Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
File:                     9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json)
Hash identifier:          q7JnIjaGTOKmCC+450hIkDQdp5gC33xkjXJPrD4SFCo=
Subject key identifier:   F4:0C:94:E1:95:23:94:97:8D:37:ED:C1:B9:3B:5E:FC:1D:32:34:27
Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Certificate issuer:       /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Certificate serial:       0D0B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
Manifest number:          0CFA
Signing time:             Thu 04 Jun 2026 18:20:54 +0000
Manifest this update:     Thu 04 Jun 2026 18:20:53 +0000
Manifest next update:     Thu 11 Jun 2026 18:20:53 +0000
Files and hashes:         1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: mhDKNoJKm8upVwoCbe386rveeTI/JM18ZMmQMfmW5kI=)
                          2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: YO/LHGpdZrKxxuw5Nj9V4zkQvWAz2/rqA3ybBI8prVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
                          rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 18:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3339 (0xd0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
        Validity
            Not Before: Jun  4 18:20:53 2026 GMT
            Not After : Jun 11 18:20:53 2026 GMT
        Subject: CN=6a21c206-dec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:56:07:57:4f:72:aa:30:b2:8e:2b:b5:0a:8f:
                    e2:ba:cb:00:02:33:28:87:cc:be:d3:0a:49:56:21:
                    de:42:9c:c7:65:55:75:d5:12:25:96:4a:25:39:6b:
                    b2:19:63:0b:53:07:7b:96:2a:69:06:9a:8a:0e:60:
                    65:b6:b2:a7:74:f6:59:a2:c7:07:ef:69:00:57:dd:
                    98:0a:6a:4d:c5:6d:63:44:89:8d:de:c3:88:c0:2d:
                    c9:e7:ee:e8:24:a2:89:b9:2e:de:24:72:e9:47:71:
                    4a:42:3e:64:d2:45:6d:48:f1:f1:c5:c1:43:05:c8:
                    1c:b4:f0:09:78:13:61:d7:0a:e7:26:cb:bd:10:5d:
                    6a:04:c1:23:19:3a:d3:d2:be:3c:72:ba:42:5c:12:
                    5f:11:9e:d5:63:7b:aa:a3:a2:2a:ed:e5:82:1b:e8:
                    07:f5:3b:6e:09:72:ef:d7:2f:2f:d9:14:09:77:77:
                    a2:1f:14:1c:22:a3:d3:07:64:02:94:f3:2e:f1:db:
                    6a:64:ce:22:8d:96:c9:c4:66:fa:89:d3:0d:cb:98:
                    38:6a:17:c0:64:89:7d:6a:91:68:d2:9b:96:c3:61:
                    82:0a:d4:b3:37:2e:77:73:a8:0a:e8:b1:7a:95:36:
                    03:d0:88:3d:57:48:70:46:46:40:da:d2:15:7d:a6:
                    51:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0C:94:E1:95:23:94:97:8D:37:ED:C1:B9:3B:5E:FC:1D:32:34:27
            X509v3 Authority Key Identifier:
                keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:65:e0:d2:a6:e1:94:40:82:ae:7e:a8:d1:a1:ee:3a:14:85:
         a8:76:1e:bf:82:44:7c:56:04:1b:88:c2:57:ce:12:57:a2:07:
         71:71:cb:50:31:c7:d7:d9:22:ff:39:72:f7:6a:e1:37:95:bf:
         5c:a5:d8:41:d0:3b:79:e6:68:0a:a1:2b:df:3e:ed:8c:15:8c:
         01:77:19:9e:ca:d2:7c:99:a9:8a:25:71:3e:e4:74:36:92:21:
         1c:8a:27:9a:4c:0a:56:89:43:62:31:32:70:6c:ef:b5:86:0e:
         6b:e7:a9:be:9a:95:0e:b2:f2:a9:dd:4d:c8:b7:ca:95:91:13:
         2a:66:c9:ae:78:e5:c6:2f:a3:70:85:9d:68:1b:bd:e8:ca:59:
         7d:52:b0:e0:d0:23:33:e4:65:52:c0:e2:09:e9:82:0f:f1:91:
         5a:13:3c:92:36:05:2a:e3:7c:89:d8:4f:06:75:b0:f4:26:e8:
         16:fc:ff:ad:31:7f:6a:f1:59:e8:5c:7a:ff:5a:bc:bb:97:2e:
         dd:58:90:ef:3a:16:69:d5:c6:ad:d9:ec:81:97:ee:23:2c:6a:
         62:2e:27:d2:56:ff:89:50:70:cb:71:68:ad:ca:4d:f6:d2:2c:
         70:ac:46:e9:dc:ba:95:11:75:7e:ac:80:16:bc:23:cf:37:f2:
         78:2c:86:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:51:25 2026 by rpki-client