Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
File:                     F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json)
Hash identifier:          VltYZRNDGa7Tqn0ZFb2dxVR5LEJyE+i5nf6lMG7lqEg=
Subject key identifier:   F2:06:13:30:A3:8D:76:2E:C9:BA:F2:33:48:E6:7C:A1:4D:DD:C6:57
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Certificate issuer:       /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
Manifest number:          9A
Signing time:             Tue 02 Jun 2026 16:24:05 +0000
Manifest this update:     Tue 02 Jun 2026 16:24:05 +0000
Manifest next update:     Tue 09 Jun 2026 16:24:05 +0000
Files and hashes:         1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: 4RFOjISt0HoQ/l8MajouXKOzWn430Zg+JIt+54Rn4sw=)
                          2: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: Rt1fqxpDUHKbQnEZeGSolrH7j72JJeAt6X3959FalwY=)
                          3: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: HxueVyeG48TlpzJ0pvXXuxMket+vhTgEYarRY925CZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 16:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
        Validity
            Not Before: Jun  2 16:24:05 2026 GMT
            Not After : Jun  9 16:24:05 2026 GMT
        Subject: CN=6a1f03a5-aa4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:d9:80:51:cd:3a:6b:b7:9a:22:f2:fd:85:
                    fb:d3:f9:0c:48:64:a3:90:c0:69:99:7a:80:39:8c:
                    02:14:9d:8d:f5:8b:22:64:30:4b:56:62:58:bf:fe:
                    7b:40:32:52:27:60:97:6c:15:c0:aa:ca:c6:3a:a6:
                    a6:76:29:2e:e2:cb:11:c1:1e:69:77:5f:b3:87:49:
                    11:f2:8c:c8:c4:37:68:2f:fe:d1:c9:2b:a9:9a:7e:
                    04:29:81:13:32:db:5d:62:04:71:4c:03:0a:05:1c:
                    0e:2f:4a:f7:69:26:1c:28:2b:e3:fa:ed:89:bc:5e:
                    dc:29:6e:ca:5c:67:2f:c2:23:05:63:f9:2a:78:e9:
                    b4:7c:30:37:d3:95:d4:84:f4:79:1f:d1:7b:63:24:
                    b8:42:38:1b:c5:7c:a1:8f:e1:91:e2:5e:a6:99:6b:
                    8d:65:e8:74:cc:74:40:66:d0:09:9d:a7:3b:19:05:
                    b3:67:8c:bf:1c:10:32:3b:6c:40:cf:67:c2:7e:00:
                    d7:bd:f5:7c:90:61:33:15:71:6c:ac:7a:cf:4f:19:
                    b3:d4:07:94:b1:02:93:0e:2b:e1:ee:ff:73:68:6f:
                    0b:a3:ac:bd:bd:53:63:43:2d:c0:f3:ce:5c:76:ff:
                    17:e7:90:9d:1d:da:ef:25:70:33:75:48:48:cf:7e:
                    39:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:06:13:30:A3:8D:76:2E:C9:BA:F2:33:48:E6:7C:A1:4D:DD:C6:57
            X509v3 Authority Key Identifier:
                keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:45:78:83:76:04:6a:04:58:dc:79:70:56:a9:37:f5:71:
         09:cd:b5:2d:3d:6b:fe:d5:46:e0:ea:00:e0:e6:0c:9b:fc:b4:
         75:76:45:69:5e:5f:3d:9f:44:58:72:3e:b1:e2:d9:e3:ea:7a:
         df:86:c5:ad:0f:39:12:5f:1d:6b:11:8c:57:21:06:f9:9e:01:
         1c:e9:84:8b:7c:22:59:75:4a:9d:74:0d:f5:db:32:82:e3:0d:
         24:b9:5a:9c:25:1b:5b:a7:7a:86:6b:77:e5:e0:bc:51:d7:68:
         b5:8e:33:9c:78:8e:56:7f:9a:09:c1:ea:f8:05:90:ce:d9:17:
         59:c9:21:c0:79:7b:ae:1b:87:3b:85:a2:3a:c6:4f:d6:38:95:
         53:e6:d9:ae:d2:b6:94:23:16:c7:3d:67:14:aa:16:52:88:a1:
         06:97:43:6a:bf:a5:9d:6f:af:8f:9e:bd:62:9d:8a:5f:50:ae:
         18:20:7d:87:21:b4:77:e7:78:e7:ed:34:88:07:3a:72:26:f0:
         d0:1c:64:1d:2b:05:b1:d3:12:40:93:4c:d9:7e:45:21:92:94:
         8e:e8:12:e0:eb:48:50:a7:9e:8e:fa:cc:d5:12:91:af:bd:29:
         af:8b:c0:ea:ad:5b:78:2f:67:ee:f1:5e:9d:9e:ba:8c:9d:8f:
         8a:0f:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:51 2026 by rpki-client