Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
File:                     F6Zubv3tEF6BIZCZBTal32A7qA4.mft (raw, json)
Hash identifier:          AT/Nh08V3dLexNXTnc6jglC/LwQXQ71hxwWmKG2wjMM=
Subject key identifier:   9B:C8:19:1E:90:B3:97:27:1F:27:CD:18:CD:72:A2:50:85:69:7E:79
Authority key identifier: 17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E
Certificate issuer:       /CN=A91DFFB0/serialNumber=17A66E6EFDED105E812190990536A5DF603BA80E
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
Manifest number:          01C9
Signing time:             Tue 23 Jun 2026 03:56:33 +0000
Manifest this update:     Tue 23 Jun 2026 03:56:32 +0000
Manifest next update:     Tue 30 Jun 2026 03:56:32 +0000
Files and hashes:         1: F6Zubv3tEF6BIZCZBTal32A7qA4.crl (hash: hYJb/S6lMRhGA9ocGEGXGQRbzBVon7+1U/9zCDvCxmw=)
                          2: BC75F7EEB69511EEA0196A79C4F9AE02.roa (hash: L566NxP+3p3aC7B54xorALA9UMPolemlhI+9jyVSM/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl
                          rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 03:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFFB0, serialNumber=17A66E6EFDED105E812190990536A5DF603BA80E
        Validity
            Not Before: Jun 23 03:56:32 2026 GMT
            Not After : Jun 30 03:56:32 2026 GMT
        Subject: CN=6a3a03f1-80cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:53:6e:9c:a3:3f:db:04:4b:5a:18:79:b6:
                    3c:0e:30:54:a8:52:8c:37:e9:a5:be:6d:b3:05:86:
                    0e:3c:a8:c0:d7:14:69:a4:0b:b8:ef:fd:b7:a5:0d:
                    a0:1a:73:c5:c9:6f:75:1f:84:e9:f3:77:3e:3a:45:
                    c3:fd:f7:28:32:02:f6:1c:46:5b:57:06:18:1e:8e:
                    7c:5e:2e:d4:06:ab:95:93:b7:b4:8d:97:70:40:89:
                    50:9f:70:e7:48:c9:32:d3:55:02:bd:f0:5a:24:57:
                    f7:a5:72:ab:d6:0b:4c:a7:98:25:57:4f:15:26:6b:
                    82:32:92:55:0a:ba:83:0f:7e:40:de:de:7a:b7:12:
                    04:ce:6c:9e:62:1f:97:b2:41:10:15:21:82:1e:f8:
                    65:3b:7d:e9:e7:b1:34:ab:e7:85:55:68:46:57:32:
                    b8:0f:cb:31:69:cb:45:e8:64:ad:dd:87:0e:50:19:
                    1f:70:22:13:32:ee:5d:27:a5:16:1b:4d:ba:5e:9a:
                    59:92:54:48:48:83:7c:09:f2:d6:e5:d0:e1:f3:3e:
                    0c:4f:22:fb:32:2f:d4:5e:b9:d0:da:94:0b:65:91:
                    77:3b:2b:5d:fd:24:74:e9:d9:5b:d0:6a:27:19:36:
                    96:de:4b:76:fb:0c:0f:31:23:d3:92:5b:a7:1e:71:
                    e7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C8:19:1E:90:B3:97:27:1F:27:CD:18:CD:72:A2:50:85:69:7E:79
            X509v3 Authority Key Identifier:
                keyid:17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b5:ea:1e:5c:14:cc:dd:46:73:47:55:04:d5:8f:65:d1:3c:
         96:9f:ab:d9:15:3f:e0:c2:76:80:a2:e8:78:b7:f3:74:c3:d9:
         20:4d:c2:86:e2:21:55:af:15:43:0f:e9:92:7f:d7:29:e4:e2:
         5a:10:72:5a:3e:ff:a5:91:9f:64:57:89:0b:45:91:5f:4b:07:
         f1:d4:9f:0a:75:ff:2f:19:97:a2:24:a9:02:1d:c4:b6:17:79:
         c0:be:eb:0c:1f:55:c2:b1:79:63:21:85:cb:08:a2:4f:67:3a:
         a3:03:07:ac:31:d6:9a:ed:d1:f9:c6:98:11:df:51:0f:c9:fb:
         25:b8:93:09:c4:86:cf:95:d6:5f:87:6e:21:f6:d1:27:9e:dd:
         66:84:bc:77:48:d4:21:d9:92:0b:60:26:c1:11:6e:99:65:53:
         58:f8:d0:50:be:86:b0:1d:c9:12:b1:2b:01:b2:13:c4:4e:66:
         31:b8:70:34:e5:a6:7f:e8:64:18:79:01:00:ad:b4:cc:73:89:
         e6:91:a9:4e:9b:20:7c:b8:b3:6a:9e:d1:c2:82:f0:04:96:16:
         bf:75:2c:3b:03:df:40:d8:72:cd:8e:92:71:5c:bf:eb:61:fd:
         62:a5:19:ab:dd:53:3b:93:0e:dc:a7:89:84:68:73:c0:0a:69:
         cc:21:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:12 2026 by rpki-client