Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
File:                     1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json)
Hash identifier:          dr+w+GYV7cMxBTyNCLOg6fN965sPRTpIpMaY8L63P3U=
Subject key identifier:   82:FD:DF:1C:7E:DE:22:75:6E:9E:FE:00:B7:CC:18:AA:2F:36:B5:D1
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Certificate issuer:       /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial:       0811
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
Manifest number:          07F6
Signing time:             Mon 22 Jun 2026 21:23:01 +0000
Manifest this update:     Mon 22 Jun 2026 21:23:00 +0000
Manifest next update:     Mon 29 Jun 2026 21:23:00 +0000
Files and hashes:         1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: +6fydBH9OIYBz+OitSjCzwPrgCYyltj6TAIECME1YRA=)
                          2: A156AB48195E11F0A64EF837C4F9AE02.roa (hash: 4itdgnokjreqGm34fiN0BjbU5Y5cTecgH1DKcBRHiBU=)
                          3: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: /XDkwKIyB4rNulgFvMOv5/7NFn8IGhU7PA58aFqz6PU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
                          rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 21:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065 (0x811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
        Validity
            Not Before: Jun 22 21:23:00 2026 GMT
            Not After : Jun 29 21:23:00 2026 GMT
        Subject: CN=6a39a7b5-93b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:95:b6:fc:f3:d7:c9:9e:15:82:73:25:32:
                    cd:4b:07:70:e5:da:7c:ce:4f:56:91:ab:fb:3b:9b:
                    f6:38:2c:a7:b4:fe:92:8d:bd:77:e0:19:a4:62:f1:
                    ae:97:24:40:9d:d4:e5:ab:e7:4e:45:3e:65:a9:5a:
                    03:cd:11:e8:fa:00:67:a1:d7:5e:60:37:1c:92:08:
                    5e:13:56:2d:59:65:49:2f:8f:fa:34:cf:3e:e1:7f:
                    fc:04:4f:54:29:f1:12:28:03:a9:34:b5:e3:5f:6d:
                    33:0c:22:49:b6:4d:a7:43:cc:6e:b1:4e:94:a5:a4:
                    af:86:60:ec:12:1a:0e:ee:90:83:7c:34:23:04:a5:
                    e8:86:9d:97:e3:b0:90:2e:9e:65:89:f7:34:0c:09:
                    e7:f3:a4:94:99:68:66:69:04:33:a2:70:33:55:5a:
                    1d:bf:fa:f3:ed:71:5c:4c:37:ca:5a:ab:33:bf:0b:
                    70:e1:fb:96:a2:d8:44:b7:14:9d:95:5f:be:9e:eb:
                    80:52:c5:d3:04:28:88:cf:00:79:9c:8f:74:a0:39:
                    14:df:56:6e:af:f9:8c:82:47:3e:49:f1:4a:8c:71:
                    33:de:63:ae:06:1b:61:28:35:46:ed:93:2d:06:64:
                    98:4c:4a:c1:4d:5b:5c:95:5a:93:5b:fd:f5:d9:05:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FD:DF:1C:7E:DE:22:75:6E:9E:FE:00:B7:CC:18:AA:2F:36:B5:D1
            X509v3 Authority Key Identifier:
                keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9a:30:00:27:e4:c3:c5:55:49:ed:b7:d8:77:72:36:52:3a:
         83:46:60:f2:29:46:89:ed:ff:f5:95:ca:85:9b:0f:90:a9:89:
         0b:7e:95:9d:13:0c:b4:5b:6d:91:4f:dc:ec:eb:5d:2a:f9:2a:
         44:3e:e7:16:ae:ab:da:1f:48:99:e5:4a:ee:ae:34:1c:61:b9:
         a4:c3:e8:8c:e7:66:c7:cc:26:ac:51:a4:68:56:3a:26:c1:f6:
         97:d3:04:65:8a:0a:5c:14:18:34:d8:ea:46:ce:42:6c:05:e5:
         e7:c0:df:4d:2b:f3:65:c6:9c:1a:61:a4:3d:3e:46:80:5d:6c:
         82:64:51:71:5b:a0:87:85:d7:f6:c8:da:4c:6c:26:d2:84:87:
         f9:94:69:6f:bc:47:f3:10:3d:38:4c:be:f3:f2:e5:f0:96:f5:
         10:9d:00:c2:ae:a0:25:f5:aa:bb:53:1a:de:9d:42:66:7c:ab:
         2b:c3:65:1d:c3:39:27:8a:1e:f4:36:07:b4:dd:a7:99:55:dc:
         08:93:8e:db:20:e8:06:2b:c5:88:53:e7:1d:6f:f0:28:33:56:
         ea:f1:11:c2:22:f4:4b:9d:d9:9d:cc:36:0f:2e:e5:a1:17:93:
         b6:35:02:cb:33:79:5f:c4:a2:41:92:eb:1e:28:56:5d:75:df:
         03:4c:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:06 2026 by rpki-client