Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
File:                     cI8eBxM4VcgHTu1fjIO0RmpgesI.mft (raw, json)
Hash identifier:          pNSzezzeHrRe2c4XSNInHB7UdrcJGPVXwrgeeROawGY=
Subject key identifier:   B9:B0:64:C6:68:DB:38:97:B5:F7:D6:17:35:17:BC:BF:31:EE:5C:CF
Authority key identifier: 70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2
Certificate issuer:       /CN=A9171D16/serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
Manifest number:          01C9
Signing time:             Mon 01 Jun 2026 04:32:59 +0000
Manifest this update:     Mon 01 Jun 2026 04:32:58 +0000
Manifest next update:     Mon 08 Jun 2026 04:32:58 +0000
Files and hashes:         1: cI8eBxM4VcgHTu1fjIO0RmpgesI.crl (hash: T5drzv7LlGIwRBGPLagyEO/Y4LQNHvEq4C3NaPmwECY=)
                          2: BFC0298670DC11EF8B65D95AC4F9AE02.roa (hash: kzX0teoGqCYcrXmXpjad2Lv+QKDn7uXbylM76fvPiSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl
                          rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D16, serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2
        Validity
            Not Before: Jun  1 04:32:58 2026 GMT
            Not After : Jun  8 04:32:58 2026 GMT
        Subject: CN=6a1d0b7b-369b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:14:bd:a0:e8:03:a4:2c:91:84:ff:41:5e:
                    a7:bd:ee:ff:22:0b:f0:8e:0c:aa:e5:44:02:c8:c5:
                    5b:e4:83:db:59:30:0b:e2:92:db:2a:d3:57:d3:61:
                    34:38:5d:62:44:42:e0:73:91:11:ba:16:cd:d0:11:
                    a6:be:e2:1a:c4:1c:d5:81:a3:8f:be:c7:4b:26:ba:
                    bc:18:87:af:15:9b:e5:3c:34:ba:ac:e8:50:05:db:
                    a4:fd:1a:c9:f4:6b:d9:5e:29:b0:c4:a7:70:0d:8d:
                    b3:f0:49:90:93:3f:08:dd:35:8f:79:8e:f0:8c:7a:
                    7d:54:61:05:7f:e1:ab:77:53:4e:2f:05:8d:55:36:
                    fd:08:54:2f:f4:15:7d:f3:49:7f:0b:19:7c:5b:a3:
                    5a:9d:9b:4a:9e:38:4f:15:2d:9f:06:cb:00:61:1e:
                    a8:60:2d:4c:b7:d4:be:63:1d:23:70:26:d3:39:9b:
                    20:15:4c:a1:64:fa:ae:b4:a5:b8:c1:8f:da:fa:be:
                    5d:ce:f7:c6:09:13:bd:a8:6d:a0:2d:ab:cc:5e:7e:
                    44:a7:d7:82:33:54:dc:66:ea:ce:a3:2c:3f:2d:04:
                    b2:4b:9f:0b:a5:9c:3c:58:f8:b8:cf:b9:52:f1:81:
                    4a:7a:5f:08:d4:a7:4a:63:63:d1:ff:2c:1b:a7:c6:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B0:64:C6:68:DB:38:97:B5:F7:D6:17:35:17:BC:BF:31:EE:5C:CF
            X509v3 Authority Key Identifier:
                keyid:70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ca:39:98:56:33:3b:a4:0d:02:b3:23:9c:ef:91:b3:a1:81:
         19:49:09:37:c1:52:c0:7a:62:c7:74:d9:49:ff:71:84:96:fb:
         5f:4b:39:1f:da:fe:6c:33:85:a8:46:f1:c7:cf:d4:32:7a:b2:
         5a:ad:35:31:a5:a6:57:e0:47:9d:d8:dc:9c:b8:f0:c9:c2:4f:
         6a:a7:01:16:6f:9e:e6:50:d4:37:9e:41:81:4d:1d:72:b6:a5:
         1a:95:17:74:e9:64:dd:e1:3e:ec:98:71:1d:87:7c:d4:38:89:
         3f:a3:2a:71:72:ef:aa:cf:be:c3:1c:89:eb:21:6b:62:5e:9b:
         c7:50:98:74:32:56:be:8d:3a:cf:8e:64:d2:4d:c3:92:da:d3:
         5a:e9:f4:3f:7b:98:eb:4f:53:da:4f:e2:da:03:18:06:c9:11:
         a3:ce:9b:30:52:3e:ab:4f:f6:3a:33:e5:58:9f:5b:93:83:d1:
         9f:4a:ba:fd:2c:ea:24:19:99:cf:c6:bd:9f:d6:f4:2e:49:49:
         26:cc:27:25:7e:34:9e:fb:ac:6d:b3:15:6a:7d:27:82:4f:ca:
         27:18:8f:a3:3f:b5:e0:9f:54:93:61:44:dd:18:2b:f1:fc:47:
         51:fb:a8:40:f3:3d:b4:f4:e9:2b:f3:05:ed:32:91:b4:82:10:
         fd:d9:5b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:28 2026 by rpki-client