Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
File:                     -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json)
Hash identifier:          j2gSN41A5IRzwk2KhpmqcmrJEyKZgXRTQvmWVE5FsGM=
Subject key identifier:   16:11:47:2D:03:ED:D0:5E:B4:3E:AE:9F:AE:62:8A:A2:3A:EA:F5:88
Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41
Certificate issuer:       /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
Certificate serial:       0C55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
Manifest number:          0C4C
Signing time:             Mon 22 Jun 2026 18:43:09 +0000
Manifest this update:     Mon 22 Jun 2026 18:43:09 +0000
Manifest next update:     Mon 29 Jun 2026 18:43:09 +0000
Files and hashes:         1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: R0Kz+ey0li6iioL9BZYh2q8fNpFCgMZgWYevFqBp6hM=)
                          2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: fKNon6NCgCOGVHkPldMfFkQTkW6jIWPmLvSkFUdw9rQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl
                          rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3157 (0xc55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
        Validity
            Not Before: Jun 22 18:43:09 2026 GMT
            Not After : Jun 29 18:43:09 2026 GMT
        Subject: CN=6a39823d-a279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:d1:97:48:58:f5:b0:d0:df:c3:1d:54:8a:
                    72:b9:20:08:76:6b:cd:e7:01:e6:d4:89:27:ca:1e:
                    f4:12:d6:8b:f0:cd:98:90:0a:70:c9:47:dd:fa:d3:
                    d7:6b:68:00:9b:e4:ad:84:3f:c9:de:96:23:ef:05:
                    d9:af:2c:ef:59:ab:69:70:ac:c9:e7:47:01:d2:c8:
                    40:88:f6:28:b5:8e:bf:48:ff:42:4a:4c:77:85:2f:
                    c3:7a:3b:d9:8b:25:f2:45:ae:28:d6:39:e2:5b:42:
                    28:e8:92:60:a8:c5:d5:2e:91:e4:7d:65:ce:85:de:
                    25:e5:f1:25:0b:50:61:93:a6:ba:ff:ba:0c:f8:ec:
                    28:70:1e:7e:b9:50:4b:dc:24:b2:0d:66:cc:f8:eb:
                    da:84:ee:51:89:9b:29:51:09:35:40:6f:e5:0b:00:
                    72:5b:a8:8b:3a:fe:23:70:70:59:40:91:45:bc:99:
                    10:b3:55:c7:b2:48:7c:a7:aa:3f:c7:fa:c4:d2:d8:
                    b1:3b:aa:b5:6d:a2:a5:30:e8:97:1f:fa:a3:90:57:
                    b6:c1:39:9d:f2:c3:89:8c:14:36:3f:60:78:b0:6d:
                    b7:ca:ee:5a:21:6f:c9:6d:34:f3:94:75:ee:2f:4d:
                    cd:3a:be:fc:49:38:9c:93:c8:3a:de:3b:16:a2:d9:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:11:47:2D:03:ED:D0:5E:B4:3E:AE:9F:AE:62:8A:A2:3A:EA:F5:88
            X509v3 Authority Key Identifier:
                keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:e0:b1:7f:7c:75:89:d2:0e:e2:80:0a:c7:4a:8e:64:3e:a8:
         cf:a8:cf:d9:58:9f:f1:bf:42:6a:6d:84:c8:fa:dc:8e:65:70:
         ea:fc:3a:c2:94:34:b9:12:92:a3:d3:4e:b3:25:a8:59:b3:25:
         72:63:9f:d8:dd:a2:cb:1f:c4:fc:60:89:83:00:32:e4:cb:4b:
         89:cd:1f:d9:ac:1b:9d:d5:84:a3:10:e9:9a:0a:e9:db:6c:40:
         ed:09:3f:3f:5f:58:1f:3a:5e:b1:18:f0:db:bd:9d:be:25:b9:
         1b:a8:6f:b4:17:29:00:7d:83:92:56:56:7a:fe:ad:ea:26:9b:
         0c:0b:e4:4c:01:17:50:b4:d6:9e:33:67:71:dd:c0:8a:f3:fe:
         48:5e:59:cb:34:e1:fa:b3:7c:64:70:7e:38:8e:ab:a8:66:11:
         b0:e3:40:ce:84:a5:d3:17:ff:52:92:54:45:dc:11:71:62:36:
         0c:b5:9a:91:6e:de:a0:e6:6e:1e:f8:a5:a9:8a:77:e0:6d:ac:
         7d:91:67:30:93:17:44:0d:76:d9:7a:0f:bc:77:1e:a8:44:5a:
         60:6c:0e:da:19:e3:28:ba:90:af:03:07:3e:33:b3:fe:dd:97:
         63:56:04:46:8c:13:2e:84:26:24:18:74:ba:ed:1b:15:87:65:
         16:9a:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:59 2026 by rpki-client