Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
File:                     0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json)
Hash identifier:          qNvcgCOm0OigMddtCmiXEtfrb1LX/CGRIQ6KF8vZ804=
Subject key identifier:   1A:AA:30:4A:FF:A1:6D:78:5B:CE:37:01:94:EC:7E:59:0C:28:D1:62
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Certificate issuer:       /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial:       0A35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
Manifest number:          09DD
Signing time:             Mon 08 Jun 2026 20:01:52 +0000
Manifest this update:     Mon 08 Jun 2026 20:01:51 +0000
Manifest next update:     Mon 15 Jun 2026 20:01:51 +0000
Files and hashes:         1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: LJPMzJ5GQUtzkzapiYJMBkyyNcYlZ17OOrj8jRBz/zA=)
                          2: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: ktr77GGT9fUMH7Uwa9KLHv2apdlBRjzWDQ3Us8CVMz4=)
                          3: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: KSjOH0qSpAK/DBNETg1G0TL4OaIKzJinGTqF6Z++SO4=)
                          4: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: /AqzGVP/RU7VivZQf679uLu1hQ4PEwap68JYs68UOUA=)
                          5: A7961C32535A11F19C6355759A833773.roa (hash: o9bBPBMErBG/UPZ9+ZbmS/n7ZI5NM2zmwIt1dBIpc8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
                          rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 20:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2613 (0xa35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
        Validity
            Not Before: Jun  8 20:01:51 2026 GMT
            Not After : Jun 15 20:01:51 2026 GMT
        Subject: CN=6a271fb0-0d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:41:67:71:59:d8:54:58:15:0e:f6:da:97:
                    ff:d4:11:8d:8e:1d:11:91:bc:9e:d1:57:4b:c8:ff:
                    8f:61:f6:9e:bc:12:ca:e4:7d:fc:17:6b:5a:9e:6a:
                    ff:9d:5f:14:07:c7:10:a0:cf:af:56:e5:b0:b0:29:
                    33:38:be:7b:b1:27:fa:fe:c1:36:55:6a:d4:08:91:
                    0d:6e:a9:38:dd:9d:44:16:67:33:57:6b:8c:a0:6c:
                    91:bf:20:eb:19:d9:8b:14:1c:b0:ca:8e:77:12:75:
                    93:88:40:b6:f3:25:47:8d:36:07:ac:39:76:ca:ef:
                    fb:92:a4:87:5f:c4:32:a9:06:49:b0:c6:f1:d6:44:
                    f2:55:e8:53:75:92:11:e7:77:d6:9c:0f:95:c7:f3:
                    87:a6:7a:70:ad:db:88:0f:e3:46:47:5d:a4:24:53:
                    c0:8b:91:0b:04:25:c0:94:e2:65:b5:f5:72:cf:e7:
                    a0:5e:28:bd:7d:61:09:c0:89:08:f3:aa:04:ee:e8:
                    87:a3:0e:20:d8:86:9c:b6:cd:35:b7:7b:9d:45:fe:
                    92:2e:53:d1:14:a3:41:d5:22:6f:f6:fc:42:a7:48:
                    bc:1a:d8:64:70:00:74:3a:4f:d3:8a:5a:cf:42:9f:
                    d0:b0:89:4f:4a:f0:25:aa:10:79:bb:1a:8a:a4:de:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AA:30:4A:FF:A1:6D:78:5B:CE:37:01:94:EC:7E:59:0C:28:D1:62
            X509v3 Authority Key Identifier:
                keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:aa:77:fa:b5:87:4c:6b:cd:e7:44:53:09:4f:68:9b:45:86:
         60:b6:7c:a8:e2:5f:fd:39:51:22:8b:9a:ea:30:a6:56:c1:f6:
         2e:11:5c:9f:4b:7f:bd:a7:a3:ff:df:82:ab:d3:fc:6e:b7:eb:
         90:a1:c7:4e:d7:a4:18:08:35:b9:c8:ab:80:43:32:17:6a:bf:
         65:12:aa:c2:08:dd:81:85:f8:75:2a:9e:99:13:e5:dc:a0:00:
         99:b9:19:b0:87:29:be:81:e8:2c:59:85:f0:8c:8c:fe:20:40:
         3f:fc:05:49:a2:67:cd:8c:ea:64:b5:36:82:ba:d6:30:c5:72:
         d7:0a:54:e9:34:a6:8a:8c:db:f2:9f:db:b7:e6:42:ab:08:a1:
         2d:ae:44:8f:87:15:3d:35:08:8f:5e:23:4a:3e:7d:f5:11:75:
         ca:07:95:ec:0d:7d:7a:b6:61:ef:6e:88:23:84:ea:ea:80:a3:
         04:d2:4f:22:a4:85:f1:5c:30:31:23:75:72:ce:94:24:44:19:
         aa:00:ae:00:0d:34:2b:6d:e8:9b:aa:67:8d:fb:4c:7e:13:cc:
         c3:77:0f:c3:42:35:c0:7b:c9:f8:7e:ec:70:53:03:65:47:fc:
         f6:70:62:1f:f2:50:aa:2c:8b:ee:65:46:a8:e7:97:03:80:d6:
         a0:35:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 14:12:39 2026 by rpki-client