Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
File:                     P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json)
Hash identifier:          qL+Scudnhg6BCrmYJQKbepsifnf5XNe8mwVVlTKFGIk=
Subject key identifier:   0C:0B:CE:C8:1F:25:B2:36:67:11:C5:7B:DD:65:AC:4E:64:45:29:CF
Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8
Certificate issuer:       /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
Certificate serial:       06B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
Manifest number:          06AA
Signing time:             Sat 04 Jul 2026 22:39:50 +0000
Manifest this update:     Sat 04 Jul 2026 22:39:50 +0000
Manifest next update:     Sat 11 Jul 2026 22:39:50 +0000
Files and hashes:         1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: +2kl8jc1YOvMxgqW+CXpA0xgbKjvxhDyqYA/MNC2jKU=)
                          2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: 5KO2IAETTukFZk8M5PmVdnci+vv5do2kLW+1g1Vd9/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl
                          rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 22:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1713 (0x6b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
        Validity
            Not Before: Jul  4 22:39:50 2026 GMT
            Not After : Jul 11 22:39:50 2026 GMT
        Subject: CN=6a498bb6-7072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:75:41:64:a3:b8:6e:06:37:90:e8:91:d2:b2:
                    02:70:46:e2:a6:b4:ef:83:cb:49:7f:ab:df:87:90:
                    ff:48:ce:d0:47:94:82:b4:7a:83:89:f1:33:cf:d8:
                    64:94:7e:d4:a7:89:41:a1:58:e5:3c:59:e8:6b:f4:
                    2d:05:f3:72:b7:ae:42:ce:50:16:d2:84:36:07:15:
                    ed:22:93:51:e3:6d:3b:c9:9d:f1:5d:c7:57:3d:51:
                    ea:75:94:47:02:9d:7c:f1:8b:30:4c:14:44:57:a9:
                    b9:df:24:65:6c:63:40:ce:a1:b1:61:7c:ff:01:96:
                    10:01:71:54:d7:bc:b0:17:38:9e:03:1b:ab:37:bd:
                    4d:e6:e1:60:13:cc:a4:9b:a7:6d:9a:b7:c6:7b:2b:
                    e9:16:95:54:95:3f:c5:98:fe:4c:d9:0d:cc:ac:ac:
                    5f:85:cc:bf:19:89:ce:c2:ac:1f:12:76:b4:00:09:
                    28:d4:97:87:28:84:f1:2e:bb:be:5d:fe:4d:2c:67:
                    6b:d5:41:d1:e0:9b:a1:15:53:25:00:d1:7c:71:da:
                    04:04:d9:ba:fe:83:f6:20:35:5e:98:0f:69:00:df:
                    8a:9b:e4:4b:9b:40:2e:2e:75:a8:d7:d4:84:50:3a:
                    dd:b4:2e:af:ee:a1:1f:43:64:48:52:88:48:3d:fe:
                    3f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0B:CE:C8:1F:25:B2:36:67:11:C5:7B:DD:65:AC:4E:64:45:29:CF
            X509v3 Authority Key Identifier:
                keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e1:ff:07:3f:d5:7d:0d:23:e7:dc:b1:f8:07:09:04:78:c7:
         21:35:47:e6:a2:2b:9a:8c:27:29:ae:34:ee:c3:71:5d:c7:67:
         84:09:7e:cc:1c:99:87:e5:8c:bd:05:57:a2:46:84:ff:bb:0e:
         08:a1:ce:60:a7:ba:bf:eb:20:39:3b:61:b5:da:bc:1e:a2:c3:
         0b:f1:f0:fd:8c:a0:06:9a:8d:62:cf:ac:fd:eb:7f:51:cd:c3:
         87:18:36:7d:ab:9e:42:16:57:3b:9a:45:26:43:5b:22:ce:af:
         88:68:bf:30:34:b1:a7:22:f8:8d:52:46:14:be:16:3a:6b:22:
         84:23:f9:a9:3f:fc:cf:80:34:bc:37:30:b1:f8:16:4b:90:52:
         81:66:bd:fd:b1:a1:14:37:84:e7:28:cd:c1:a6:c0:cb:22:19:
         7a:e1:2e:36:14:fb:8b:52:8f:d0:5b:ff:58:09:c7:72:f2:9f:
         48:2a:3e:3a:c0:e0:30:23:87:7e:f8:25:b0:70:8f:aa:19:a1:
         ed:12:84:cc:99:bf:27:c3:b7:13:b2:27:b3:e7:cc:71:d6:ac:
         55:0f:52:70:0b:8e:8c:ea:92:4d:ed:15:a9:1d:0f:61:ce:c4:
         2c:25:c5:da:18:05:55:a0:8a:4a:4b:42:4a:d8:90:d8:06:e7:
         35:a7:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:48:39 2026 by rpki-client