Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
File:                     J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft (raw, json)
Hash identifier:          ff3utFksH+Be2yRe6vnLYZKo+9rL6Snq0AiMWV0GtjE=
Subject key identifier:   2E:57:AB:C5:74:7C:B8:92:EE:70:4F:22:55:75:CE:9C:37:C3:53:14
Authority key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F
Certificate issuer:       /CN=A917A2E5/serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
Manifest number:          89
Signing time:             Mon 01 Jun 2026 08:18:15 +0000
Manifest this update:     Mon 01 Jun 2026 08:18:14 +0000
Manifest next update:     Mon 08 Jun 2026 08:18:14 +0000
Files and hashes:         1: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl (hash: VeDTg3awpZsnHmTE1erBWkt6bQU+4DqUGsIU1leprqw=)
                          2: 173F9AAC8C9811F0B7F99E73C4F9AE02.roa (hash: dtOyJXL7fADe0DAPUWAD6cAvQxtHj2xT44MMlwLS1gs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl
                          rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F
        Validity
            Not Before: Jun  1 08:18:14 2026 GMT
            Not After : Jun  8 08:18:14 2026 GMT
        Subject: CN=6a1d4046-3bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:12:94:0f:72:43:e0:bb:92:7f:e5:fe:6b:
                    88:b4:59:e2:0f:30:4e:dc:50:17:89:24:64:a5:64:
                    63:39:35:9f:77:10:5e:3d:4d:02:62:4b:bc:90:f2:
                    d4:8c:cd:e9:d0:3d:16:21:5b:70:73:3e:36:d1:63:
                    0d:fc:57:9a:62:84:8c:18:d7:12:a5:99:fd:4c:ae:
                    ff:16:44:7f:e4:7d:41:7d:dd:5d:71:66:c8:29:c3:
                    83:41:f8:b3:04:bc:88:d9:cb:2f:83:cf:e1:9f:3e:
                    25:19:c4:f3:57:8e:04:d3:cc:7f:d4:68:5c:a5:9a:
                    c3:81:fa:1f:85:a9:9c:38:30:4a:45:4e:fd:c7:66:
                    a8:9d:83:58:8c:b4:e6:f7:59:c3:b5:ad:13:96:2a:
                    66:c6:4f:40:be:e5:96:e2:dd:d5:05:ac:c2:f6:fc:
                    dd:3e:e1:76:c6:72:7c:39:06:38:5d:f4:a8:95:0e:
                    42:9a:c3:61:aa:86:08:48:19:25:b0:d3:2c:83:6b:
                    11:9f:23:d2:0b:5a:ea:c7:10:2d:46:69:96:92:8c:
                    6b:25:67:49:5a:78:0e:80:b5:29:33:02:9f:3f:00:
                    13:0a:a4:cc:7b:9d:c7:51:ad:ec:e4:49:98:d9:ff:
                    e3:79:18:05:2b:73:a6:fa:76:98:be:38:48:5c:7c:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:57:AB:C5:74:7C:B8:92:EE:70:4F:22:55:75:CE:9C:37:C3:53:14
            X509v3 Authority Key Identifier:
                keyid:27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:2d:73:e3:6e:62:4d:d4:7f:6a:51:4a:f1:85:2f:55:a6:
         4a:8f:0d:b0:ae:95:36:59:8c:93:ad:c7:d4:b6:5c:73:5a:a5:
         3e:8f:4a:1f:66:ad:fb:78:85:2d:ee:ef:2b:19:8b:8f:7f:80:
         9d:72:4c:37:8b:28:69:c6:e7:c3:90:a6:97:e2:df:e7:a7:65:
         8e:28:b6:33:55:16:87:82:fc:91:c6:f6:ce:01:7a:d4:7b:0e:
         c3:3b:32:3c:fd:ba:72:fd:0b:c3:18:71:26:48:85:a6:57:1f:
         4b:13:ab:b2:0a:9d:ee:92:19:e7:cb:fe:8e:03:00:ec:53:5f:
         a9:cd:9e:23:ec:06:f0:ba:45:0a:6a:df:a8:73:f0:14:e0:cf:
         b3:3e:7a:33:fe:af:e1:a3:47:6c:a3:68:ed:ed:b9:70:bc:4e:
         47:b1:a8:e5:01:a7:ee:cf:1c:91:78:6c:02:2b:50:61:80:0a:
         ab:c6:34:88:1a:20:01:f2:8a:30:86:43:32:8d:29:3e:d9:9e:
         7b:34:db:0a:8c:cc:d8:85:95:53:cd:0c:26:51:e0:f8:c8:87:
         2e:60:fb:1c:15:1f:f1:3a:38:b9:4b:e2:ed:eb:bb:6c:a1:c2:
         f4:f1:33:a2:95:5b:ed:9d:b3:f0:0f:6d:81:48:8d:73:da:56:
         8f:58:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:34 2026 by rpki-client