Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
File:                     A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json)
Hash identifier:          tkaaac7S+Kdu4EqQAED1Gt8J1JZHEFNLE4r53m30vLw=
Subject key identifier:   13:B7:BC:CC:52:81:33:F4:2E:B5:71:35:F2:B4:B5:2F:15:CC:66:32
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Certificate issuer:       /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
Manifest number:          98
Signing time:             Mon 01 Jun 2026 08:11:09 +0000
Manifest this update:     Mon 01 Jun 2026 08:11:09 +0000
Manifest next update:     Mon 08 Jun 2026 08:11:09 +0000
Files and hashes:         1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: vgQkfcsn3THxC+h7rV0CKHwzMMOEO2rzCfJi2nIztpc=)
                          2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: cA1zRf5hGPx366nz55tbLEUSAsNqCtNhxK7+ift/7Yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
                          rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
        Validity
            Not Before: Jun  1 08:11:09 2026 GMT
            Not After : Jun  8 08:11:09 2026 GMT
        Subject: CN=6a1d3e9d-c563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:b7:cd:83:d1:a9:88:7e:fa:8a:80:a5:39:
                    1d:db:8e:83:30:0c:09:79:22:48:7f:c5:81:48:c0:
                    d2:98:d0:a2:b0:bf:9c:75:8f:05:05:c0:60:0d:e4:
                    46:6d:82:8a:17:54:36:2d:91:6d:0a:8b:48:ee:f0:
                    d4:13:f7:67:6b:f3:d0:91:42:e1:f7:68:7c:3d:b2:
                    63:ec:00:3d:65:ed:83:68:98:1b:73:55:dd:ce:73:
                    74:f8:cc:08:5a:c0:f4:ae:13:1d:bb:5f:c9:e1:9f:
                    47:9a:82:6e:24:a3:40:ae:48:a0:fb:d3:52:53:f3:
                    9f:f1:1e:89:66:79:a1:1a:7b:18:d2:e3:c6:cc:a2:
                    18:0d:00:dc:e6:10:7e:e7:d2:61:c7:d4:80:1a:a2:
                    24:fb:be:6f:d3:f9:64:39:89:03:e6:f0:64:4b:c9:
                    5b:e1:ee:43:bc:d9:44:6b:84:99:37:8b:e8:fb:c3:
                    28:eb:58:e1:27:46:00:c8:b2:e2:97:0f:3f:c8:f8:
                    2e:14:40:88:e4:9a:a3:a8:0e:e4:f1:82:f5:c4:2a:
                    d4:8e:bc:d4:2c:83:1f:f9:a0:8c:a1:e9:e1:6c:41:
                    4c:1a:2a:f2:88:72:bd:e0:67:50:ee:7a:95:31:21:
                    ac:96:81:d8:46:ec:47:d8:d5:8e:dd:1e:ff:14:67:
                    71:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B7:BC:CC:52:81:33:F4:2E:B5:71:35:F2:B4:B5:2F:15:CC:66:32
            X509v3 Authority Key Identifier:
                keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:61:93:58:7b:df:02:4f:19:ed:a3:8b:aa:72:80:ba:69:0d:
         26:28:0c:db:f9:20:5c:9c:5a:b9:23:b7:32:83:02:1d:f7:1d:
         5a:76:41:25:a5:89:86:db:77:e9:38:e1:e0:7b:d1:d8:f4:15:
         f5:7c:25:7b:03:68:9d:42:7a:44:71:62:c1:70:3d:e4:66:93:
         f4:ce:8c:09:7c:c8:bd:6e:54:bc:b9:38:02:98:40:81:f1:59:
         c8:fb:ab:ee:87:c6:b3:7c:83:84:b0:f0:bc:d9:b3:b4:f4:dd:
         be:37:8b:21:ef:9d:b2:65:ac:ae:cf:98:cf:e4:3f:d3:b5:2e:
         e5:5d:f3:34:a1:c6:e3:8c:d3:57:a7:0e:76:27:7e:34:2f:2d:
         62:d3:8e:7f:7c:d8:6e:cb:5e:c5:37:c9:a4:0a:eb:e0:c0:d7:
         22:b9:f7:ae:b5:a3:a3:d9:de:a6:2c:7f:52:47:52:5d:26:99:
         0e:e4:b9:22:f5:bc:30:0a:f5:ac:22:41:a8:25:74:5e:63:8f:
         6c:8b:15:eb:45:7e:97:d0:cf:2e:31:b9:f6:0a:c9:91:d5:38:
         ca:e8:45:f5:96:a0:24:b3:5b:e1:c8:57:d1:55:6e:88:99:4f:
         3f:7b:42:12:be:20:7b:b3:8a:0a:85:45:04:27:59:3b:9a:91:
         35:8a:1a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:35 2026 by rpki-client