Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
File:                     lDrZvGF3q4wvjoExwUpUZexClU8.mft (raw, json)
Hash identifier:          WwyPoMUjCXeRHi1gN+S1VgY5YYg9O9R5ZMASDWWoJUA=
Subject key identifier:   62:0D:00:CB:D2:0B:21:D1:65:65:6D:97:7F:90:A3:16:9C:A2:9B:0F
Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
Certificate issuer:       /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
Manifest number:          01F6
Signing time:             Thu 04 Jun 2026 18:33:32 +0000
Manifest this update:     Thu 04 Jun 2026 18:33:31 +0000
Manifest next update:     Thu 11 Jun 2026 18:33:31 +0000
Files and hashes:         1: lDrZvGF3q4wvjoExwUpUZexClU8.crl (hash: 37E6vvQwuj7EbYjrvsNYYBh6RNDDFt2kTyGAmI78huw=)
                          2: 203DB338782111EEAFDDBD86C4F9AE02.roa (hash: tSRP0mSyeCxo4ldlJd0x8udwsUTZBLiY2tDABXr5M1I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
                          rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
        Validity
            Not Before: Jun  4 18:33:31 2026 GMT
            Not After : Jun 11 18:33:31 2026 GMT
        Subject: CN=6a21c4fc-d80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:a1:a8:97:cf:f8:07:ac:74:74:81:b7:2a:
                    50:73:c7:d9:e8:76:92:02:9d:43:77:40:3d:6d:a0:
                    cf:de:49:56:06:4a:f5:cf:8f:98:0b:77:f1:27:f5:
                    b3:af:d8:8a:f7:f2:05:3a:6a:92:2d:52:3b:fe:ed:
                    52:8a:d9:04:d3:88:87:00:ff:4e:b4:5b:cc:64:f9:
                    28:13:87:96:0b:7a:31:ff:9b:bb:35:16:76:30:d2:
                    ac:34:ee:db:21:4b:58:b8:6b:83:6b:1a:bc:da:3d:
                    e0:3d:cf:a3:60:53:f8:d5:ba:93:d7:6e:bf:5b:b4:
                    95:e9:b3:44:ab:22:41:4e:e2:a1:9a:03:12:43:94:
                    62:c8:4a:19:21:09:af:1c:75:f9:e6:dc:0b:da:69:
                    03:06:f6:da:41:9a:a3:62:6a:fe:e3:64:18:18:48:
                    c1:a7:d5:a2:f3:2c:2d:54:3f:46:ba:ac:ef:d0:55:
                    bf:57:c0:35:15:ef:d5:7c:91:2b:09:6a:ba:8b:2f:
                    7f:5a:ba:e6:1e:f8:d1:31:a9:8a:44:79:4d:c4:4a:
                    f2:99:4b:40:d8:c0:6e:c8:da:a3:6f:33:53:9d:33:
                    63:47:e5:a4:33:c0:dd:cd:54:6b:5e:58:95:95:41:
                    b9:d3:b6:c6:69:f8:00:22:f7:3c:0a:a8:56:1b:93:
                    b4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0D:00:CB:D2:0B:21:D1:65:65:6D:97:7F:90:A3:16:9C:A2:9B:0F
            X509v3 Authority Key Identifier:
                keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:83:50:cb:1b:63:3f:4d:95:a5:87:7b:67:2b:c2:d9:ec:c3:
         17:e2:5e:fc:91:7b:89:1b:93:b7:c0:3d:2a:66:c9:ea:3f:b1:
         7d:05:d9:73:db:d5:8c:14:57:28:75:6b:41:f8:d8:3e:df:a1:
         81:b9:8c:70:bc:3c:46:1e:86:53:7d:d1:cc:c8:65:38:44:c2:
         83:28:7f:a3:25:8e:39:33:c6:2c:8c:0a:b9:4a:b6:c8:fc:17:
         8d:d4:0c:48:64:85:6c:8c:be:7e:73:10:77:7f:82:66:aa:d6:
         93:a2:86:9d:4d:2d:2c:92:98:95:75:2d:29:40:00:3e:30:9d:
         0c:89:65:91:dd:f7:26:69:ab:25:f8:c7:c2:7b:a0:9f:3c:7a:
         0d:0c:74:e8:de:6a:96:53:aa:35:58:60:98:13:f8:6e:dc:91:
         14:51:90:95:e0:5a:1a:b6:95:8c:0a:95:fa:71:3b:cc:60:f9:
         60:3e:f9:fd:3a:f0:ea:a1:f0:ef:72:0f:9a:0f:11:56:b0:ea:
         9e:5f:c6:73:f9:a8:b0:76:d5:5f:77:d0:88:99:4f:7b:87:98:
         f4:7a:96:b2:c2:a9:79:da:8c:9e:30:4c:3b:26:96:85:86:de:
         de:b4:0e:52:92:11:4f:61:df:1c:27:40:c6:72:bd:fe:f8:62:
         cc:80:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:54:59 2026 by rpki-client