Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
File:                     b09GjkMIsA0N9f6shChm1U539dM.mft (raw, json)
Hash identifier:          L5fctggARzke3gHd6WNVdobnziKeM81Ow/89L/F+nec=
Subject key identifier:   F7:D6:AE:5A:81:54:BA:BE:A1:C2:E0:BF:3C:D1:46:47:AB:C8:84:53
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Certificate issuer:       /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial:       0D47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
Manifest number:          0D27
Signing time:             Mon 22 Jun 2026 18:14:23 +0000
Manifest this update:     Mon 22 Jun 2026 18:14:23 +0000
Manifest next update:     Mon 29 Jun 2026 18:14:23 +0000
Files and hashes:         1: b09GjkMIsA0N9f6shChm1U539dM.crl (hash: YCt9dsaf1BH5+hU54aPCWHCpslnEn9+9slnqUqq3JdA=)
                          2: 199C4122356411F199EC77DFBA833773.roa (hash: jLm/t28O9sTMUghv6g0V6EwX1BiyfqhzThDCVYjStnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
                          rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3399 (0xd47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D1A2, serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
        Validity
            Not Before: Jun 22 18:14:23 2026 GMT
            Not After : Jun 29 18:14:23 2026 GMT
        Subject: CN=6a397b7f-4614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:f1:09:63:d8:58:57:e8:3a:3a:b0:b2:32:
                    b5:25:88:39:5b:90:42:96:19:df:4a:84:d7:47:c7:
                    e0:44:fc:b7:92:71:7e:87:1b:b8:b8:c1:d0:8a:08:
                    13:23:87:8d:3e:2a:4b:96:f7:a2:d4:e9:d5:ff:20:
                    19:28:cc:94:f1:13:47:78:f6:8f:12:dc:cc:09:83:
                    60:4c:12:e2:a7:85:a4:9a:79:3c:aa:d7:65:15:2c:
                    27:3b:04:12:22:78:cb:97:ec:c9:c1:6b:53:ca:41:
                    4d:21:4f:9d:07:8f:11:d1:b0:07:cd:4e:96:f0:d6:
                    ce:f0:ae:dd:03:4d:e2:da:65:62:88:89:fb:f2:d0:
                    88:da:7e:98:23:54:02:4a:71:68:12:45:98:6c:fb:
                    53:d8:2c:48:94:53:01:fc:10:a6:46:63:7f:30:e9:
                    72:9a:63:7b:46:62:4f:c1:54:72:34:34:3e:c8:3b:
                    e2:58:04:1b:16:6c:9b:14:a2:66:2a:a5:72:9f:dc:
                    8b:b5:de:b0:53:a8:4d:21:28:ad:92:19:df:59:48:
                    35:a5:14:52:bf:76:80:1d:98:48:5f:d1:99:89:45:
                    61:44:8f:5f:47:a2:b5:95:a2:69:67:cd:9e:ee:04:
                    a9:ae:4d:7f:02:ce:b1:25:4e:1e:62:3b:a2:fd:29:
                    59:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D6:AE:5A:81:54:BA:BE:A1:C2:E0:BF:3C:D1:46:47:AB:C8:84:53
            X509v3 Authority Key Identifier:
                keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:68:33:d9:ab:67:7b:84:27:fb:57:3b:78:2e:05:9a:2a:ae:
         f0:12:6b:96:bb:ac:07:cc:c0:b2:a0:a8:6d:5f:29:13:cc:5f:
         41:08:63:b8:34:d5:d5:61:f6:5b:5d:66:c3:a1:1e:07:c2:e6:
         b0:52:18:7e:56:c7:bb:74:bb:97:eb:cb:50:8f:9d:9c:08:a0:
         fd:0d:30:13:52:a9:e7:36:d9:21:46:2d:74:98:59:a9:d3:6c:
         df:ff:e5:b7:d3:c9:43:e4:8f:fc:ac:77:0e:30:07:f0:e0:52:
         a5:f7:4d:1b:a5:32:cd:d8:1e:f8:5a:92:4f:02:3d:b3:27:36:
         33:67:80:b3:a5:46:7b:19:6d:c4:ce:a8:f3:e6:25:31:26:13:
         06:a4:5d:19:dd:11:f4:2c:37:5e:27:5e:03:d4:8e:6d:f6:c8:
         2d:d6:93:0b:c8:1a:e0:cf:ca:6c:15:0a:da:b6:db:a9:f6:20:
         61:eb:12:77:21:4b:15:a6:33:31:93:90:a3:ce:41:91:37:81:
         a4:96:3e:78:2e:fa:e2:3f:8b:65:d1:ec:1b:37:95:3d:8c:4d:
         31:15:3d:8a:0e:ed:8e:a2:7e:34:ca:a9:23:03:6b:54:14:1e:
         54:ec:06:67:39:57:89:bd:dc:a5:aa:6d:6d:fd:eb:63:8f:a1:
         dd:0a:03:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:23 2026 by rpki-client