Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
File:                     g86FOnpm6rnh8jNGcR09yX1XWXg.mft (raw, json)
Hash identifier:          OhBphEdGsu8x9V7AnNESU86tF8i633xEbqHROoav1K4=
Subject key identifier:   18:8D:BF:F5:B5:BD:24:44:3C:07:5E:F5:25:89:B1:67:D3:BE:97:67
Authority key identifier: 83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78
Certificate issuer:       /CN=A91E9BC4/serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978
Certificate serial:       0F03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
Manifest number:          0EF7
Signing time:             Mon 22 Jun 2026 17:36:44 +0000
Manifest this update:     Mon 22 Jun 2026 17:36:44 +0000
Manifest next update:     Mon 29 Jun 2026 17:36:44 +0000
Files and hashes:         1: g86FOnpm6rnh8jNGcR09yX1XWXg.crl (hash: Rg8kEjTd1+yk1bl764JK90cQR23z4MSm/fyNeuOLktQ=)
                          2: 3B495FFCA46211E9B730310FC4F9AE02.roa (hash: 4lDpGUim/KAgzaEuEFqQeILbJPyTanzET71bwtPn5Wc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl
                          rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3843 (0xf03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9BC4, serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978
        Validity
            Not Before: Jun 22 17:36:44 2026 GMT
            Not After : Jun 29 17:36:44 2026 GMT
        Subject: CN=6a3972ac-5b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:63:0b:7f:0a:6d:b7:35:c3:47:4c:37:d3:
                    50:5b:5e:61:6d:12:04:b1:5d:0a:5e:1e:2c:ac:67:
                    91:8e:b5:97:b7:b1:0b:89:ec:59:aa:8b:9f:dc:49:
                    fa:f0:5b:e9:d6:b0:c0:c7:d2:d5:55:61:1c:4a:44:
                    3a:e3:41:63:1e:b6:89:b5:3e:88:af:80:e7:5c:96:
                    ec:52:cc:9c:ba:14:8d:7e:b3:3c:84:a1:51:4f:4e:
                    21:9e:be:1b:5b:36:11:ed:65:3a:90:d8:92:67:6d:
                    f2:ed:d0:98:7d:e2:05:29:5f:b7:c3:d8:4b:b9:51:
                    12:5e:86:04:09:eb:fa:06:c1:92:dd:55:2a:05:9f:
                    b3:a8:69:5e:86:c3:3e:a1:6e:ae:02:e4:bb:67:60:
                    cf:dc:8d:bb:b8:51:04:50:bf:3c:fb:02:0d:7b:5f:
                    26:b1:a5:a2:17:ce:17:c0:c0:3b:32:38:19:7f:fa:
                    e0:13:9d:a0:cb:05:14:a0:36:d0:be:05:e1:32:c1:
                    38:f4:66:b7:71:c3:97:78:88:7c:fc:ac:c5:e1:6c:
                    aa:5e:a3:b6:89:ec:64:e9:dc:3d:43:88:64:1a:9f:
                    91:61:2c:63:7e:cc:e4:c5:03:28:74:ae:be:ca:ca:
                    08:d5:31:b1:a9:c2:61:41:80:41:30:18:2d:16:d6:
                    49:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8D:BF:F5:B5:BD:24:44:3C:07:5E:F5:25:89:B1:67:D3:BE:97:67
            X509v3 Authority Key Identifier:
                keyid:83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ba:6c:e1:32:15:56:2a:0b:af:a6:42:78:cc:ab:46:a7:98:
         22:2a:12:0b:0d:f9:45:91:e3:c9:ec:a0:4b:d1:f1:d7:3b:0d:
         8a:58:ef:aa:fa:0e:94:0d:f7:d6:b5:a3:a8:f0:d1:7a:10:6f:
         ac:03:76:ab:72:e1:90:be:1a:a5:ab:ed:32:6a:be:c6:dd:8f:
         2c:87:cf:13:70:40:89:e8:8b:95:60:08:ce:8e:61:ac:75:50:
         dc:9c:e0:1f:bc:7b:b1:f4:e8:a1:19:a2:14:fd:b1:6c:02:5e:
         ed:d9:b7:0c:23:dc:1c:9e:fb:8a:04:ec:47:11:61:ce:cc:22:
         f6:c7:92:b1:a1:6b:8d:bd:40:59:9b:a6:79:5f:cb:df:12:97:
         da:6c:dd:81:96:9b:74:eb:f9:fa:8a:4b:a8:ad:42:af:6d:39:
         bd:2a:40:0b:b3:4f:54:ec:f7:dc:6a:c2:03:44:84:41:36:75:
         f9:cc:a5:07:5a:b5:f1:78:98:4a:e5:75:ac:ed:3c:03:39:07:
         25:e4:e0:af:fe:13:39:d3:97:41:25:a5:fe:41:25:a8:d8:73:
         96:9b:ac:19:a7:fd:e7:b2:46:a9:67:6f:d4:70:1d:1f:34:06:
         f5:2d:c2:53:1f:0f:b2:1a:c0:3e:2b:24:9d:93:a8:8f:67:9c:
         47:25:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:38 2026 by rpki-client