Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
File:                     9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json)
Hash identifier:          moQDy5ubd3Yi79Ixr5JsSpYI0MjKpF3vJwry2RbZhdc=
Subject key identifier:   A1:3B:A5:EC:D6:00:50:FF:A9:32:F8:D6:AF:C3:C4:4D:0B:D5:8F:ED
Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
Certificate issuer:       /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
Manifest number:          F9
Signing time:             Mon 01 Jun 2026 07:28:27 +0000
Manifest this update:     Mon 01 Jun 2026 07:28:27 +0000
Manifest next update:     Mon 08 Jun 2026 07:28:27 +0000
Files and hashes:         1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: snHikuaDXejNY22ZFblu6gXXHGHNNwQCEerM1CLmpUo=)
                          2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: 7IPdyrB8hldu0/eD1JF7CKYpSU0HFM1oIZi+GkIqvMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
        Validity
            Not Before: Jun  1 07:28:27 2026 GMT
            Not After : Jun  8 07:28:27 2026 GMT
        Subject: CN=6a1d349b-6cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:7b:b9:ba:6e:9b:cf:42:1d:43:31:1d:e7:
                    cf:ce:3e:4d:7d:44:2c:5f:a8:d1:6f:bf:66:ab:c4:
                    6b:98:59:7d:f8:2a:e3:cf:c2:43:bf:ff:75:c4:5c:
                    b7:4f:96:19:0e:58:cd:42:cb:53:16:21:2e:ff:d5:
                    fa:28:b3:55:a5:b9:c6:ee:55:ca:3b:a1:f1:06:cc:
                    a2:f7:ce:31:39:30:15:ee:c1:4a:c6:0c:e0:e6:b9:
                    d6:3a:a9:88:2c:2e:6a:b3:cb:d7:f2:e4:9a:39:8f:
                    97:0f:b5:66:6c:36:16:c5:86:63:c1:cb:07:30:34:
                    96:c5:d3:c3:d4:b5:7f:3f:64:31:88:87:03:bb:25:
                    dc:ae:81:02:e2:95:85:30:fd:b4:89:c4:b2:b6:e8:
                    40:20:4d:ac:f9:41:bf:4e:1e:89:51:a4:3f:09:21:
                    2a:fa:8a:3f:fc:93:94:e3:93:5a:bc:36:92:c4:fc:
                    ac:dc:38:70:be:57:94:e3:f4:a2:22:0a:d2:20:60:
                    d5:53:36:03:e5:ea:a5:1c:2e:b0:41:a5:6e:dd:b3:
                    c4:0e:71:d6:d0:04:6c:3a:87:87:1c:46:0f:8d:8e:
                    43:86:58:f3:14:b0:94:22:07:4a:29:b9:d1:41:c9:
                    25:6b:2a:61:41:39:4e:1a:70:d5:b7:a2:81:1c:97:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3B:A5:EC:D6:00:50:FF:A9:32:F8:D6:AF:C3:C4:4D:0B:D5:8F:ED
            X509v3 Authority Key Identifier:
                keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:a7:e7:c4:0e:ed:36:24:fb:b1:6c:d3:9b:68:f0:a3:17:2d:
         e2:85:02:e2:6b:72:0a:0a:3b:c1:17:c1:77:69:9f:97:90:e9:
         8f:25:1a:ec:a0:bd:6c:21:fe:29:07:f2:f9:0a:c3:cb:14:c7:
         a1:4b:5e:93:fc:54:b7:ad:2e:38:86:de:bd:93:55:ab:9c:08:
         a2:5c:00:dd:97:49:e6:dd:97:d9:80:dd:a0:ea:11:07:57:64:
         01:9f:8c:f1:70:ee:26:d3:8d:cf:37:ac:58:fb:3c:27:6e:75:
         0d:99:e7:c2:9e:f4:6b:ea:ff:b6:f7:2b:b7:e6:50:98:fe:fa:
         b6:4b:9c:ca:32:fe:7f:32:ba:3b:df:bf:ac:8d:b7:6c:15:26:
         93:2b:41:5e:28:be:eb:ba:71:7e:45:25:14:fd:68:94:e6:71:
         02:2e:43:9f:f3:8a:82:0b:69:a9:e8:75:df:f5:66:e4:f8:b3:
         e5:2b:19:b2:4f:c4:a9:59:78:fc:41:46:09:fa:31:5c:9e:53:
         99:e7:c8:bd:5a:be:38:56:5f:e9:0c:04:7a:d3:03:3a:67:b3:
         92:ac:1e:81:57:dc:a2:dd:a7:4e:70:94:dc:d9:b7:5f:13:ab:
         70:fc:0e:96:01:20:cf:1f:6a:57:02:55:f1:d4:51:06:73:9f:
         be:32:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:50 2026 by rpki-client