Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
File:                     fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json)
Hash identifier:          TcXUQJRawTEPO8OM6IX3mEf7lrOwsCOkR7sWJJ7YU8U=
Subject key identifier:   B4:DD:2E:31:07:AE:93:32:51:D9:9F:16:F7:8B:17:67:C2:AD:D3:77
Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A
Certificate issuer:       /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
Certificate serial:       028B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
Manifest number:          0285
Signing time:             Tue 23 Jun 2026 01:56:58 +0000
Manifest this update:     Tue 23 Jun 2026 01:56:57 +0000
Manifest next update:     Tue 30 Jun 2026 01:56:57 +0000
Files and hashes:         1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: 3/z3NJvxyz9p+az00babL03SOWwq8jBSh3osRh6mC7Y=)
                          2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: TNBEB8bv/VEmVVea2OmlN0ueyYUZVCLkiz8lmx3cgdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl
                          rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
        Validity
            Not Before: Jun 23 01:56:57 2026 GMT
            Not After : Jun 30 01:56:57 2026 GMT
        Subject: CN=6a39e7ea-5511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:0c:16:5c:aa:b3:a4:74:f6:6c:f4:66:2b:
                    6f:80:9b:0c:d8:8e:56:28:eb:25:6b:20:29:83:9a:
                    ee:0a:05:b7:ca:50:b5:d0:22:fa:77:80:5f:9e:0d:
                    13:b6:35:33:26:f3:ca:b9:90:06:03:13:f6:cc:a3:
                    75:d1:df:42:a2:5d:39:23:90:a0:45:cf:b7:4d:0a:
                    ce:c0:4e:f8:20:b6:7e:45:89:45:c3:72:44:eb:26:
                    a8:3c:88:4a:a6:07:d1:51:12:16:bd:dd:c1:90:4f:
                    48:41:d3:e0:0f:74:41:10:50:fb:50:e0:7a:6b:05:
                    b8:9f:42:b0:03:f7:3c:f1:47:94:b7:d4:56:ba:53:
                    53:c9:7b:a9:f2:c0:27:e4:c3:23:15:d8:14:ba:33:
                    79:35:53:33:77:63:e4:ac:08:10:06:a7:c9:99:b9:
                    1a:ff:34:7c:eb:e6:b6:ab:61:a7:fe:75:df:c1:1c:
                    96:fb:3d:a7:21:e3:7b:9a:a9:59:1f:54:ba:ce:6d:
                    9d:7d:9d:98:42:19:8d:3a:f6:7e:9b:c6:08:f1:e6:
                    b5:9e:a2:da:f1:f0:0a:04:d8:a3:28:14:17:b1:fb:
                    cb:78:66:dd:8c:f7:37:49:b8:53:2f:db:e8:a2:a5:
                    b0:1a:29:db:e0:06:9a:23:ad:40:ad:01:ae:4d:7c:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DD:2E:31:07:AE:93:32:51:D9:9F:16:F7:8B:17:67:C2:AD:D3:77
            X509v3 Authority Key Identifier:
                keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:75:b4:af:c4:68:2e:1e:47:3f:33:df:10:1f:40:98:af:1c:
         5b:74:8a:00:55:48:48:39:d1:77:ad:97:47:49:8d:dc:b5:db:
         be:c1:1d:e3:12:6c:10:dd:bf:79:bf:8f:21:db:3c:c4:ef:c7:
         89:8f:b3:92:92:ae:29:f5:79:98:3a:8e:a9:89:d4:ab:0c:6c:
         c6:65:3a:7e:39:cc:cf:61:e8:8e:f9:a9:8d:84:f0:bf:87:46:
         b1:d8:04:8d:b2:bf:53:52:f6:a3:35:53:bb:86:6e:6b:9c:31:
         33:5a:9f:e6:5e:c9:71:fa:f5:79:46:f6:fe:46:e6:64:88:86:
         28:aa:b4:90:a6:3a:30:85:a0:c2:89:66:fb:37:e2:ce:bd:e5:
         ae:e2:74:33:83:4d:a0:bc:a1:b1:2c:e8:ce:3e:38:7f:f2:3b:
         6f:d7:b0:45:ed:66:1d:e8:c7:3f:be:d4:a1:a9:10:13:f2:cf:
         7c:4e:a4:c0:46:0a:35:2a:f3:4a:9d:05:3d:aa:d2:87:27:5c:
         f2:10:b0:64:a1:1b:fe:0b:09:f8:33:bf:8c:bd:98:1e:59:b9:
         22:ca:04:62:04:26:c6:97:67:36:fc:f2:74:30:87:67:35:37:
         fa:41:ad:6a:c7:ba:db:e4:1f:ca:90:1d:b0:c2:4a:5a:48:4c:
         21:4a:3e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:47 2026 by rpki-client