Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
File:                     4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json)
Hash identifier:          VTkljNtHOaTs3IKiKwDGP3cJVVEO444PFMQt+bglPN0=
Subject key identifier:   0F:0B:2F:41:A5:28:DD:7B:58:B9:B4:44:B5:0E:C7:8E:85:4B:82:68
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Certificate issuer:       /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial:       0873
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
Manifest number:          085F
Signing time:             Mon 22 Jun 2026 20:55:08 +0000
Manifest this update:     Mon 22 Jun 2026 20:55:07 +0000
Manifest next update:     Mon 29 Jun 2026 20:55:07 +0000
Files and hashes:         1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: GnREdFXUunlcVXDbUFZjDd1XbQ8ebb4fjP95M79JJO0=)
                          2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: g7qg1j/BlXjx4IL6IJ73Vzos8b7yBkmpoG+vbhDXfpI=)
                          3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: 2R/fqixLYXQj2CN0sqD6jpnwoixSqADSrbi58jnvIx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 20:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E
        Validity
            Not Before: Jun 22 20:55:07 2026 GMT
            Not After : Jun 29 20:55:07 2026 GMT
        Subject: CN=6a39a12c-0648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b8:62:fa:28:87:3f:91:00:77:e3:13:cb:61:
                    64:09:77:ea:61:64:12:d9:d1:eb:27:db:30:00:ab:
                    01:4c:b7:82:d7:35:35:c1:20:40:e6:f4:06:4a:fe:
                    a2:1a:6c:ce:9a:0f:23:e1:ce:a9:7b:44:dd:89:e2:
                    37:27:80:18:a1:f5:b8:d8:92:0c:2c:2b:64:f4:d5:
                    97:e2:09:e9:0f:ed:41:8b:d3:9c:bf:d3:87:17:70:
                    a0:cc:f0:9b:c6:ef:59:d7:5b:44:4e:5a:8e:d0:d8:
                    b4:a0:69:6f:13:27:7e:3b:4d:72:a4:77:93:e8:24:
                    23:12:ea:f0:30:b7:48:8a:90:21:4d:29:d7:61:95:
                    92:f6:1e:60:d6:ae:c2:d5:d2:e4:40:30:63:c5:a0:
                    9b:a2:3d:21:7e:09:55:28:bc:ea:f3:e4:72:20:9e:
                    69:6b:89:9f:ac:8d:ce:33:0f:1d:41:c7:e9:f8:3f:
                    1d:02:58:e0:90:74:a9:2f:ab:b3:ec:52:83:a0:8d:
                    f9:49:51:03:7b:1c:1b:30:f2:fb:ee:93:25:c3:cd:
                    39:fb:c0:29:fd:97:c4:72:93:46:f3:85:2d:2d:13:
                    4d:02:b2:d0:86:4b:9c:e0:92:a3:ca:39:39:6e:a8:
                    55:ec:f6:7a:2d:28:40:a5:cf:4b:9c:fa:a0:4e:c7:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0B:2F:41:A5:28:DD:7B:58:B9:B4:44:B5:0E:C7:8E:85:4B:82:68
            X509v3 Authority Key Identifier:
                keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ec:e1:77:78:08:de:cd:d0:0f:0a:e2:d8:c6:4d:fd:4f:cc:
         f6:b0:df:03:2b:e7:00:93:00:78:f2:4d:cd:3e:7a:67:7f:bd:
         48:97:06:55:47:a0:06:53:da:a5:87:54:be:29:37:1c:a9:0b:
         21:1d:96:80:18:a1:f2:8b:14:23:eb:2c:82:61:e9:0d:7d:58:
         93:fa:29:b1:3a:84:7a:4b:93:ba:3d:58:b8:68:0a:fe:63:8c:
         53:c8:16:9f:0e:20:4c:57:5d:8f:a8:85:a7:c4:27:88:bf:49:
         48:c9:6c:b3:8c:df:de:b7:db:fe:76:23:0c:36:2d:dd:d4:64:
         7b:ce:db:af:8f:b3:d4:03:68:95:97:26:95:a7:9a:25:cd:57:
         2b:c2:2b:5c:20:d9:39:bc:d5:09:e3:5f:d6:37:0a:bb:58:f4:
         8c:d8:ec:78:54:c8:54:dd:b6:07:d9:3c:82:68:82:72:61:41:
         eb:8f:23:a1:11:54:66:a2:3f:cc:c1:c2:e3:8e:58:19:64:3a:
         69:5d:fe:f5:4e:35:05:7a:17:14:c3:c4:80:b0:a9:86:c5:ac:
         81:93:0f:d8:c0:59:dc:dc:4a:aa:20:57:fa:83:7a:69:6b:23:
         70:80:6e:7b:1e:1e:c5:19:eb:23:54:65:5c:d8:30:a0:79:56:
         ad:79:f3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:12:59 2026 by rpki-client