Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
File:                     IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json)
Hash identifier:          9+qGZTul4Fj2gi+UU7tgo66mF1Ducazbpur8JE+w8Yw=
Subject key identifier:   44:E9:8D:20:A0:C5:05:42:9C:10:3E:ED:67:FE:61:CC:58:46:28:37
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Certificate issuer:       /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial:       0949
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
Manifest number:          08EC
Signing time:             Wed 10 Jun 2026 20:30:10 +0000
Manifest this update:     Wed 10 Jun 2026 20:30:10 +0000
Manifest next update:     Wed 17 Jun 2026 20:30:10 +0000
Files and hashes:         1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: 7q9UOtTniQPA+QY65gbxokGA1s3sdmKHUSwHxoUfjW4=)
                          2: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=)
                          3: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=)
                          4: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=)
                          5: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=)
                          6: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=)
                          7: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=)
                          8: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
                          rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 20:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2377 (0x949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
        Validity
            Not Before: Jun 10 20:30:10 2026 GMT
            Not After : Jun 17 20:30:10 2026 GMT
        Subject: CN=6a29c952-42e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c1:fb:9f:d1:d3:9d:97:9c:f1:69:37:8c:e0:
                    69:11:bb:d3:bc:d5:e4:ba:63:32:24:c9:71:3b:ea:
                    0e:c5:53:f4:5f:4d:04:6c:81:c4:67:4d:d9:c9:14:
                    55:88:1c:1d:ff:2f:aa:08:cd:6d:a0:b2:fd:21:5b:
                    75:5d:03:f2:46:b6:49:48:49:e6:55:61:f3:7d:5f:
                    ea:f4:ce:25:53:c8:39:96:ea:9d:c8:6b:24:0a:39:
                    89:aa:63:3a:70:b5:c7:b2:9b:13:8f:d5:3a:fa:e8:
                    67:06:81:8a:0c:11:1e:69:f6:a5:74:89:e5:1c:10:
                    c3:cc:b4:e2:1c:49:9e:35:6d:50:8d:6c:aa:76:c7:
                    76:9f:a3:26:eb:df:6d:d1:22:f6:0f:cd:4a:d5:c6:
                    64:18:41:14:44:bc:41:42:76:e5:64:36:6f:f5:8b:
                    a1:3e:fd:1e:ae:32:5b:b1:69:92:39:fd:16:44:2e:
                    18:84:90:25:5d:cd:ad:8c:4c:03:c9:40:30:de:08:
                    5d:38:c5:f0:93:7d:7d:b5:bb:a5:cd:39:34:66:57:
                    3e:16:da:3f:90:b4:4c:10:65:b5:39:63:8e:b8:ff:
                    22:6e:d0:3b:88:c1:a1:73:f4:3d:34:45:67:48:b1:
                    cc:6d:4b:ba:5f:cc:8c:7d:93:cd:07:a6:b1:e9:68:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E9:8D:20:A0:C5:05:42:9C:10:3E:ED:67:FE:61:CC:58:46:28:37
            X509v3 Authority Key Identifier:
                keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f3:0e:c8:c6:a4:0a:52:3a:c2:36:4f:b4:13:97:6b:01:df:
         6c:dc:cf:86:86:06:23:e7:18:dc:d6:e3:6c:7a:19:1d:f3:92:
         98:56:62:1b:27:ee:66:ef:02:c2:1c:c8:bc:8a:ff:e9:26:2a:
         b2:d1:c7:55:96:f5:db:c1:f6:00:ec:93:d4:bc:ae:02:08:bd:
         cf:e3:61:0a:23:1f:4c:c7:91:1c:a7:1b:1b:08:9d:ea:8a:cc:
         fa:e1:db:f5:f0:1d:0b:d9:2f:80:35:f2:34:46:0c:f8:f6:13:
         a1:04:0c:04:91:6a:04:93:30:a6:49:60:e0:49:33:25:d3:3e:
         91:3a:e5:04:f5:c7:1e:b1:51:4e:74:a3:c0:1d:2b:9c:75:57:
         03:94:44:14:10:a0:4a:fd:c4:b1:5b:ca:5a:e1:df:6a:ab:6f:
         e6:49:6e:33:73:d5:17:50:4a:a5:53:11:e6:a6:5e:f8:00:ff:
         2c:4a:86:bb:86:09:f1:18:f7:b8:c2:87:4e:fd:3d:de:c7:8d:
         28:89:52:cd:29:3c:81:35:a7:a3:b8:78:e3:fb:fa:e7:9d:67:
         35:d3:e9:db:7f:86:e8:ee:75:d2:a3:3b:88:b6:9c:62:19:a4:
         4b:ce:57:df:dc:fb:1b:c7:4a:bf:24:2b:9f:4a:45:51:d5:32:
         ea:53:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:49 2026 by rpki-client