Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft
File:                     A6PIek8tglWUdvcc-u5ST_URNXk.mft (raw, json)
Hash identifier:          r+DJlgI+5i5JQSj3oew11fosIg1DQWX5B6FQS9oR4Ww=
Subject key identifier:   12:4B:68:AE:B8:FB:76:7E:72:5B:14:29:BA:9C:96:21:18:5E:ED:56
Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79
Certificate issuer:       /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579
Certificate serial:       0BCB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft
Manifest number:          0BC0
Signing time:             Mon 22 Jun 2026 19:01:14 +0000
Manifest this update:     Mon 22 Jun 2026 19:01:13 +0000
Manifest next update:     Mon 29 Jun 2026 19:01:13 +0000
Files and hashes:         1: A6PIek8tglWUdvcc-u5ST_URNXk.crl (hash: /PMVhwaqCEgkMOU05UFzHDYI+4vgSEU4yTMPfsKacpI=)
                          2: 6553D6106C2B11EA87ED1160C4F9AE02.roa (hash: Jn+xr+mIwTvl5NEMNXs7bNlAUEv6pI//+6h2YNu6ULc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3019 (0xbcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4CAD, serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579
        Validity
            Not Before: Jun 22 19:01:13 2026 GMT
            Not After : Jun 29 19:01:13 2026 GMT
        Subject: CN=6a39867a-1359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:48:d8:06:c1:13:3d:f2:bc:de:d4:28:2b:50:
                    6d:fa:66:29:ad:90:cf:43:89:97:bb:e1:e2:b9:7b:
                    ad:61:84:24:8d:d3:c2:19:f8:39:dd:c5:c6:59:46:
                    49:81:b6:89:3d:e4:62:0f:ea:99:ec:bb:56:e7:f9:
                    59:78:90:f9:ff:6a:3a:92:e6:ab:7a:72:f5:7a:a4:
                    16:e9:d0:f4:11:9d:11:1d:f8:b6:88:d5:d6:68:72:
                    b5:d5:bb:0f:3a:f2:2d:ff:81:f6:44:07:68:05:76:
                    dd:09:9a:47:86:ce:c3:88:71:c7:4e:ff:b3:c0:92:
                    69:ae:d2:9a:48:c1:4a:4c:10:de:73:96:90:09:75:
                    12:f2:0f:42:de:43:5d:3a:2f:01:a8:a1:e8:07:f0:
                    d8:56:4d:7f:d1:ac:8e:61:43:ab:d1:c3:57:ea:80:
                    27:ee:83:ff:e4:9e:fc:2d:7e:51:0b:4f:d3:0d:02:
                    04:3c:f9:28:2e:67:93:cd:2c:2c:ef:09:f1:83:57:
                    fa:85:8a:6d:3e:71:25:22:c6:b2:3f:c5:2b:31:53:
                    34:f5:13:ce:e6:66:f3:b0:62:d2:5a:37:09:4d:b5:
                    59:57:7e:37:ce:58:27:3b:5a:00:c0:d8:69:50:83:
                    d1:34:ef:80:f0:16:aa:4f:6e:5f:8e:03:00:1c:13:
                    80:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4B:68:AE:B8:FB:76:7E:72:5B:14:29:BA:9C:96:21:18:5E:ED:56
            X509v3 Authority Key Identifier:
                keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:3f:38:03:86:b4:07:71:4b:f1:68:73:97:b9:29:91:29:
         3b:85:5c:ce:e0:72:d4:78:bf:e7:9d:f5:9a:46:60:1a:6e:11:
         f4:01:38:a1:49:3a:f2:ce:c9:16:bd:75:5f:a2:b8:58:db:19:
         33:1d:ca:eb:1f:96:e4:62:66:87:91:bc:5b:8a:99:4a:62:4c:
         17:29:e3:b1:d5:4b:39:4c:c3:ca:d7:71:b0:c7:cb:21:e3:e7:
         1e:66:96:18:7e:7b:56:a5:36:45:a6:01:a4:a7:5b:97:df:67:
         83:6c:7f:47:9a:40:46:ba:6a:93:0c:2c:66:29:94:fb:8f:07:
         c1:e8:07:ab:b4:64:21:e7:5d:8c:ba:79:3f:0f:bc:ba:7c:c7:
         f6:5f:95:90:a5:78:3f:10:fe:75:aa:62:17:72:f7:74:67:79:
         7f:ec:56:ac:06:ff:dc:8b:35:0c:5c:2a:22:b0:ed:95:8c:fb:
         85:f6:c7:e1:14:64:b3:96:7a:6b:58:6e:ac:af:72:55:d4:16:
         e1:15:7a:c9:9e:15:c2:c8:cb:63:2c:d0:44:e2:a7:99:98:f9:
         95:8d:cc:de:dc:c5:0e:2c:f4:a3:64:04:79:bf:3f:89:5f:5b:
         13:2d:ea:98:c0:29:21:70:2e:20:91:21:5a:d0:88:c4:d0:ae:
         04:0c:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:14:16 2026 by rpki-client