Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          6WyKeB8UWzzN2TF5HdAAFD0kNPTMRqtdce27QPoRf+c=
Subject key identifier:   CE:10:13:59:8C:00:07:B9:87:7C:2E:80:82:C5:79:8E:08:4B:3C:68
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       02A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          0298
Signing time:             Wed 17 Jun 2026 01:51:17 +0000
Manifest this update:     Wed 17 Jun 2026 01:51:16 +0000
Manifest next update:     Wed 24 Jun 2026 01:51:16 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: zCOuey1pHFotMGB49YS50XXY9p6MBcISwsZjqCJRldc=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Jun 17 01:51:16 2026 GMT
            Not After : Jun 24 01:51:16 2026 GMT
        Subject: CN=6a31fd95-67ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:af:ad:9a:1f:96:b1:7a:0e:96:db:47:10:
                    cb:1e:fb:19:54:f3:4f:98:52:83:41:62:85:d5:23:
                    ea:9a:47:0e:ed:17:b2:8b:dc:bf:2c:97:00:3d:b5:
                    2b:78:4a:aa:03:b6:9b:51:ec:8c:1c:96:a5:a3:de:
                    5d:ae:94:58:ee:59:51:28:bb:6b:67:61:66:67:04:
                    54:a2:78:a7:ec:69:f9:94:68:04:37:ce:f2:9d:67:
                    9c:6b:41:c5:8f:4e:60:d1:68:15:8a:a0:35:ec:b7:
                    5d:ac:91:e9:96:57:1f:17:9a:53:3a:78:05:a4:4f:
                    c5:f3:d6:4c:dc:dc:f5:08:d3:54:6c:59:d8:73:6e:
                    35:d0:f5:1f:8c:af:08:7e:59:11:da:4b:69:98:7f:
                    a8:22:c6:3f:5e:d7:b5:77:61:d8:00:f7:85:e5:ff:
                    6c:64:bb:95:08:3f:7c:e5:07:1f:05:43:7b:01:d9:
                    f4:98:fc:b0:d1:8f:aa:37:16:15:46:3a:ae:98:9f:
                    ae:8d:62:53:0f:11:75:14:ca:74:a7:8d:d4:ac:e6:
                    47:3d:dc:fe:86:54:41:f4:28:5f:9c:b1:f0:36:e7:
                    2a:bf:80:11:0f:a2:ab:06:10:2f:59:bb:25:fb:2d:
                    36:df:ed:9b:53:48:84:dd:4b:68:14:b6:4f:86:ae:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:10:13:59:8C:00:07:B9:87:7C:2E:80:82:C5:79:8E:08:4B:3C:68
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f0:83:fb:b0:82:c5:4d:4b:2e:88:3d:4f:34:86:2e:91:b6:
         1a:0d:9a:20:37:34:cc:9d:2d:93:96:c7:56:4f:51:65:dc:4f:
         98:a2:b4:cd:e3:64:f6:34:7f:4c:88:7c:e5:1e:18:ac:ec:1a:
         3f:ef:c3:8c:62:e1:25:57:ee:da:34:75:d8:f6:0d:68:84:f6:
         40:c4:cb:cd:7d:1c:63:ab:9a:7a:bb:41:52:33:78:ab:d5:2d:
         f9:77:e7:3a:90:5c:9d:86:4a:86:8c:58:59:a9:35:8b:51:53:
         a3:64:2d:35:e0:eb:4d:62:25:83:c7:9f:cd:eb:9e:40:9a:74:
         a5:77:3f:b0:88:80:de:7c:76:bd:6f:e5:4c:c1:f2:6c:8d:1f:
         af:fb:a7:10:56:41:6f:d1:67:c0:09:e7:c1:de:ed:b8:35:bc:
         66:bb:9e:1a:aa:31:18:2e:db:4a:3c:a9:97:33:57:4c:24:5f:
         de:18:dc:0b:99:42:d4:4d:da:6c:59:fb:8b:e7:8e:76:18:61:
         0a:7c:a9:42:61:59:2d:7b:07:c1:f2:95:5f:d6:ee:84:c8:ec:
         8e:35:83:9c:2f:79:8a:d5:00:35:71:3f:ca:2b:2b:60:df:39:
         19:ae:50:46:6c:f4:93:ce:58:d5:18:5b:e2:0e:45:68:ee:63:
         b8:79:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 18:04:34 2026 by rpki-client