Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
File:                     CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json)
Hash identifier:          zepslxOM9HayUsGL7CE47ETTAyorpfMwe7oMRyr5h44=
Subject key identifier:   58:66:83:C2:DB:F3:12:B4:58:E1:8A:0A:62:C1:B1:0C:9E:F3:A1:A4
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Certificate issuer:       /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial:       0A26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
Manifest number:          09FA
Signing time:             Mon 22 Jun 2026 19:57:58 +0000
Manifest this update:     Mon 22 Jun 2026 19:57:58 +0000
Manifest next update:     Mon 29 Jun 2026 19:57:58 +0000
Files and hashes:         1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: ByjI8E7b3oXCxtVq26ONsVA4LlRxc7GS0laTAjH6LSo=)
                          2: 4EB8310C43EE11F19AC895DFAD833773.roa (hash: ZZGaP1aMdg0/Z8kpA6IgDd5lfHorn6nSTgSPV8+XGJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
                          rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 19:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598 (0xa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
        Validity
            Not Before: Jun 22 19:57:58 2026 GMT
            Not After : Jun 29 19:57:58 2026 GMT
        Subject: CN=6a3993c6-ae01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:f6:4f:54:7b:26:cf:ea:5f:1d:29:78:09:
                    dc:e4:2c:8f:7f:10:c8:d6:83:86:89:16:4c:f1:5d:
                    0c:3d:15:43:8f:03:10:cf:46:e4:8b:47:b0:59:93:
                    38:b0:1b:04:39:a6:6b:85:0c:91:3b:ea:15:1b:25:
                    f1:62:ff:15:5c:28:4d:a7:45:33:21:67:65:59:4b:
                    5f:6b:0c:2c:f5:2f:c5:af:08:24:85:bc:32:eb:86:
                    85:b0:71:95:2e:63:3b:6c:76:91:58:50:05:fb:99:
                    57:76:37:ed:42:13:84:73:4b:53:b0:99:ad:10:26:
                    12:e0:6d:c1:22:73:4e:3c:98:ec:fd:02:62:61:6e:
                    4b:06:b7:64:47:c5:f5:79:8c:7d:e6:a8:44:8e:46:
                    40:1b:b3:e2:e2:2f:a0:0a:4e:c3:4a:88:55:4e:6c:
                    28:a9:68:66:b6:9b:1b:4c:b6:cf:4f:97:38:97:40:
                    9e:70:11:a1:db:eb:60:ea:ee:2f:b8:be:4e:bf:8d:
                    30:9a:e0:98:59:9a:c7:7c:62:e1:70:78:86:dd:55:
                    45:a5:2d:95:cc:53:1f:b7:b7:3e:fa:c3:f3:2a:b9:
                    c0:55:4c:b8:06:28:48:5f:da:b4:8b:d7:0d:26:f7:
                    fb:20:60:b0:14:2c:97:92:8c:ee:80:ec:1f:d1:25:
                    ae:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:66:83:C2:DB:F3:12:B4:58:E1:8A:0A:62:C1:B1:0C:9E:F3:A1:A4
            X509v3 Authority Key Identifier:
                keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4f:bf:38:2b:bd:64:d5:35:54:10:96:8f:98:46:31:1b:ef:
         09:86:bf:08:9d:d9:09:84:82:99:b3:fa:24:c0:7b:c5:74:47:
         a6:13:5f:1a:47:36:97:05:7d:ea:26:44:80:a6:99:0e:7b:e6:
         a9:93:f7:55:c1:b0:db:a7:47:95:c3:68:1c:ab:76:11:15:b1:
         20:42:ee:9f:56:d8:58:75:ea:3e:ba:39:39:4a:39:49:58:cc:
         0f:02:c4:23:5d:fe:d3:bc:06:9f:53:c1:d9:ee:8d:1a:6d:84:
         a7:d1:19:30:59:c3:e9:a0:d7:7c:74:ee:e4:f9:bb:65:51:24:
         ae:50:0b:4a:78:1f:b8:2d:43:6b:a4:14:b1:79:15:3c:3c:ed:
         95:fd:60:5a:e4:9c:37:51:ed:5f:b6:4e:5d:02:f8:e0:67:07:
         5d:6d:7f:e4:b5:c0:f7:a9:21:d0:1f:da:e2:cb:d6:e4:0a:08:
         d3:99:28:54:4a:19:47:98:07:e3:46:50:a8:40:2b:32:c6:8c:
         3b:cc:2d:38:e2:62:55:da:1d:41:0c:f8:0f:78:08:74:8a:a8:
         3d:39:40:74:7d:57:b5:dc:50:d6:02:07:57:4b:c1:4c:33:0c:
         c9:4e:63:2d:ef:50:a7:5c:d7:0d:3e:58:d0:72:6f:7b:32:66:
         33:96:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:11 2026 by rpki-client