Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
File:                     sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json)
Hash identifier:          K0sw4E09D7wAXnpj3RXQ/KhNkEHaFACEsAY+NnbE3dQ=
Subject key identifier:   C4:68:00:AF:2F:4E:E9:3E:D6:ED:2B:DB:D7:A7:51:AB:35:C9:82:BD
Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
Certificate issuer:       /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
Manifest number:          E5
Signing time:             Mon 01 Jun 2026 07:18:26 +0000
Manifest this update:     Mon 01 Jun 2026 07:18:25 +0000
Manifest next update:     Mon 08 Jun 2026 07:18:25 +0000
Files and hashes:         1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: PrG8h8SFXSLcakheSCTgMe8XXr27/Zy7ckAQqna/qOs=)
                          2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: 6P2hBxUHzqjP2+oG6i740uJYxBeonxP8fzF0Md+3yP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
                          rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
        Validity
            Not Before: Jun  1 07:18:25 2026 GMT
            Not After : Jun  8 07:18:25 2026 GMT
        Subject: CN=6a1d3242-5ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:e9:99:a3:86:71:08:ca:fc:b8:53:4d:be:
                    a8:d0:d3:8b:fe:70:31:cd:8c:21:5a:18:38:29:06:
                    f5:7e:36:1f:f1:80:54:77:b7:4e:ff:31:3d:c7:0c:
                    76:19:40:80:96:48:6c:98:37:0e:98:25:0e:b2:d7:
                    da:1e:15:7a:99:44:8f:2a:43:17:8c:78:94:f3:34:
                    ed:ab:b7:b7:ea:7b:c7:d0:b9:86:95:d5:4a:f5:43:
                    e7:00:ac:72:fe:a6:5e:f9:8e:3c:de:14:6b:1e:9e:
                    25:35:42:40:2d:2c:ff:a1:4b:8c:39:88:95:d2:94:
                    29:e1:46:de:4b:e0:7a:eb:22:07:82:23:ac:b4:40:
                    af:f9:12:9a:75:64:3e:6f:2d:47:47:fc:94:48:f3:
                    f9:5f:75:5f:1b:0b:24:34:9d:bb:f6:d4:dd:71:2f:
                    80:21:b3:af:8d:21:e4:fe:5b:53:66:74:dd:ff:74:
                    39:4c:51:62:97:4c:c8:73:56:fd:4f:c4:06:3d:f2:
                    84:e5:f7:d2:db:c1:07:14:b8:f0:28:ef:f1:90:2b:
                    50:1d:d2:80:20:70:50:7d:0a:fe:7a:55:eb:27:ca:
                    85:4a:a0:50:37:98:a3:70:ef:5f:43:6a:14:e7:be:
                    5f:08:73:75:13:82:41:94:36:6f:8b:ce:f3:52:cf:
                    2f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:68:00:AF:2F:4E:E9:3E:D6:ED:2B:DB:D7:A7:51:AB:35:C9:82:BD
            X509v3 Authority Key Identifier:
                keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:a0:3f:18:12:f5:37:e6:35:5a:6a:ec:71:2a:95:27:cd:
         e7:1c:57:11:8a:90:5a:ba:0e:b6:46:bb:25:07:31:f3:ee:01:
         0b:c5:c0:75:99:98:5b:82:d9:b1:8e:c5:1e:79:ed:c8:e6:c5:
         9e:f5:b1:47:65:87:3d:46:85:40:bb:13:a2:d6:e7:31:64:10:
         19:34:ac:93:d0:36:84:68:d4:7f:05:6d:66:d2:d0:42:ad:e1:
         ed:60:6e:49:0a:99:29:7f:c6:b5:7f:23:37:68:85:9e:8f:2c:
         94:bc:92:77:fc:2d:cd:13:68:65:09:58:99:8b:fa:f3:5d:2d:
         85:5e:62:16:7a:91:ea:54:ea:a6:d0:53:b6:25:01:1b:1c:4a:
         5d:a5:d5:3b:98:f3:1e:70:1c:48:a5:5f:f4:9c:59:d7:21:0c:
         08:ae:17:b9:82:e1:21:8a:d3:ef:f2:de:fd:3e:8b:dc:5f:a3:
         db:42:81:7d:81:85:ae:1c:a8:c8:36:b5:59:61:60:81:91:e8:
         8e:57:ab:2b:c5:8d:10:81:93:d1:af:f3:46:76:8d:cf:bc:8c:
         2c:35:8a:46:3d:b1:56:09:ff:2c:d2:43:97:81:2c:90:5d:a2:
         9e:7a:94:42:5b:bf:dd:05:46:0f:8d:43:c2:62:d7:02:78:4a:
         65:40:59:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:17 2026 by rpki-client