Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
File:                     83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json)
Hash identifier:          O9Y9zveVs9FUeK0o55JHUPFHEfrNUJG30qyBhFvLEq0=
Subject key identifier:   A9:30:7E:69:AD:C6:80:A2:55:4E:74:76:49:4A:A3:30:35:17:A1:5E
Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
Certificate issuer:       /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Certificate serial:       0A4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
Manifest number:          0A40
Signing time:             Wed 10 Jun 2026 19:44:31 +0000
Manifest this update:     Wed 10 Jun 2026 19:44:30 +0000
Manifest next update:     Wed 17 Jun 2026 19:44:30 +0000
Files and hashes:         1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: 6FsI83Ivzz3LdQ1aoXydLQp4BnGOfvx5ehblEaNaFkM=)
                          2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: ouYBwpfCXuAbXe6I0vrvzKSbU872/FUx3W+kR5PDwWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2635 (0xa4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
        Validity
            Not Before: Jun 10 19:44:30 2026 GMT
            Not After : Jun 17 19:44:30 2026 GMT
        Subject: CN=6a29be9f-edbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:ea:39:2d:72:e2:ab:ca:d9:9d:49:97:7c:
                    21:52:d6:c2:df:a0:cf:6f:9e:be:b6:b8:e1:80:4d:
                    c8:5c:41:12:84:8d:6b:9f:b4:56:25:da:2f:8f:f8:
                    3d:cd:b4:40:6b:4b:54:9a:39:a8:09:03:5f:da:fb:
                    c2:a0:6a:7b:09:fa:c8:b2:c2:53:37:04:76:e4:59:
                    3e:63:e3:09:31:27:dc:3a:01:e0:8a:2a:f7:6a:9f:
                    a1:9e:8b:fd:3c:bc:59:ec:af:9b:cb:68:c7:c2:6f:
                    e0:e5:6b:2e:7e:ad:3f:9c:45:93:e4:9c:b0:71:f8:
                    1e:f3:96:83:59:a8:16:bb:0f:aa:78:be:72:4e:3c:
                    31:fe:f4:09:6a:3b:47:de:f4:c8:26:54:0d:9b:05:
                    52:2f:32:d5:ad:7a:33:78:f8:9a:c9:a1:22:9e:39:
                    0a:f9:b8:c8:69:b0:83:f5:3d:5e:b4:71:eb:6f:b0:
                    f3:d0:67:66:02:53:f4:63:52:f6:49:14:cf:c0:ab:
                    25:80:7c:ae:a9:0c:73:e7:52:98:36:01:1c:5b:60:
                    c7:df:46:79:7a:9a:8e:e1:84:5f:be:59:3e:79:37:
                    a1:06:cf:f2:27:44:04:a0:e1:0e:d7:60:d0:3d:f3:
                    56:2e:f6:6b:97:61:73:14:f1:21:9f:57:6c:fd:b5:
                    51:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:30:7E:69:AD:C6:80:A2:55:4E:74:76:49:4A:A3:30:35:17:A1:5E
            X509v3 Authority Key Identifier:
                keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d0:5b:c9:6e:9d:b5:60:e3:bc:a6:de:7f:28:c2:f0:d5:63:
         0e:6b:1d:d2:91:ef:ac:39:92:b0:d0:7c:cd:21:d9:6f:a6:ca:
         ef:72:07:19:fe:36:fb:48:a2:ad:d0:d0:20:88:03:3b:50:28:
         94:df:86:1d:b4:25:16:ed:ff:06:59:2f:6e:8c:f2:d5:87:47:
         48:41:72:6e:ba:10:af:e9:06:58:36:55:da:1e:7a:e9:2b:14:
         f9:3d:0a:67:50:52:56:b2:1c:1e:8f:b6:1e:90:17:d0:60:14:
         ad:70:4c:2e:f1:a4:38:75:9e:e5:e7:23:a0:80:21:89:4f:27:
         30:fa:71:e2:bc:d2:d0:36:43:ae:22:bc:fa:99:96:86:90:97:
         d1:52:4b:8f:2b:a8:58:2d:9e:d8:5e:4b:19:a6:e1:9f:d1:88:
         4c:47:ef:5d:df:b5:2e:00:ac:65:be:31:d5:01:09:49:33:ee:
         6b:bc:11:f9:fd:ce:a3:e5:8f:6f:80:67:f5:c5:49:fc:60:45:
         6b:e7:b0:85:d9:a1:04:e5:a6:f4:58:d4:ea:95:ee:1b:79:d6:
         bf:1c:75:01:d2:29:2d:4b:a9:ec:ae:4f:94:4b:97:9b:73:c8:
         65:ad:eb:ff:3c:43:08:02:0e:15:8c:eb:9e:28:80:7b:a0:73:
         e8:95:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:10:10 2026 by rpki-client