Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
File:                     yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json)
Hash identifier:          DCHCxNYhxoCifkK7e55SniIRATg4dMStLlHL22tL7DI=
Subject key identifier:   29:10:39:EC:29:16:94:76:17:C6:23:A5:E4:85:BA:F3:D7:83:7B:10
Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
Certificate issuer:       /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
Certificate serial:       04E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
Manifest number:          04DE
Signing time:             Mon 22 Jun 2026 23:51:20 +0000
Manifest this update:     Mon 22 Jun 2026 23:51:20 +0000
Manifest next update:     Mon 29 Jun 2026 23:51:20 +0000
Files and hashes:         1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: 7kRyaM5k7PyesHkp1N/w4g/EvzSNqcWk6WKUb7E8eCk=)
                          2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: +cLlzkIBm/p8e2CGv26xzGqvHJz8gqLYzjwIGaKh6zM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 23:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254 (0x4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
        Validity
            Not Before: Jun 22 23:51:20 2026 GMT
            Not After : Jun 29 23:51:20 2026 GMT
        Subject: CN=6a39ca78-cf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0a:77:5b:fa:fc:a8:70:af:8f:1e:66:0f:f6:
                    c6:f3:84:fa:18:c3:a9:24:a9:34:a9:07:e1:95:e7:
                    9a:c5:9d:7b:c2:7d:21:b6:93:ee:5f:e2:b0:58:47:
                    38:c9:41:b6:0c:5c:09:3e:e7:b9:73:c8:ad:fe:64:
                    10:a0:3b:db:b3:a4:2d:bc:3d:6c:ec:00:a8:20:9a:
                    10:8a:48:41:98:0e:27:3d:a1:d4:e5:b2:87:40:fb:
                    15:16:c7:7e:1b:af:d5:17:9a:24:9d:f1:06:41:11:
                    8d:18:e5:c2:af:90:c9:56:68:47:09:84:91:7e:1b:
                    21:f4:7f:7b:63:3c:23:56:32:46:0f:10:b7:63:f7:
                    99:d8:15:c3:bc:80:d9:48:b4:05:6c:e1:07:eb:eb:
                    b6:8c:ad:9f:3e:0a:87:42:81:ba:9c:c5:b1:2c:5e:
                    e0:7d:6c:b5:70:25:72:0a:a0:b7:64:0d:f8:34:8e:
                    35:1e:75:f9:58:9f:9c:62:28:9a:50:6a:36:e1:f1:
                    b1:e5:6d:ab:bd:56:02:18:cf:56:cc:a1:5e:fe:08:
                    e5:d1:bb:a8:8c:ec:97:d9:2f:b3:a9:c2:95:4f:cb:
                    85:6e:c9:89:72:bc:d0:ba:cd:f7:1a:a5:3e:86:d1:
                    70:ec:81:f2:25:a7:69:c0:c0:e3:8f:30:10:e1:95:
                    c0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:10:39:EC:29:16:94:76:17:C6:23:A5:E4:85:BA:F3:D7:83:7B:10
            X509v3 Authority Key Identifier:
                keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b9:14:4b:cb:62:b2:7c:65:76:4f:69:c1:30:0d:18:df:d2:
         75:7e:2f:56:eb:65:2f:a4:ab:8e:a1:53:81:e2:46:e8:55:cc:
         aa:3e:84:90:c4:b8:53:40:fd:4b:9d:75:5a:9d:40:94:34:43:
         45:b7:45:62:fb:12:cc:b8:dd:a7:a8:3e:3f:ad:05:4b:9e:e2:
         15:d1:8c:6d:d1:53:42:20:17:ad:e5:c7:3e:50:c2:41:1d:4e:
         b9:bc:85:55:9b:11:df:86:5a:0c:ec:0b:d5:04:2e:1d:88:0b:
         80:08:10:26:2f:2d:c2:46:9b:3f:85:df:c4:e4:ee:4f:78:8f:
         32:e1:6b:c5:93:2d:a0:a8:36:ed:5b:0f:84:f6:49:8b:bf:83:
         2b:cd:d6:09:ba:b0:75:f6:69:d4:d0:a1:05:84:c8:00:ac:93:
         f9:f4:4d:d0:83:02:40:64:69:44:fe:0d:34:08:ca:db:17:f5:
         38:65:2c:62:ae:c3:27:0c:b3:58:fd:38:d8:aa:ca:8b:57:e5:
         d7:f0:42:90:8a:24:88:34:0f:2d:51:e3:6b:d8:b0:2c:4b:36:
         3f:f6:25:33:4c:84:1f:97:39:84:a0:dd:51:4d:7b:4c:b6:15:
         cb:3c:3a:92:00:b1:dd:26:b8:9a:13:11:e6:4e:9f:38:0b:7f:
         2a:a8:fc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:11 2026 by rpki-client