Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
File:                     E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json)
Hash identifier:          4Q4QS0iSiQgg7KE9s7sNImbJHDDMS5wyLSigOldg674=
Subject key identifier:   4B:4B:CF:9D:54:78:A2:E1:28:39:04:D5:54:E7:45:E0:2A:91:FF:C4
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Certificate issuer:       /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
Manifest number:          0136
Signing time:             Mon 01 Jun 2026 06:14:11 +0000
Manifest this update:     Mon 01 Jun 2026 06:14:11 +0000
Manifest next update:     Mon 08 Jun 2026 06:14:11 +0000
Files and hashes:         1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: HTor60MPg0U1UXe7iPEaUGKumbRekVVbP8aiX8u7dCU=)
                          2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: oEyX+N8POVIt0NPqCPVZb7yBeCptqcWugjG7I1xvlZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
                          rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
        Validity
            Not Before: Jun  1 06:14:11 2026 GMT
            Not After : Jun  8 06:14:11 2026 GMT
        Subject: CN=6a1d2333-e509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:c5:35:0f:f5:3f:c8:93:b4:75:46:a7:2c:
                    48:f5:60:b2:d9:b3:cc:18:eb:de:8f:0c:58:cf:2e:
                    a9:cf:18:90:0d:83:e3:4e:75:cb:15:83:7d:d4:83:
                    8b:26:af:55:d3:e8:83:65:18:20:83:85:9a:08:35:
                    50:d6:ba:99:77:74:61:a9:e1:bf:6b:e1:1d:f7:39:
                    a9:a3:ad:83:e4:22:60:66:fa:d6:6f:f7:f1:47:1f:
                    d4:2f:e8:a4:29:fe:e3:14:6f:a9:8b:27:8d:fe:9d:
                    de:e2:01:80:5e:2f:bd:8b:e0:e2:dc:c4:43:fb:6a:
                    ba:18:59:6a:0e:25:a8:2a:07:3f:ba:36:3f:34:dd:
                    f5:3b:68:33:30:66:c4:bb:a9:11:b0:3b:b7:51:7d:
                    88:68:a4:1c:14:69:30:dc:3f:77:c2:eb:35:25:55:
                    62:cf:20:39:af:7c:30:ac:bf:fd:42:6f:7e:10:c0:
                    0e:52:22:7d:6b:d2:55:69:87:04:83:d3:8d:ae:4a:
                    b2:b2:9d:46:f2:84:ba:d9:51:4c:99:3c:34:de:37:
                    5e:5d:01:c5:76:33:98:84:b2:8f:c8:bd:ef:c4:90:
                    00:f4:8e:6f:c4:d9:c6:53:79:e1:a1:9a:d1:3c:71:
                    d1:8c:62:84:3e:87:e7:5b:1d:11:35:72:a3:3a:55:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4B:CF:9D:54:78:A2:E1:28:39:04:D5:54:E7:45:E0:2A:91:FF:C4
            X509v3 Authority Key Identifier:
                keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:66:f2:0c:33:9d:bb:fb:b1:44:60:cb:fb:0b:8c:87:11:92:
         47:3a:5f:b0:38:c3:06:a9:13:5f:80:d0:76:19:1a:89:14:cb:
         3b:b9:cc:bd:0d:8b:80:18:28:f5:73:2d:ff:7b:ee:45:a5:1a:
         ce:88:ab:e2:3b:75:4d:21:1f:2e:6a:b8:53:fe:43:7f:38:e9:
         d5:79:d7:18:99:d5:dc:8b:f2:b0:18:63:20:de:b5:53:40:ce:
         c4:81:4f:d4:50:0a:f0:be:a5:cb:b4:57:62:26:5e:a9:95:a9:
         19:55:1e:8e:b8:69:2c:fe:b9:3d:eb:c8:12:bc:83:75:62:96:
         4e:42:39:c6:ed:ef:88:ef:f7:4d:6d:15:ff:e6:54:c9:c9:1e:
         49:24:b4:01:70:d3:24:70:4f:5e:e9:04:0d:69:fe:4a:29:3a:
         b8:70:4f:8f:f9:fd:5c:8f:4e:bc:ce:e8:20:bc:e1:1a:03:b0:
         a4:54:bb:b2:ae:ee:6a:bb:72:cc:af:1f:46:c6:37:5d:87:d4:
         fe:9a:0f:66:f3:73:c2:36:66:34:39:66:4e:69:ab:86:04:eb:
         ba:22:3f:05:4c:1f:07:5a:77:55:9c:d7:bc:d1:21:e6:38:63:
         66:f7:05:a2:5e:f8:98:a0:fc:9a:f2:1b:7b:a8:cc:5a:48:16:
         c0:2d:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:08 2026 by rpki-client