Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
File:                     4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json)
Hash identifier:          UlDPPYgnHrZrPXfyKozcbfwVbT3U7PmeMVfyPsZlSOg=
Subject key identifier:   6C:CE:EE:CF:90:7E:7A:45:32:7B:A7:B6:08:BA:B2:BF:18:AB:20:14
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Certificate issuer:       /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial:       063C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
Manifest number:          0616
Signing time:             Tue 02 Jun 2026 22:56:46 +0000
Manifest this update:     Tue 02 Jun 2026 22:56:46 +0000
Manifest next update:     Tue 09 Jun 2026 22:56:46 +0000
Files and hashes:         1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: J/lWTkO2xlFGlliSm+SAjYzwjQBByHVbEHkj04j7lgQ=)
                          2: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: TBXfHIsLBP1r3Og38/Zn+SGz/Jmiive4bvBF8Q5gW6Q=)
                          3: 6D655B7CAF4F11F0A741B236C4F9AE02.roa (hash: 2NIJ+RBIKW5iZiN3H8lcUO6ml0C3TxyzXOWCEv8U7M8=)
                          4: F650791EF01411ED9210D060C4F9AE02.roa (hash: AWc+boEStiOUVPv+8IUahYFAvtg7A+MrQdgGzHZN4Yg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
                          rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 22:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
        Validity
            Not Before: Jun  2 22:56:46 2026 GMT
            Not After : Jun  9 22:56:46 2026 GMT
        Subject: CN=6a1f5fae-437b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c2:9e:74:da:dc:3f:33:87:6f:3a:39:37:a7:
                    50:65:9c:ed:60:9b:39:46:c1:c0:1d:41:7d:98:71:
                    ee:0b:55:88:3a:18:76:0d:38:fb:05:56:d5:4d:86:
                    3a:84:17:bb:00:4c:89:e0:0d:f9:07:61:e9:fc:73:
                    51:4a:05:7b:a6:61:da:8b:e3:2d:07:4b:8c:58:b4:
                    15:da:25:d0:a3:b2:1f:fd:dd:c9:02:39:a3:4f:cf:
                    76:93:7a:1d:4b:8e:7b:4c:f7:d6:44:da:d3:96:fc:
                    4d:a6:23:5f:3b:8c:b6:d2:e1:58:4b:5a:c9:40:f1:
                    f4:e0:e3:f1:0a:28:b2:2d:99:9c:81:c7:42:e9:d1:
                    8a:88:c3:fa:12:a2:87:5d:34:c5:3a:59:da:e1:da:
                    af:a4:9e:52:59:fa:c1:48:f4:8f:e8:1a:06:3e:ef:
                    be:02:60:c9:3f:77:02:44:d2:94:05:9f:5d:03:17:
                    ac:2e:3c:4f:5a:93:5c:6f:7e:e5:31:60:50:3b:06:
                    00:81:13:2b:af:ba:b0:14:2b:04:a5:60:67:f6:1d:
                    dd:60:58:6e:57:d6:39:75:93:c3:34:1f:ff:05:90:
                    4e:5f:6f:2a:97:b9:18:cd:05:af:13:21:e8:6b:9b:
                    ab:59:00:94:36:c0:24:9f:b5:32:e1:a4:58:74:52:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CE:EE:CF:90:7E:7A:45:32:7B:A7:B6:08:BA:B2:BF:18:AB:20:14
            X509v3 Authority Key Identifier:
                keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d4:13:72:ac:9e:c8:e2:e2:25:19:29:f6:f6:20:5f:56:e5:
         24:a3:6c:62:77:c6:1c:9e:0a:df:eb:21:f0:fc:8f:b4:4b:3b:
         bf:cb:d1:9e:87:42:0f:3e:99:ed:a6:ce:00:42:30:1f:17:9b:
         59:b4:ad:b9:40:65:74:6b:ba:7e:55:34:ee:a0:37:3e:f8:bc:
         78:5e:25:02:7c:6f:59:5a:bf:b7:e9:f3:62:9b:69:0e:51:e8:
         aa:f2:55:c2:d0:fb:39:b2:1a:e2:57:05:24:52:b3:65:42:bd:
         71:96:93:d1:f2:53:f3:eb:a5:0d:c6:d8:6f:41:c3:df:97:81:
         f9:58:61:c0:bc:25:72:16:a2:84:a9:62:00:12:bb:5c:1a:74:
         63:3b:b5:88:35:da:75:79:7f:09:c2:13:bb:75:a6:58:29:3a:
         68:67:65:8d:f4:11:eb:0b:43:a5:07:f3:a1:88:d7:62:35:19:
         ba:73:be:83:3a:a0:90:70:d7:c9:9a:17:51:b6:9c:67:bc:31:
         0b:d5:70:81:32:61:95:e6:7e:05:93:15:c8:da:1c:0d:79:b7:
         f6:91:19:bb:3c:ff:f0:ac:4e:bd:dd:af:41:40:86:d9:9a:06:
         a1:d3:3b:5d:32:9a:02:09:ee:0c:81:dc:2d:32:d2:2e:9c:56:
         a8:ff:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:20:26 2026 by rpki-client