Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
File:                     4AJb-TLnFuGh-K-QECEcQRCE_J0.mft (raw, json)
Hash identifier:          4FHk+mmFUrElMyOlIdGei3OtguwS+2Pl6E7CZksjcDU=
Subject key identifier:   D0:4C:98:43:09:AA:E3:1F:BB:5C:2D:50:BD:46:A1:8B:C5:87:C4:B3
Authority key identifier: E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D
Certificate issuer:       /CN=A9197FDB/serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D
Certificate serial:       0656
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
Manifest number:          064C
Signing time:             Wed 10 Jun 2026 22:48:45 +0000
Manifest this update:     Wed 10 Jun 2026 22:48:45 +0000
Manifest next update:     Wed 17 Jun 2026 22:48:45 +0000
Files and hashes:         1: 4AJb-TLnFuGh-K-QECEcQRCE_J0.crl (hash: lm/7LTTL1eUHRyk/1604WstbKK8lCrd5iwJ2kj4Uf4s=)
                          2: 0A1FAC405BB211EEAD06B243C4F9AE02.roa (hash: cLEGJuuOutpOBPsuC1eSdRC04oAPN6e0TRfgYBt8aGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl
                          rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 22:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622 (0x656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197FDB, serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D
        Validity
            Not Before: Jun 10 22:48:45 2026 GMT
            Not After : Jun 17 22:48:45 2026 GMT
        Subject: CN=6a29e9cd-a75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:53:dd:8b:34:20:96:95:40:85:ba:78:11:
                    39:95:c8:d4:76:eb:08:4d:88:71:3c:46:7d:00:9a:
                    d5:18:d5:9b:94:37:7b:19:ed:3e:1d:70:5a:ea:b5:
                    dd:bd:f7:2b:76:42:6d:72:d8:02:ec:db:f6:31:d4:
                    fe:b5:45:9a:7e:0f:b5:a3:44:e9:35:7a:89:33:a0:
                    08:9c:09:97:bc:e8:54:a7:35:cb:22:fb:db:9c:fe:
                    a9:56:90:ca:27:8f:76:26:3a:1c:78:a4:60:c6:c8:
                    ac:3a:9c:15:85:43:cb:c4:ca:a9:1c:eb:4e:2f:66:
                    e2:ff:3a:0c:a4:8a:c0:4d:03:e1:02:ac:9b:6f:87:
                    3a:f2:10:29:91:27:8f:52:a5:7f:c1:da:6a:64:21:
                    af:a0:d9:e1:35:ca:e8:d6:db:9e:51:7d:b0:0e:4a:
                    14:af:2d:5b:8c:88:09:c0:66:9f:dc:2a:fc:56:52:
                    9e:39:36:00:17:36:c5:46:53:ee:e5:f9:1b:a8:06:
                    2b:c5:24:5c:66:c2:f1:9b:28:3a:f4:0d:73:54:89:
                    28:7d:32:9c:a2:15:f4:23:b1:1f:ab:0f:97:09:25:
                    b8:a2:0f:5f:1f:bf:c1:83:d7:7d:ba:25:2a:0c:1a:
                    b3:12:e9:4b:d5:ec:f6:87:84:c7:33:8b:d2:92:44:
                    3a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4C:98:43:09:AA:E3:1F:BB:5C:2D:50:BD:46:A1:8B:C5:87:C4:B3
            X509v3 Authority Key Identifier:
                keyid:E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:02:79:42:1d:2d:f8:d6:0e:a0:88:4e:6c:c6:6f:e2:01:21:
         27:1d:7f:45:0a:e9:ca:e3:be:ea:99:04:43:83:a1:0e:a7:9d:
         cb:d1:de:42:74:a3:aa:a2:5b:18:d0:95:d2:41:af:64:96:66:
         2b:8e:89:c0:7a:b4:2e:63:5a:67:87:89:cf:e6:3d:ff:b3:08:
         45:46:7a:83:92:ce:92:35:76:b3:35:66:cb:d7:f3:0e:73:bd:
         df:91:aa:cb:24:86:1e:0f:bf:09:47:44:3f:4a:a8:67:61:7a:
         6a:90:aa:8d:8f:a8:41:65:8b:7f:42:08:f3:39:5c:99:27:ee:
         c8:91:8f:6c:f1:2c:de:5a:cc:1c:94:67:0e:36:a1:fe:5c:a6:
         1c:c3:db:55:12:b7:ca:d0:74:6c:99:88:25:05:f9:ee:5e:d7:
         80:73:16:eb:09:ea:47:e1:f9:80:c9:cb:4e:c5:7b:cd:5f:90:
         29:38:b8:b8:78:c5:96:a7:1b:db:c0:41:09:34:0b:77:32:99:
         db:99:89:5b:1b:a9:a7:3d:ac:10:b8:3a:8f:42:3b:75:0b:91:
         d7:06:7e:40:0e:ba:13:4e:52:7f:8d:e3:1e:7f:e8:ea:29:45:
         5d:c0:f1:b1:7b:ca:66:59:a1:1b:7c:2f:3a:54:a3:40:4d:78:
         4b:2f:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:09:38 2026 by rpki-client