Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
File:                     U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json)
Hash identifier:          M71C1fUCyP3zVqaxLtxStZ8RF/WANbJH1gyezORgpLk=
Subject key identifier:   E6:D6:FC:A8:A2:DB:8B:0A:BA:3A:3B:F8:7D:70:92:AF:9D:A1:BA:2F
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Certificate issuer:       /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
Manifest number:          01E2
Signing time:             Sat 13 Jun 2026 03:32:22 +0000
Manifest this update:     Sat 13 Jun 2026 03:32:22 +0000
Manifest next update:     Sat 20 Jun 2026 03:32:22 +0000
Files and hashes:         1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: /abdCeKRBHxCPzHpikLpJJyrYN5/7Khfse4d6f7H1TU=)
                          2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
                          rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
        Validity
            Not Before: Jun 13 03:32:22 2026 GMT
            Not After : Jun 20 03:32:22 2026 GMT
        Subject: CN=6a2ccf46-6010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:a3:b8:63:6f:ac:78:f0:d1:e4:47:54:dd:
                    7d:71:94:a9:dc:f9:66:00:a3:1c:e7:de:97:49:db:
                    e3:ef:3f:29:e1:be:16:af:b0:b3:e1:2a:11:76:12:
                    c2:6c:a5:af:a7:7d:60:6f:8d:50:e1:c5:55:1b:bb:
                    34:cd:84:49:1d:2b:ed:02:cc:aa:89:b8:0e:3f:8d:
                    96:c0:a1:9c:08:91:34:44:fe:59:1f:8e:34:8c:e8:
                    57:34:e8:e1:ad:37:d3:d8:49:f6:e0:41:db:a5:a4:
                    ed:4e:98:76:5c:38:f2:10:66:85:59:e4:59:9f:85:
                    ac:df:c6:8f:51:ad:1e:e8:1c:56:3f:77:3f:1e:59:
                    3e:84:fb:46:5d:8a:0d:a6:92:d5:11:aa:ee:8f:5f:
                    11:12:98:43:cc:1d:13:25:8e:6d:91:11:70:d3:5b:
                    60:9b:96:c4:74:3c:27:1a:4c:48:fc:47:d2:62:76:
                    3d:cd:89:8c:f3:97:73:3e:b9:1e:83:1b:22:c1:9c:
                    4c:8a:45:ca:f9:73:7d:70:48:b4:ef:4f:51:c9:fe:
                    20:72:02:6c:15:ef:d9:86:ca:54:84:d5:cf:2d:f6:
                    06:b7:7b:b4:0b:cd:64:50:22:27:5c:40:e0:7f:57:
                    10:9c:cb:87:d6:86:64:8f:ab:71:ad:5e:22:f7:1a:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:FC:A8:A2:DB:8B:0A:BA:3A:3B:F8:7D:70:92:AF:9D:A1:BA:2F
            X509v3 Authority Key Identifier:
                keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:59:a4:d3:2b:a3:3a:d7:37:05:26:fe:34:10:7f:90:f8:de:
         0a:15:78:60:aa:49:e9:a1:d9:b3:d7:ec:f0:06:84:d4:03:bf:
         5e:45:3a:c4:80:ed:0e:0d:81:fd:8f:30:17:ae:8e:f2:7a:3b:
         52:c1:5c:2b:c3:f7:00:6f:db:23:19:81:5f:75:88:5e:2f:5f:
         3f:a8:46:63:49:e1:6e:39:5b:a9:f8:66:09:84:28:f9:ad:61:
         ca:60:55:f0:90:37:6c:ed:c1:00:5d:9a:cd:4e:2b:6f:40:96:
         26:29:b2:a1:d6:55:1d:c9:e3:e2:3e:cb:87:88:64:2f:c7:b8:
         54:9c:c8:b3:20:05:48:fe:75:d8:50:59:67:0c:50:2b:38:b5:
         76:19:71:9e:7e:5c:4a:aa:ca:36:e6:73:b3:10:65:25:e0:c6:
         ef:16:ed:8c:f4:f9:d4:82:b9:ea:fa:20:9c:0e:07:1c:7d:33:
         f3:91:4c:d8:7a:ef:19:96:8d:1f:9b:75:4c:fb:32:d1:21:e9:
         64:d7:c6:28:aa:94:89:95:a7:56:71:ba:5a:d3:84:ff:fd:70:
         e2:46:00:8c:1e:21:35:38:1a:63:f6:90:89:61:10:f1:6d:34:
         cb:33:d4:50:3b:01:83:74:36:1f:26:ce:41:fa:03:3f:7d:12:
         84:5f:e7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:48 2026 by rpki-client