Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
File:                     88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json)
Hash identifier:          GXQpKa9KIUSdG1QB84VIeoObDZn/lrCAE3cA1OIIGf4=
Subject key identifier:   06:93:16:9F:A8:7B:D0:FB:07:97:D4:4C:4E:46:2A:E7:E0:4F:17:48
Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0
Certificate issuer:       /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
Manifest number:          01EA
Signing time:             Tue 23 Jun 2026 03:32:10 +0000
Manifest this update:     Tue 23 Jun 2026 03:32:09 +0000
Manifest next update:     Tue 30 Jun 2026 03:32:09 +0000
Files and hashes:         1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: wsx1HsnsODkzUDGR5XJ2aeut1d8ErM181UT2pbcvVrM=)
                          2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: jhhoPKCQJggjIDVtaSW5EvrcG1nzgk+baXw2VG2NBWg=)
                          3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: O6fMeAHfmA8sNvhbsQlGasdy3CAaIHGwFKK0ajItLH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl
                          rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 03:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
        Validity
            Not Before: Jun 23 03:32:09 2026 GMT
            Not After : Jun 30 03:32:09 2026 GMT
        Subject: CN=6a39fe3a-e00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:21:04:be:8b:cb:39:35:cd:6f:0b:39:3b:3b:
                    e6:e1:b8:ac:c2:11:e9:a7:9c:d4:eb:7f:2d:72:31:
                    a8:be:f1:3b:1c:59:ff:f5:27:53:e5:68:8a:01:f6:
                    eb:0d:aa:45:87:27:ec:5a:7e:3c:ff:e0:f0:65:6c:
                    fc:85:d0:b8:5a:97:a5:01:5a:d9:03:df:ff:35:8a:
                    3c:a8:da:53:dc:98:6b:0b:7b:2f:97:01:c6:11:b2:
                    ed:24:93:2f:3f:3d:e7:cb:92:e8:64:d9:16:64:db:
                    0f:e7:d0:fe:3b:9e:63:ff:3d:56:f2:62:62:9f:21:
                    bc:52:38:4e:3a:0c:ab:cb:28:5c:de:5c:22:02:96:
                    64:0c:15:5a:13:30:7f:db:ac:1a:d9:56:bb:7c:4b:
                    bd:c8:e1:b3:6a:1e:d1:4d:68:25:c6:56:3e:5d:69:
                    c0:b1:69:99:89:8a:66:be:b2:63:eb:ee:43:d6:63:
                    ec:6d:6f:3d:df:c4:ea:4a:6f:88:17:d9:c4:3c:a7:
                    da:05:a2:1e:14:95:c6:f3:85:5a:1f:6b:2c:e7:62:
                    fb:09:48:b2:37:57:6a:c0:13:23:d8:9d:81:f7:53:
                    fa:f5:69:5d:33:40:32:dd:dc:9c:1f:b5:99:b2:d0:
                    27:58:f0:4d:23:db:c6:1e:e4:ee:df:bd:b3:50:3e:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:93:16:9F:A8:7B:D0:FB:07:97:D4:4C:4E:46:2A:E7:E0:4F:17:48
            X509v3 Authority Key Identifier:
                keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:0e:c9:da:e0:cf:05:23:c4:0b:69:c9:40:02:b9:1a:db:78:
         1f:a1:c3:09:36:14:f2:58:c3:ea:f6:91:cd:be:c8:a6:ce:39:
         9a:a6:78:99:50:ec:a4:13:89:97:72:7d:aa:a4:60:9c:8b:61:
         0b:e6:71:a2:b0:f8:82:98:c9:5b:db:ac:a2:a2:b0:77:40:62:
         3e:37:9f:01:94:bd:2f:6a:df:4d:5d:2e:de:2b:65:54:b1:66:
         27:29:3c:85:21:cb:7c:5b:eb:e5:35:e8:d1:45:19:7d:63:f8:
         0b:4f:83:6c:0d:aa:89:89:de:89:3d:b7:be:34:f7:d9:67:cc:
         c7:51:15:bd:64:8b:3b:8b:27:d9:db:e3:cd:03:b8:c8:47:6b:
         e9:eb:37:78:c9:04:28:a4:a5:5a:cf:41:83:d9:fe:7b:c0:9e:
         27:a7:03:29:71:2a:ba:b6:27:16:f6:eb:10:08:39:14:44:0f:
         1e:74:39:2d:a4:00:92:1d:fe:31:8d:cb:03:d8:aa:4f:2a:df:
         76:b7:7f:47:04:17:40:c1:0d:98:25:9c:3a:db:56:00:c8:02:
         56:4b:b0:e7:68:67:1a:a4:bf:12:b0:3f:70:12:82:b6:c1:8e:
         7d:e9:85:db:2c:77:0d:c5:77:fe:ca:aa:bd:3f:fc:c1:b4:be:
         d8:e6:44:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:13 2026 by rpki-client