Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
File:                     E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json)
Hash identifier:          wzwEeiyl9Z8V1KQTxj2VPt7qXUuWC5V11s3kFvV9mBQ=
Subject key identifier:   DA:1E:FB:8E:D0:46:7B:8B:2B:D6:08:53:11:E2:85:BA:12:BD:3F:8C
Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56
Certificate issuer:       /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256
Certificate serial:       08DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
Manifest number:          08CF
Signing time:             Mon 22 Jun 2026 20:27:29 +0000
Manifest this update:     Mon 22 Jun 2026 20:27:29 +0000
Manifest next update:     Mon 29 Jun 2026 20:27:29 +0000
Files and hashes:         1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: YYtdk/PIvo+B3gRndvYwx+GlnQ1zpFpikpgXbsmeqQM=)
                          2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: +PCxlBcrUQ01gjtIwgn/yayahZV/k+s8u1ahf84hyOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 20:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256
        Validity
            Not Before: Jun 22 20:27:29 2026 GMT
            Not After : Jun 29 20:27:29 2026 GMT
        Subject: CN=6a399ab1-d227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:70:fd:41:60:6f:b1:3a:36:63:01:23:bd:
                    6a:2a:2d:9f:7e:68:de:92:97:1b:62:50:01:e5:ca:
                    79:32:b7:37:e8:14:77:aa:46:aa:93:bc:2c:1a:f9:
                    76:e4:b6:24:98:32:4e:1a:5f:5c:47:2e:3d:1f:8d:
                    d3:94:e3:2e:e2:a4:2d:c8:23:31:be:6a:77:9b:d2:
                    ef:8e:7f:45:51:62:ef:7a:ce:64:c4:f0:2c:9a:2d:
                    9b:03:fd:4c:d5:4e:4a:68:f6:4c:7b:29:95:37:88:
                    31:41:af:47:90:0e:c1:0c:9a:44:15:47:1b:08:cc:
                    b2:a2:f2:4a:3e:d1:29:80:36:18:78:f1:cf:f0:5e:
                    d7:49:6e:00:2a:78:6a:13:b9:c7:13:59:d9:aa:83:
                    f2:51:fa:8d:a6:1d:20:24:52:f2:8e:b2:0b:e2:12:
                    8e:78:73:15:0c:af:c6:5f:83:26:be:7a:cf:77:82:
                    25:16:aa:09:69:3f:1b:d1:6b:0a:35:18:67:96:31:
                    93:a4:18:2e:c5:e9:e8:2d:98:37:57:a3:ac:aa:e8:
                    97:c6:ad:d8:ee:c2:22:f6:55:95:a0:08:88:81:d9:
                    b2:a1:a5:72:61:a7:4f:b6:e4:39:e2:1f:af:46:f0:
                    6f:08:d4:a9:8b:3b:55:f7:23:c2:a9:50:6e:af:9b:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1E:FB:8E:D0:46:7B:8B:2B:D6:08:53:11:E2:85:BA:12:BD:3F:8C
            X509v3 Authority Key Identifier:
                keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:2d:15:0e:8a:fd:3a:61:43:7a:50:41:3a:f2:b3:fa:1b:f7:
         69:47:ca:a2:97:30:18:be:65:91:5b:29:42:fe:62:8b:1b:7c:
         46:0f:f0:a4:f5:b4:67:59:17:7d:4e:13:af:78:cf:40:4f:ec:
         7b:70:b6:9c:ab:b2:71:ba:3b:ec:f5:67:5d:9a:94:fb:1f:a7:
         c0:55:15:3c:b7:6f:0b:10:60:16:5e:86:25:9b:45:7d:b4:52:
         d1:41:3c:6c:b0:72:c4:bb:52:a3:1d:bc:70:46:80:ba:3f:84:
         be:d3:32:8e:2b:b2:fb:f3:72:db:29:e7:0c:f6:ed:6f:6a:d6:
         25:6d:bd:4d:22:09:84:67:37:2a:72:fa:a1:81:16:ca:91:ce:
         8e:fb:57:b5:7a:e1:e8:c4:31:7b:58:59:80:83:61:77:67:d8:
         a8:4e:6d:9e:03:c6:26:a2:32:d8:0c:4d:d9:44:6d:7f:7b:9b:
         e6:75:14:28:1e:9b:4d:9f:c0:57:18:a0:42:d4:2f:68:b3:6d:
         ae:ca:07:33:b0:55:d0:48:b2:24:12:f1:9a:34:bb:af:7a:ed:
         f9:74:5c:43:79:14:c2:4f:9d:a7:80:b9:f6:23:5a:32:66:b1:
         3d:fe:49:d0:be:03:64:5c:2b:cd:23:80:06:8d:0e:7b:8b:42:
         25:63:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:07 2026 by rpki-client