Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
File:                     rDzLekAZEcjlFT8wFmpUyacWP3s.mft (raw, json)
Hash identifier:          jXsMtrMVbh2I6xegCc2WjYrnubUm+H4O/TxBUMputSQ=
Subject key identifier:   CB:2E:4E:A8:2F:11:20:63:DC:2C:64:27:77:55:71:81:AF:C3:6B:0E
Authority key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B
Certificate issuer:       /CN=A9189337/serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
Manifest number:          7A
Signing time:             Mon 01 Jun 2026 08:29:37 +0000
Manifest this update:     Mon 01 Jun 2026 08:29:37 +0000
Manifest next update:     Mon 08 Jun 2026 08:29:37 +0000
Files and hashes:         1: rDzLekAZEcjlFT8wFmpUyacWP3s.crl (hash: MAtNqW+2MV7gKljBI/jOhwUL29KpVGKv78gFlmNhW1o=)
                          2: 97B6FD12A81611F0BBD11A74C4F9AE02.roa (hash: +o1CGO8tcRdORT+HUDRB+r7Vejjj6YH1/8uUwSB82zw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl
                          rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B
        Validity
            Not Before: Jun  1 08:29:37 2026 GMT
            Not After : Jun  8 08:29:37 2026 GMT
        Subject: CN=6a1d42f1-7049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:cd:4a:c2:62:d7:f3:d5:0f:21:62:58:50:
                    a2:78:35:f3:86:76:87:2a:d2:07:4c:a9:74:a2:cc:
                    da:2b:9a:1a:60:cb:f2:b9:04:ff:0a:90:7c:76:51:
                    7b:e9:d4:5d:3a:fa:60:f0:3d:47:34:59:7b:32:59:
                    b6:01:cc:bc:c5:71:2f:dd:a7:50:82:a5:87:1c:1f:
                    37:79:65:58:d8:ed:09:bd:e1:2e:17:52:61:32:61:
                    19:bb:e6:ad:ff:1a:2c:39:ab:9d:14:f8:89:ca:84:
                    a8:19:da:55:30:86:46:e8:56:3d:66:95:17:41:6b:
                    35:c2:8d:61:8f:a5:f2:ad:66:69:aa:d6:13:c3:8a:
                    30:02:36:5a:02:50:30:ed:3a:ec:48:bc:d4:9e:77:
                    43:4d:35:6c:b9:69:15:6c:5d:cc:ef:be:74:cd:fb:
                    42:87:36:23:63:c4:e4:d7:35:fd:47:be:24:7e:2f:
                    2e:58:5a:a2:dd:7f:ff:d1:af:dd:b2:13:f4:ff:7e:
                    3d:f4:cd:1e:da:34:39:ed:05:5a:65:58:89:76:6a:
                    9a:41:31:14:4c:56:a4:4a:31:e2:07:1a:65:22:a4:
                    d4:5a:ef:56:b3:7c:85:8f:75:1f:32:ef:22:bc:82:
                    ce:b2:ee:ca:7b:7d:94:9f:91:ed:73:a6:9e:93:83:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2E:4E:A8:2F:11:20:63:DC:2C:64:27:77:55:71:81:AF:C3:6B:0E
            X509v3 Authority Key Identifier:
                keyid:AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:4c:1e:55:fc:58:10:a0:f3:37:dc:4d:4c:8f:62:5d:3e:
         3f:41:e5:f3:a0:8a:75:3d:3d:e5:a9:79:56:c6:0e:33:94:8b:
         bc:2a:f2:b0:60:a4:c6:cf:b3:a2:76:a4:88:a2:ee:6f:bd:d8:
         e5:86:18:1b:c0:18:4a:a9:88:01:25:ad:f9:7b:af:fa:7d:4b:
         5d:05:e2:bf:38:cf:84:f8:5d:cd:04:a0:1c:00:5d:0d:84:4f:
         63:38:a7:9e:9b:d3:04:9c:51:20:19:8d:bf:d2:7e:14:4e:29:
         0b:7b:aa:bd:a9:8a:44:76:ec:0b:97:f1:ab:ba:02:be:c4:40:
         97:21:d6:df:1e:a5:49:5a:9f:5e:01:de:3b:77:9f:f9:01:c4:
         8d:b2:d9:80:29:e4:78:87:9a:76:0c:a8:f7:0e:0b:97:86:b5:
         a4:7f:03:bb:95:05:89:b2:eb:11:3d:60:df:64:7f:5f:91:a3:
         5d:e6:8f:96:59:79:e8:da:d2:bc:30:4f:03:c2:2b:a8:8b:25:
         0c:e8:e6:aa:98:ec:6c:5b:50:54:7d:53:51:1e:94:fe:b3:95:
         13:a0:15:66:4e:ff:c2:e0:ea:ff:5c:0d:0b:6b:6d:c7:cb:10:
         7d:0a:3e:15:d9:eb:82:b0:62:55:49:1b:73:f0:fb:03:a8:3a:
         14:b0:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:01 2026 by rpki-client