Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
File:                     9A-TqdIRaxiksirqdTW59eNunlE.mft (raw, json)
Hash identifier:          adT7IO0DIowEYrKztaH9DIU6n/v+1RPYyR1W9nJw314=
Subject key identifier:   63:26:05:20:B9:EE:24:D2:08:95:7F:BD:E3:BF:9E:91:1D:9B:A0:CC
Authority key identifier: F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51
Certificate issuer:       /CN=A919C47E/serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
Manifest number:          21
Signing time:             Tue 02 Jun 2026 16:56:32 +0000
Manifest this update:     Tue 02 Jun 2026 16:56:31 +0000
Manifest next update:     Tue 09 Jun 2026 16:56:31 +0000
Files and hashes:         1: 9A-TqdIRaxiksirqdTW59eNunlE.crl (hash: Z3U8eTZevCLi0R/f9m4HujNWRsERKX7FmWgmHEFGQW0=)
                          2: 934C25D238C011F1AD0BCD9C99833773.roa (hash: w2PsXC0NzHE/Q5fkR14UN3mHcPylNIHmDef5Q25n5fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
        Validity
            Not Before: Jun  2 16:56:31 2026 GMT
            Not After : Jun  9 16:56:31 2026 GMT
        Subject: CN=6a1f0b40-448a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:ef:84:f6:61:74:e8:16:9e:80:32:40:21:
                    c7:35:ce:95:4a:48:71:6f:46:0a:47:20:3d:da:62:
                    ee:05:b8:17:cc:23:98:a2:9f:48:e7:9a:b1:e5:ac:
                    aa:1c:1e:bc:1a:fa:6a:39:8a:35:23:72:94:ed:c5:
                    ff:1c:21:59:43:10:d1:df:53:a1:1e:ed:95:f2:63:
                    b6:e9:4e:df:78:a3:68:9a:c2:d7:79:ac:f4:d2:78:
                    fa:19:70:80:dc:4f:70:28:86:91:f9:50:ae:13:3a:
                    3d:6b:2c:37:a7:85:66:6e:82:d0:06:29:e7:a5:5b:
                    1d:17:b1:55:16:3c:8d:d5:08:bc:c0:44:15:fb:35:
                    6a:a0:60:04:33:cb:22:27:b9:c1:c1:bc:a7:77:6b:
                    01:6b:f2:5c:a7:5c:91:58:a1:cf:8a:36:e8:6f:74:
                    0d:de:1d:44:e1:7e:96:83:e7:c7:15:76:f9:14:65:
                    20:13:1f:42:bb:e0:fe:4d:bc:05:db:dc:fa:39:96:
                    05:79:c0:a0:ea:cc:0b:a2:4f:2a:3d:da:ad:b3:69:
                    d2:e2:ef:5d:f1:b0:73:50:a6:68:ec:d7:00:96:f7:
                    5d:76:6b:e4:11:8a:8d:3a:11:1d:88:1c:75:5b:af:
                    b1:63:80:eb:3f:4c:5e:22:1f:a3:e1:ae:29:fc:e4:
                    d5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:26:05:20:B9:EE:24:D2:08:95:7F:BD:E3:BF:9E:91:1D:9B:A0:CC
            X509v3 Authority Key Identifier:
                keyid:F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:66:b6:06:d2:56:63:eb:ac:80:5c:e8:20:9f:c7:6d:cb:7f:
         e7:81:ce:97:7f:93:5b:04:51:bf:2e:d9:d8:d2:c4:41:e3:56:
         4f:e4:83:23:c2:55:22:b1:49:ae:a4:03:d9:eb:fa:ec:cb:e7:
         68:95:6c:48:44:b0:f5:04:77:45:21:0f:8f:e4:7a:40:5d:3c:
         b4:c0:90:ff:26:c7:04:b8:da:22:49:b0:44:4f:f6:ee:ba:df:
         fb:b6:46:47:e2:86:19:15:66:24:d9:3a:9d:fa:4c:ce:eb:6c:
         18:42:d9:c0:96:c3:bc:df:8d:35:50:6f:75:b7:16:81:b1:e2:
         ce:c8:af:1c:5f:a4:c7:a4:4e:1a:8c:ad:19:aa:46:5e:ad:6f:
         d3:e6:a5:a6:d0:4c:f8:89:aa:4b:5d:82:4e:48:bb:9e:04:e4:
         e8:0f:59:7c:3a:aa:75:47:62:a0:01:ae:86:55:95:47:20:03:
         f0:a4:93:b6:83:35:d6:c2:86:9d:86:f7:5a:d4:b2:3d:fa:0f:
         79:a2:94:e3:a2:0e:40:d3:ab:8a:10:b8:49:91:10:2f:4c:7e:
         d4:33:b8:e1:8e:4b:30:f7:45:b8:ae:f2:9d:b2:8b:eb:b3:87:
         d2:33:2b:34:0c:c1:09:a1:bc:5d:69:20:81:5e:fd:ff:97:94:
         67:20:45:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:39 2026 by rpki-client