Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft
File:                     Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft (raw, json)
Hash identifier:          2qp6wx9U/0zAXzXoEewHUfnYPUBAnmBeIyOoc7nQbps=
Subject key identifier:   4D:48:B3:F2:7D:C0:05:32:9F:35:AE:F4:37:C5:A9:A0:1C:C2:F6:CD
Authority key identifier: 26:8E:59:6E:29:1A:7F:AF:51:0D:1B:F7:28:48:DF:B0:86:D5:C9:41
Certificate issuer:       /CN=A914860F/serialNumber=268E596E291A7FAF510D1BF72848DFB086D5C941
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jo5Zbikaf69RDRv3KEjfsIbVyUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft
Manifest number:          25
Signing time:             Tue 23 Jun 2026 09:03:37 +0000
Manifest this update:     Tue 23 Jun 2026 09:03:36 +0000
Manifest next update:     Tue 30 Jun 2026 09:03:36 +0000
Files and hashes:         1: Jo5Zbikaf69RDRv3KEjfsIbVyUE.crl (hash: cTWtUUg3zH8lic+ALCilPS8el1jR9SjZbkMjUiY056g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.crl
                          rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jo5Zbikaf69RDRv3KEjfsIbVyUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 09:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914860F, serialNumber=268E596E291A7FAF510D1BF72848DFB086D5C941
        Validity
            Not Before: Jun 23 09:03:36 2026 GMT
            Not After : Jun 30 09:03:36 2026 GMT
        Subject: CN=6a3a4be9-1eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:81:f4:ed:98:f3:99:b4:be:06:a7:63:a9:
                    1f:63:4e:cb:df:15:82:a8:56:01:52:79:89:2e:be:
                    66:a0:a0:5d:e3:34:78:c5:44:cd:aa:fd:cc:db:a9:
                    2c:a4:8c:eb:24:54:f2:aa:33:8c:f5:71:16:20:e8:
                    29:9c:44:96:46:c8:c8:1a:cd:5c:6b:dc:b2:01:79:
                    da:66:51:9a:38:a4:f3:09:76:ed:df:23:54:fc:73:
                    fe:b2:0b:de:8c:a4:aa:e8:d7:02:12:d1:8c:de:cc:
                    e5:96:b2:20:ab:c2:52:26:37:2e:b4:ca:70:45:fc:
                    5b:50:c4:9f:cb:58:9c:b7:8c:e6:e4:b1:71:78:80:
                    09:22:66:bb:cb:71:35:f2:35:b7:fa:1a:12:1b:38:
                    4a:6b:f1:c2:23:47:91:96:2a:15:3c:b9:e3:86:73:
                    5b:91:ac:e5:0a:d1:83:14:94:b9:47:f3:3b:b0:3d:
                    10:c2:ce:ac:cb:9c:a6:fe:07:f7:9a:6c:15:7a:11:
                    26:3d:de:ef:4d:83:96:c2:80:97:72:a5:b5:5c:8c:
                    44:68:4a:d3:cf:4e:2d:0c:d0:63:0e:a9:42:7e:c9:
                    66:1e:c0:52:a8:9f:30:d4:89:af:5a:00:68:82:85:
                    2a:3f:98:b1:99:dd:8b:59:eb:c4:3a:e2:87:16:db:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:B3:F2:7D:C0:05:32:9F:35:AE:F4:37:C5:A9:A0:1C:C2:F6:CD
            X509v3 Authority Key Identifier:
                keyid:26:8E:59:6E:29:1A:7F:AF:51:0D:1B:F7:28:48:DF:B0:86:D5:C9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jo5Zbikaf69RDRv3KEjfsIbVyUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d4:cb:17:67:09:fb:63:39:00:3c:e3:e8:a0:c9:41:a6:0d:
         ec:03:b2:70:d4:6a:77:ea:d1:df:5f:04:11:17:c4:e1:d3:b9:
         b5:52:9c:93:b3:70:de:7b:88:c8:eb:15:f0:4d:6a:5a:13:c9:
         cb:ad:29:c0:3a:51:eb:10:24:78:f1:b1:1b:2b:c7:09:a4:43:
         81:f5:d1:e1:9d:cd:8e:8d:5f:5f:44:e1:db:f1:1e:47:33:90:
         6a:71:e4:25:90:0c:27:db:29:d7:a7:89:b8:49:00:52:30:15:
         a7:cb:4c:72:9e:af:c4:0d:68:4c:73:ae:dd:45:ee:00:10:c2:
         14:31:b3:d2:c9:44:ad:19:26:f0:ed:7d:0f:b8:23:b5:8d:70:
         07:a1:1e:2b:9d:dd:c0:50:f9:97:31:62:70:48:33:98:cb:0f:
         88:b0:51:bb:56:63:94:1b:1b:91:e2:b9:27:63:7f:a4:6b:e3:
         75:1c:e0:c2:8f:9a:67:bd:f8:9b:84:67:54:80:b4:af:22:9e:
         97:90:45:e7:44:3e:89:d4:77:a2:02:16:40:8b:0e:b6:78:0a:
         cc:47:af:01:9c:cf:1b:33:00:30:38:e9:26:46:c7:e8:40:af:
         71:2c:7f:7f:62:f4:b0:be:7d:72:68:55:11:9d:08:05:83:9b:
         a1:b5:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:10:43 2026 by rpki-client