Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
File:                     l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json)
Hash identifier:          9Pl0QkNLSpmrAA4CkKesAnL7hPec+eAwaIqkCgXY0xw=
Subject key identifier:   DC:FE:28:4E:86:5E:71:D2:8E:C9:E0:5B:04:04:E1:35:A5:60:AC:6C
Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4
Certificate issuer:       /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
Certificate serial:       145A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
Manifest number:          144D
Signing time:             Mon 22 Jun 2026 16:50:55 +0000
Manifest this update:     Mon 22 Jun 2026 16:50:54 +0000
Manifest next update:     Mon 29 Jun 2026 16:50:54 +0000
Files and hashes:         1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: 0Uve4Cw6akNt40n7WvBqBSzR+HzCbY5dJ2aosAVwvDo=)
                          2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: Fg1IcAZ2A1EMwqD7lRtBcOmZe0TzbfUCsxVw7nft8S4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 16:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5210 (0x145a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
        Validity
            Not Before: Jun 22 16:50:54 2026 GMT
            Not After : Jun 29 16:50:54 2026 GMT
        Subject: CN=6a3967ee-e2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:ce:e1:b7:f7:e7:03:8a:38:2c:05:36:ce:
                    ac:51:51:31:e7:a0:59:56:9e:7b:1b:c7:07:dd:c3:
                    1c:05:59:dd:d8:6e:f5:83:40:c3:9f:ea:57:ad:e5:
                    07:67:1e:94:03:5a:14:aa:e4:59:89:09:27:94:2e:
                    7d:88:de:f2:65:7a:19:61:97:4f:74:be:31:10:aa:
                    8d:7b:3e:13:54:e3:f8:9a:85:0f:7e:d7:22:8e:5c:
                    ee:cf:ff:6f:28:37:8f:7e:af:5c:7d:e1:b6:78:3d:
                    7a:84:84:c2:b4:45:ba:4e:2a:a6:f6:a4:bd:fb:8e:
                    1b:03:87:9a:45:81:97:38:73:94:96:4b:67:46:d0:
                    b0:0a:89:08:fd:ac:4e:56:f8:ef:4f:74:e9:3c:c4:
                    de:f0:a8:27:ff:27:d5:b6:9a:fe:e7:aa:21:b7:06:
                    09:eb:81:b9:3f:d7:e2:87:14:37:d3:4b:62:f6:a9:
                    47:70:71:02:ab:48:72:84:ed:d1:48:1f:8e:85:8f:
                    07:d9:4d:98:ee:5a:b9:1a:ee:ee:72:6e:cd:1c:82:
                    0f:ff:66:6a:3e:d9:99:c9:00:c8:2e:c6:83:0e:77:
                    3e:95:d9:5d:99:1b:37:ca:0b:8b:5c:bb:29:c1:df:
                    b1:4c:ed:b0:02:a2:d8:d5:59:6e:cd:bc:ae:ad:aa:
                    1c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FE:28:4E:86:5E:71:D2:8E:C9:E0:5B:04:04:E1:35:A5:60:AC:6C
            X509v3 Authority Key Identifier:
                keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:88:e0:92:a5:34:28:d6:d1:b5:15:b4:44:f5:f2:94:49:21:
         45:c5:66:28:55:53:bb:f2:f7:1d:8a:1b:b2:65:aa:f9:e7:05:
         6d:13:d6:cb:55:73:11:5c:4e:4d:e6:b3:db:49:1b:31:c7:b8:
         41:52:c7:b7:7e:5a:4c:32:57:6a:2a:ab:c3:7f:c6:bf:37:89:
         f2:8e:dd:68:aa:00:63:41:3e:64:bd:32:7a:4a:00:42:ed:da:
         2f:76:57:36:21:26:c3:ed:2d:c2:ab:56:f0:65:f4:61:ea:1f:
         1d:4c:c7:ca:dc:a7:f6:5c:9c:65:cb:07:31:f8:cc:44:8d:dc:
         02:10:70:d4:96:b2:3a:92:7a:58:af:8b:1e:3a:f3:3e:cf:e4:
         70:77:97:ff:e3:2c:70:49:74:01:bf:b9:75:fa:da:9d:a8:9e:
         db:85:09:0d:b4:e0:a5:a4:cb:e8:3d:91:7b:8e:79:19:e6:f9:
         ce:13:e8:5a:23:d4:11:48:1a:06:d3:71:a5:30:ae:bc:c6:af:
         37:de:87:16:72:65:d7:09:b7:51:c4:3d:75:a1:c5:43:0f:75:
         91:b8:6a:86:90:e1:f8:76:72:23:88:f3:49:3b:4e:a2:f4:da:
         71:e9:67:63:25:13:f6:9b:47:56:ed:9c:27:20:98:a8:2c:cf:
         98:8f:0b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:43 2026 by rpki-client