Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
File:                     9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json)
Hash identifier:          u9/1EXrasS5+LqdId/PUQ8tMAmk1eDHEQgMPaFIl5ig=
Subject key identifier:   95:DB:1A:67:64:65:B7:08:B9:73:B4:36:5C:F3:86:01:38:A6:58:E8
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Certificate issuer:       /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
Manifest number:          0123
Signing time:             Mon 01 Jun 2026 06:35:35 +0000
Manifest this update:     Mon 01 Jun 2026 06:35:35 +0000
Manifest next update:     Mon 08 Jun 2026 06:35:35 +0000
Files and hashes:         1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: /dWw8Wv5xRfRCAd+QCa447iGV2Y3/cLMmNuhyuFsUlg=)
                          2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: 7tTDB/tssfPu0ukhnLfqeZyRc0Pbk+Bf/jBD9Oepn9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
                          rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
        Validity
            Not Before: Jun  1 06:35:35 2026 GMT
            Not After : Jun  8 06:35:35 2026 GMT
        Subject: CN=6a1d2837-d87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:10:f8:5e:24:74:1f:ef:12:26:bb:07:f1:
                    02:63:30:58:75:eb:c3:9b:32:79:a5:e9:b4:7e:b5:
                    dc:d8:15:92:44:71:c7:41:eb:22:2e:44:a6:a3:3b:
                    c9:7a:01:00:43:cd:e6:f8:8b:97:59:41:41:39:f6:
                    66:b2:bd:30:b5:fa:14:d0:9c:e0:69:46:c4:67:10:
                    9a:3e:6a:e2:5c:23:84:aa:76:06:37:b5:38:1a:11:
                    bc:d0:b6:b2:08:c8:d7:02:bb:75:db:51:39:a7:9b:
                    5a:e1:da:70:3d:0b:ba:cf:f9:63:3d:ef:dd:56:eb:
                    f5:70:b8:4d:e1:22:53:74:0a:63:3d:ba:79:d2:59:
                    af:e5:15:f8:8a:e1:89:23:8a:56:c6:29:d5:4f:94:
                    25:c9:dd:0a:7c:86:46:09:75:ae:14:40:62:d4:54:
                    49:b8:0e:9a:69:fb:d7:28:af:80:97:bf:37:ce:78:
                    d7:7f:e3:ed:06:82:62:89:f0:c8:7b:ab:6a:53:a4:
                    11:80:2b:98:04:88:29:a0:ab:68:f5:cb:7b:1c:13:
                    84:1b:fd:a7:50:0f:f5:cf:82:aa:33:95:9e:20:19:
                    df:10:87:ef:e2:84:08:59:57:73:aa:5c:17:a1:3c:
                    0f:f3:d9:52:d3:ab:a2:01:8a:df:10:64:29:07:8a:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DB:1A:67:64:65:B7:08:B9:73:B4:36:5C:F3:86:01:38:A6:58:E8
            X509v3 Authority Key Identifier:
                keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:3c:86:f6:9c:fc:94:b3:9f:48:a1:12:75:8d:0e:cd:f0:
         ff:48:1e:eb:84:d0:fe:47:71:7c:0a:71:96:c6:08:46:0b:80:
         00:de:3e:54:f1:14:00:3c:9f:94:95:3b:f5:14:7e:48:54:1b:
         bb:55:2c:8e:30:1e:f6:7f:1a:06:b7:3d:f8:da:0d:2e:39:42:
         34:2f:ce:fa:39:54:eb:d9:fb:66:39:5c:30:b5:de:c6:1f:57:
         11:68:d6:c9:2f:9d:90:62:b3:ed:f7:00:af:19:42:5a:5b:b4:
         0e:d4:55:af:a6:3d:46:61:25:d1:14:ff:42:24:df:07:21:34:
         3f:70:9d:d4:34:6a:20:60:bd:65:18:2a:21:2b:95:44:13:2b:
         95:e8:44:8a:03:68:bf:d5:27:e1:05:96:f8:03:86:27:2d:9c:
         a9:06:69:5f:6b:b3:0f:ed:48:5f:a6:b8:b5:ef:75:f3:4c:9e:
         ee:59:28:3d:4e:28:70:e5:fc:45:db:98:a1:b5:8b:09:88:36:
         9a:89:51:06:0c:f8:58:44:1e:d2:37:73:0f:9e:42:de:0b:09:
         09:d0:92:50:1d:87:36:16:fb:dd:10:da:47:4c:cf:0c:65:ae:
         0d:59:a2:38:19:9b:ec:b4:a2:5c:d7:33:30:d4:82:11:fb:ba:
         a0:e9:34:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:40 2026 by rpki-client