Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
File:                     BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json)
Hash identifier:          EeBu3rdOE0JkdtldVQVCCTgb6ctu4HkpHtQbXZ7JPyo=
Subject key identifier:   F0:0C:56:E6:A4:42:E7:DA:75:54:B3:99:AF:53:B2:D3:60:4D:10:49
Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB
Certificate issuer:       /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
Certificate serial:       0710
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
Manifest number:          0708
Signing time:             Mon 22 Jun 2026 22:06:19 +0000
Manifest this update:     Mon 22 Jun 2026 22:06:19 +0000
Manifest next update:     Mon 29 Jun 2026 22:06:19 +0000
Files and hashes:         1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: NRb/ORjYX5CEhxz2Meb6RFhziD8/k02tXzdcJLhpiJo=)
                          2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: nsJSzWqOY4l45BXntnb8T0tUe0eX90nNxJIEP0+BTvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl
                          rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 22:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196C96, serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
        Validity
            Not Before: Jun 22 22:06:19 2026 GMT
            Not After : Jun 29 22:06:19 2026 GMT
        Subject: CN=6a39b1db-5758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:f5:b1:13:10:e0:78:a2:f1:01:f5:e1:3c:
                    af:fc:b2:00:ac:3d:61:15:d6:59:e3:a7:03:12:60:
                    50:86:a1:34:df:eb:95:cc:fe:49:34:04:3c:0e:5b:
                    33:1f:39:23:63:bb:85:02:57:25:8d:d3:6a:17:fd:
                    b6:39:29:02:ae:a1:4b:29:de:a5:a5:d7:36:47:be:
                    dd:03:16:78:8f:56:fa:ae:15:8e:51:9a:ea:60:12:
                    02:26:4d:b5:0f:82:d9:f7:dd:7b:e8:e3:a1:ce:a3:
                    c0:00:57:ef:7d:55:8a:d6:33:62:23:79:b9:da:73:
                    33:d6:bd:2e:f3:93:c2:ad:70:8e:2f:49:dd:8c:47:
                    1b:4f:67:7b:cc:aa:fc:18:6f:7d:d5:e3:c5:05:6f:
                    7b:02:76:a4:f9:8f:4e:d5:c7:16:86:40:83:81:2e:
                    82:a3:ae:22:fe:da:5c:c1:4a:de:de:29:d0:c3:93:
                    18:5b:97:95:ec:03:53:68:39:87:c0:0d:fc:bf:45:
                    be:2e:a3:2c:28:25:fc:60:fa:48:4e:1e:62:0b:fc:
                    0e:1a:fe:04:6a:0f:b4:6e:89:df:f4:b8:12:06:63:
                    b1:c6:4a:29:47:aa:55:33:d6:0b:19:c2:94:a1:10:
                    67:f3:1c:86:26:ca:43:f2:d3:47:1e:71:3b:05:4a:
                    72:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0C:56:E6:A4:42:E7:DA:75:54:B3:99:AF:53:B2:D3:60:4D:10:49
            X509v3 Authority Key Identifier:
                keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:73:c9:2c:0e:b7:fc:8a:07:9e:d3:20:26:87:7a:69:d9:8e:
         3a:54:09:fd:bd:eb:d1:38:ef:7a:a0:1d:4d:7a:d2:1c:1d:ab:
         1d:c8:f2:db:d8:9c:14:9d:fc:aa:4d:cc:02:0c:97:cc:ac:43:
         50:96:91:fb:aa:09:7b:a7:24:72:e8:a7:c5:a5:77:06:cc:af:
         ac:0b:ec:e8:f7:33:4f:c0:19:c6:0b:23:62:43:52:75:4d:55:
         cd:c2:f1:f2:79:78:46:5e:1b:67:7b:ad:6a:bf:1d:9e:ce:26:
         ac:d2:10:e1:04:6d:02:34:dc:42:56:35:12:cf:c4:b8:65:61:
         f9:87:57:4b:e1:67:a1:53:49:82:b0:7e:c9:c9:1b:7d:ef:9f:
         47:d6:f7:71:62:49:dd:40:9e:99:52:57:9d:34:33:22:c3:49:
         c7:5b:42:a7:c1:b5:ef:b4:ed:0b:32:4e:ca:0e:af:4d:55:21:
         12:6e:9a:0e:d1:44:06:bc:82:5b:ac:45:65:9d:49:f6:48:66:
         1a:4d:b2:bc:dc:89:b4:7f:37:f7:09:5d:2a:a4:a3:a1:e5:c7:
         49:96:1a:ca:cc:75:3f:9f:b5:14:9e:a2:4b:2c:08:c5:59:c8:
         20:3c:4a:ee:00:62:2c:40:28:42:6a:96:5d:e2:56:c8:4d:bf:
         6f:7f:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:09 2026 by rpki-client