Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
File:                     4dFD2djqAiJMHLDJFey4TuKLWqo.mft (raw, json)
Hash identifier:          Y93P9BX9iRRJr6X6yQz+vjS5TPM3CTPy+Xk1BHVUEWc=
Subject key identifier:   88:37:C4:12:17:64:6A:E7:6A:C3:BA:9D:DC:67:1E:4E:44:38:14:8F
Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
Certificate issuer:       /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
Manifest number:          0252
Signing time:             Mon 01 Jun 2026 03:07:15 +0000
Manifest this update:     Mon 01 Jun 2026 03:07:15 +0000
Manifest next update:     Mon 08 Jun 2026 03:07:15 +0000
Files and hashes:         1: 4dFD2djqAiJMHLDJFey4TuKLWqo.crl (hash: RRpnPT1oWtqa7nEABBTidL3AacSJ4ByVBuN0GFVffdo=)
                          2: 91FAB1ECDA6011ED9BC6175FC4F9AE02.roa (hash: GKQTSqIzwIY4GOth+FkYLT5SOAlB26R/4wVLOg8mq+Q=)
                          3: 90AE648CDA6011ED9BC6175FC4F9AE02.roa (hash: sE0FXcv6AB6dmDFKiWcu8KQiOOpk2VVY0iuOGiUmgoI=)
                          4: 9283C1F8DA6011ED9BC6175FC4F9AE02.roa (hash: LUHYZ/6kqurL/jOA9WsqOIbXqqpGM7KM4Mk7l+DENE0=)
                          5: 916EFEE0DA6011ED9BC6175FC4F9AE02.roa (hash: RremoPLYHwOMsWIoI3OXSWs8zLNwfSA8SoWwpFXqkZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
                          rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 03:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
        Validity
            Not Before: Jun  1 03:07:15 2026 GMT
            Not After : Jun  8 03:07:15 2026 GMT
        Subject: CN=6a1cf763-c4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3a:15:25:83:a2:61:43:99:72:2e:15:b3:16:
                    ae:2e:0d:cc:9d:5e:66:25:3e:89:67:da:8d:2f:14:
                    97:1d:68:44:89:60:e3:27:54:52:e1:36:68:7e:11:
                    2c:8d:7e:19:20:7e:1b:10:a4:05:a9:2d:c5:46:ab:
                    4b:1a:f1:e4:06:d7:7e:4f:74:94:a5:2d:6e:77:64:
                    37:63:b9:45:68:64:8a:ab:b8:fd:fb:6b:cb:86:e6:
                    a0:fc:d3:e8:bc:5b:83:87:16:97:54:ca:2d:07:e7:
                    fa:71:6d:b7:d7:5b:c1:47:f4:55:21:0a:a2:71:5d:
                    93:17:db:c9:f0:7b:87:04:1e:d3:66:de:cf:64:fa:
                    b5:0c:2e:a9:ad:ff:ed:f7:2b:db:8b:8e:27:f1:d4:
                    c9:9e:5c:75:da:31:ba:03:c4:d3:25:45:32:89:a7:
                    28:3e:67:e6:07:2a:bc:1a:93:2c:9c:9d:76:07:fc:
                    ab:01:08:a1:6e:a3:77:c8:9c:84:10:fc:94:82:89:
                    cd:f3:20:aa:89:03:27:1d:b7:a4:c9:16:98:78:3e:
                    32:89:b8:4d:d8:d5:1b:fb:b2:bb:d2:35:1e:9e:0f:
                    16:a4:5f:ff:f0:62:a0:0e:d6:28:87:54:9d:51:64:
                    9d:ad:6a:76:1b:8a:a1:c3:26:74:ea:fa:52:18:42:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:37:C4:12:17:64:6A:E7:6A:C3:BA:9D:DC:67:1E:4E:44:38:14:8F
            X509v3 Authority Key Identifier:
                keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:c2:88:13:57:11:61:aa:7c:03:40:1c:73:8a:fe:1c:c5:
         dd:f4:f7:ee:c5:fd:da:2e:88:a9:6d:16:1c:33:66:34:a8:fc:
         27:08:2c:9b:c8:c3:dc:c5:a0:9b:3e:42:94:86:00:15:52:d3:
         7f:41:29:4e:ec:b5:b4:97:ec:38:cf:47:05:c4:03:c8:0e:ac:
         f4:85:7f:06:66:0e:7b:84:23:6f:00:d7:36:eb:7d:ff:c8:54:
         89:1e:9f:93:0c:e4:91:9c:5b:50:32:55:cb:d0:c6:44:9e:6e:
         bd:d8:0b:24:dc:68:36:e5:fe:cf:93:42:c4:16:9c:bb:7b:4d:
         89:60:92:71:54:5f:9d:17:a7:be:8e:f7:50:fb:c6:46:47:31:
         2b:3b:9e:15:49:32:67:39:a0:e5:2a:31:4c:b8:09:b6:54:31:
         39:a0:98:17:7f:d6:e9:b7:c4:a5:df:66:55:e0:00:58:4f:07:
         ca:6d:29:53:e5:96:e4:b9:14:11:0a:98:cd:33:43:ec:7c:b2:
         b4:74:e2:e6:b1:3e:91:cf:36:3d:26:2a:98:4b:ab:21:1b:00:
         55:d8:11:d6:28:e4:58:e4:a5:d6:2d:99:ff:40:88:02:54:5a:
         25:b3:3b:35:b3:0f:a4:19:c0:bd:e1:d7:82:56:af:fd:4f:b8:
         c4:a3:3d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:16:27 2026 by rpki-client