Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
File:                     mpXY8Mq1144dbKm5o7JX446MfVs.mft (raw, json)
Hash identifier:          ZwutNwYZO/O4xwVSMcoKkFHao2fsr7oFabqZQUMdPTo=
Subject key identifier:   29:5D:EE:D2:0B:11:59:C1:EC:B0:CD:2E:F9:73:A4:7D:0F:07:4B:84
Authority key identifier: 9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B
Certificate issuer:       /CN=A915CF84/serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
Manifest number:          1A
Signing time:             Mon 01 Jun 2026 09:44:15 +0000
Manifest this update:     Mon 01 Jun 2026 09:44:15 +0000
Manifest next update:     Mon 08 Jun 2026 09:44:15 +0000
Files and hashes:         1: mpXY8Mq1144dbKm5o7JX446MfVs.crl (hash: MkeTXuH8CTYFiSL2/CaB/eJWGFY2i/hEKFr7JiqiMoI=)
                          2: E0D625A23C6A11F183CD979F90833773.roa (hash: qj9IQ2Y4YzDmdOE6yQMu07d0ie+83o7yGutlXtdHDIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl
                          rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CF84, serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B
        Validity
            Not Before: Jun  1 09:44:15 2026 GMT
            Not After : Jun  8 09:44:15 2026 GMT
        Subject: CN=6a1d546f-f168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:d3:99:6d:48:68:f7:f2:63:f8:fa:1c:5b:
                    16:8d:e9:e7:54:01:6f:e8:c3:24:e3:23:63:83:50:
                    38:b8:dc:4b:9f:44:21:64:04:7c:d3:46:74:b4:71:
                    8b:3b:01:19:0d:0c:c0:3f:37:06:59:dd:e5:f9:de:
                    00:33:e3:5a:68:4a:f5:9a:14:fa:77:c0:0f:8b:94:
                    55:3a:ac:2f:e2:a7:e8:2a:a2:77:c4:21:cb:62:26:
                    e9:3f:04:d7:ab:97:c1:b6:e2:03:ac:31:87:64:8f:
                    5d:3d:14:52:0c:55:8d:62:8a:f4:e6:67:f1:4c:8c:
                    73:37:84:43:84:dd:df:f9:4a:c2:59:82:cc:a4:c8:
                    cd:42:bd:87:98:34:f3:a6:6e:39:63:ad:af:e3:cc:
                    4b:3a:24:20:29:80:5b:33:bb:37:0c:48:ae:b4:ca:
                    8c:bc:c9:7c:14:49:56:de:b3:f9:cd:21:58:52:e4:
                    3b:fd:d9:a7:12:fc:15:a6:4b:a7:c1:8e:09:da:b6:
                    cc:1a:20:d9:51:91:eb:2d:e3:dd:cc:80:26:94:87:
                    63:0c:a6:0e:a4:9b:8f:fe:cf:cc:bd:c1:4a:49:80:
                    84:41:a1:7c:51:99:b8:cc:4f:0a:b5:ab:3c:26:69:
                    95:5a:ef:06:75:14:d7:e2:a8:0e:e4:4f:55:6d:80:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5D:EE:D2:0B:11:59:C1:EC:B0:CD:2E:F9:73:A4:7D:0F:07:4B:84
            X509v3 Authority Key Identifier:
                keyid:9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:65:9a:ae:ae:bf:6f:20:b7:10:dd:ed:8f:6f:72:99:7d:33:
         13:82:f1:05:8b:dc:1c:10:48:fe:3f:c2:8b:57:5e:ec:5d:e7:
         7c:e9:6b:ba:5f:07:cb:3b:a8:fe:3c:c5:5e:a7:47:cc:04:6d:
         68:90:24:42:31:8e:23:fc:8a:33:fe:ac:6f:b1:2d:ba:5e:71:
         70:e9:b8:ea:f6:61:9e:97:0f:77:d0:0f:c4:4f:35:78:bd:2c:
         03:d6:45:85:98:48:e3:68:f5:fa:a2:86:9b:93:53:d1:29:54:
         91:a8:a6:ab:1d:9e:ce:c3:2f:78:84:d8:58:16:21:a6:ce:36:
         cc:be:e3:0c:f0:8f:38:a5:d6:d9:cc:87:bf:3d:cb:bf:7f:15:
         45:80:0f:5a:03:14:64:35:5e:a9:b3:e8:45:09:42:4e:ba:e1:
         0c:f3:5e:32:9e:62:e0:d5:af:0a:28:a8:67:6e:0b:b8:a9:e9:
         08:06:5f:ec:00:78:71:eb:95:af:bd:8a:93:13:f5:1a:0d:d3:
         05:68:a9:02:25:1e:57:65:29:43:f6:b2:d1:2c:a1:da:b8:d8:
         46:ac:b0:cd:fa:6d:98:b9:0b:55:dc:5c:65:f2:8d:9e:12:c6:
         e6:8b:42:4f:ec:35:57:9f:44:ef:f5:cb:7b:e0:bf:2e:05:bf:
         d0:b5:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:29 2026 by rpki-client