Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
File:                     TihN8oxlIKdxEwQV85PINH1ubek.mft (raw, json)
Hash identifier:          cl3ul7kjqLhIPCBvLcWiG4omizfxCXWYoHGmIEYPVv8=
Subject key identifier:   8E:DE:8B:61:4D:8C:B6:4E:E0:4F:09:6B:C4:33:E8:E3:B8:55:3D:76
Authority key identifier: 4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
Certificate issuer:       /CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Certificate serial:       1F12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
Manifest number:          1F06
Signing time:             Tue 30 Jun 2026 16:08:52 +0000
Manifest this update:     Tue 30 Jun 2026 16:08:52 +0000
Manifest next update:     Tue 07 Jul 2026 16:08:52 +0000
Files and hashes:         1: TihN8oxlIKdxEwQV85PINH1ubek.crl (hash: yVzUi8z0s0n/ylsqaCC8peWnpkWK2k6Tm7MspCnDIoY=)
                          2: 9071A5E690CB11E6A804EF84C4F9AE02.roa (hash: BCoqh3XwiuOYuTN55f/bRuAb674C9ONaqrljAIYqfbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl
                          rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Jul 2026 16:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7954 (0x1f12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC765, serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
        Validity
            Not Before: Jun 30 16:08:52 2026 GMT
            Not After : Jul  7 16:08:52 2026 GMT
        Subject: CN=6a43ea14-89df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:3c:be:e9:66:ad:d8:fe:f6:c2:b0:3b:38:
                    21:cd:cf:c1:d0:dc:18:d7:97:2f:b3:70:ea:ca:0e:
                    bf:7a:0a:c0:b5:e6:a6:02:27:93:14:c3:aa:65:11:
                    ff:7c:73:3e:e6:8c:4a:8f:6a:d0:ec:a8:53:f3:85:
                    ee:39:08:39:68:52:dd:fc:4a:79:7d:3e:0b:8a:a9:
                    53:7b:ad:19:12:d4:26:50:d1:1d:69:bb:a0:87:15:
                    5c:fd:81:2f:13:25:6f:f8:15:2d:86:ae:28:fc:57:
                    f1:b3:28:84:d2:05:11:89:7a:78:12:13:18:21:16:
                    06:83:11:e8:29:cf:d4:29:aa:98:3a:2b:d5:fe:6d:
                    94:91:6a:29:41:8f:52:43:65:e3:a8:24:76:93:b3:
                    8c:cb:d2:f8:9e:08:fc:78:7b:4c:99:e1:9f:35:84:
                    40:dd:d4:95:43:03:ef:b4:0b:08:f7:1b:93:6f:9e:
                    99:3b:5c:62:aa:4b:13:b9:e9:55:31:81:08:d0:09:
                    a1:7e:11:1b:ff:3f:2e:15:18:0e:4e:7c:be:c3:72:
                    7a:4f:f2:0a:62:85:ec:08:6c:7b:b9:80:1d:fb:77:
                    b4:f9:13:e4:18:5b:a9:9c:22:87:53:ba:42:83:19:
                    27:e9:b0:10:ed:19:3c:01:15:ac:68:60:e1:5f:bd:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DE:8B:61:4D:8C:B6:4E:E0:4F:09:6B:C4:33:E8:E3:B8:55:3D:76
            X509v3 Authority Key Identifier:
                keyid:4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:02:af:52:31:56:a0:11:ee:c4:9b:cd:44:db:64:bc:ce:e1:
         bd:15:2b:36:dc:59:e8:b0:66:1d:1f:22:0e:11:cd:eb:e5:0e:
         a2:27:71:c9:25:32:7c:02:06:c0:ad:3a:68:89:29:11:86:ef:
         e9:97:75:06:cc:bc:4e:27:93:80:21:a8:12:56:69:95:de:1d:
         2c:9f:62:ce:7f:7f:5b:a2:2e:97:2b:6b:f2:b7:c3:7c:f9:e3:
         6c:65:d2:fe:a9:9c:fb:0a:e4:3f:14:71:64:92:41:2c:14:7f:
         8b:c3:9a:b8:2c:51:c6:ff:4d:d7:87:9c:27:2e:75:f7:51:68:
         04:17:8d:a9:48:fc:cc:8e:37:fd:51:e1:1e:1a:99:e6:6e:a4:
         4b:2c:67:aa:aa:f2:f5:bd:3d:f6:bd:5e:0d:96:67:da:98:b6:
         66:cf:36:ad:a3:c4:c4:b4:36:c0:85:20:22:56:69:fe:d9:0d:
         ac:0a:3e:ff:50:c7:15:05:70:bf:f8:42:97:a1:e8:4d:7a:aa:
         2c:0f:57:6f:6d:82:88:63:a8:95:7f:67:c1:42:ec:cf:5c:4c:
         de:8a:9d:2b:0d:fa:54:ac:09:b4:a8:19:f4:4c:b0:4a:7a:30:
         09:62:5a:94:17:9f:ea:ec:ea:a5:e4:c9:23:5c:db:7a:52:8e:
         88:d6:4e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:54 2026 by rpki-client