:e9:60:a7:59:c1:71:
                    ab:85:db:28:1c:d5:15:16:a6:87:69:9d:98:93:15:
                    2a:d1:37:c8:22:46:82:cb:11:2c:a9:ee:ad:9b:2c:
                    a6:4b:c3:b0:b6:74:09:0b:3d:f4:b9:c4:cf:08:83:
                    19:95:36:2a:5b:77:ea:8e:11:31:44:0c:9c:93:23:
                    18:3b:cf:ff:87:51:7f:c3:a1:a0:cc:63:1b:26:1e:
                    23:b3:7f:87:b0:bc:f7:15:63:9c:0f:a9:f7:72:27:
                    de:06:a8:6d:0e:70:ac:b9:d9:39:89:54:fd:1f:ce:
                    b0:fa:1c:04:08:e0:b6:52:04:5d:91:a2:86:91:3c:
                    d8:8e:b6:2a:56:5e:5c:a3:02:1a:42:32:ad:a1:22:
                    29:71:fc:c6:ec:16:2d:68:91:38:fa:86:06:15:27:
                    ef:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C9:21:B0:B7:48:37:45:21:13:D4:89:5C:1B:3B:4A:DB:7C:26:E6
            X509v3 Authority Key Identifier:
                keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4d:33:a5:1a:27:37:53:09:4f:ac:a1:bd:8c:92:72:a2:21:
         7e:24:f3:1f:df:3a:59:32:ba:d3:f1:cd:07:71:4b:e2:97:b0:
         19:5b:fb:80:eb:b3:f8:e9:d1:5f:4e:b9:66:66:fd:be:31:38:
         7f:05:de:c4:0d:22:08:bf:01:59:22:20:66:ea:82:01:a9:a6:
         15:18:22:d7:62:70:50:db:4a:29:81:33:79:a2:cd:f8:22:82:
         ae:0d:68:73:27:2e:7e:69:31:9d:60:9b:83:18:bf:e7:5a:a6:
         e8:bb:e4:be:12:f8:08:f4:a9:13:21:0a:0b:99:ce:19:69:c2:
         23:f7:2d:68:66:42:e4:6d:a5:de:46:87:62:32:03:99:29:a1:
         65:e1:54:fb:19:eb:fa:f3:2d:02:bd:54:95:5b:6b:33:98:e1:
         d6:ec:5e:53:df:0e:3e:de:60:4d:68:23:7e:e4:30:b6:7d:2a:
         b1:e0:82:6c:20:6b:e2:27:cf:18:5d:be:3a:d0:b0:0b:00:9f:
         93:9e:77:c1:10:d8:24:72:53:d0:90:15:76:dc:ce:c7:e5:45:
         89:a0:5e:ce:9f:ac:dc:86:26:9c:a3:3d:0b:0c:0c:2f:cf:92:
         b7:92:62:9a:01:ac:83:a9:9a:20:6d:7d:69:48:4f:6c:db:64:
         af:6f:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:29 2026 by rpki-client