Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
File:                     k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json)
Hash identifier:          h6B13oMJUdYu/caP3FbEpWW/9acUMRvtj4LLIKCcJlU=
Subject key identifier:   B5:B7:08:45:68:2D:CD:EF:5E:74:71:BA:14:A9:DB:E2:C9:FF:55:08
Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98
Certificate issuer:       /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
Certificate serial:       02AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
Manifest number:          02A7
Signing time:             Sat 13 Jun 2026 01:32:41 +0000
Manifest this update:     Sat 13 Jun 2026 01:32:40 +0000
Manifest next update:     Sat 20 Jun 2026 01:32:40 +0000
Files and hashes:         1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: Zzraq2xUH5PI4oa7qoWJEEX3dPvhxsRTCilXBJaHatE=)
                          2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: AS7hONAEbWURBwN9VRm/e1ZIfPOhEfiT7U5Yp4Gpb94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl
                          rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111788, serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
        Validity
            Not Before: Jun 13 01:32:40 2026 GMT
            Not After : Jun 20 01:32:40 2026 GMT
        Subject: CN=6a2cb338-25cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:cb:60:f6:b0:02:be:6a:c2:52:34:84:70:
                    e3:4d:c8:d1:72:7c:83:8b:87:d7:13:21:35:3e:e2:
                    48:68:85:0e:e3:86:cf:ee:d4:9a:21:4d:21:fa:f1:
                    48:c0:80:a7:51:88:16:cb:2a:37:e6:ec:5e:eb:5b:
                    28:41:ca:23:4e:f9:49:a1:bc:c7:80:6c:80:5d:88:
                    6b:de:9b:15:51:8f:9d:f2:f5:e8:35:78:50:f7:c9:
                    7e:a5:0e:f5:4a:da:2a:22:ab:53:7d:0a:b9:8e:f8:
                    49:1c:83:b0:fb:a8:16:f1:1f:a8:ee:9a:0d:ec:1a:
                    91:14:d0:fc:b1:b2:79:49:97:0d:bc:19:ac:b7:5a:
                    c3:94:7a:c2:42:62:40:ad:14:87:f2:11:1b:f2:0c:
                    5a:b2:f0:cf:ea:11:b8:f7:15:50:02:32:f5:c1:bb:
                    08:e6:47:dd:97:10:a8:26:95:98:52:a0:6a:e0:42:
                    c8:1a:8b:7a:00:35:2d:91:39:73:f7:15:8b:df:a2:
                    4d:ff:79:e1:8b:79:55:f4:01:52:ff:c2:01:34:0d:
                    d6:ca:80:d3:df:38:01:38:cc:03:9c:d0:b7:03:b9:
                    19:75:18:54:ee:d2:02:57:73:64:35:d7:ce:4d:96:
                    e3:fb:99:d6:c8:14:26:33:9c:98:0c:90:c6:1c:e5:
                    01:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B7:08:45:68:2D:CD:EF:5E:74:71:BA:14:A9:DB:E2:C9:FF:55:08
            X509v3 Authority Key Identifier:
                keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:43:cf:d1:12:ca:78:d4:ee:55:cf:6c:e6:4e:47:70:26:
         35:3b:da:90:77:59:05:9c:47:10:ce:0f:75:52:0b:03:6e:de:
         1e:2c:49:a7:bc:30:62:ad:45:bc:60:3b:23:ac:cc:13:5d:38:
         1d:b3:7e:92:45:a3:51:4c:10:df:36:e6:e3:d2:b4:0f:b8:01:
         9c:f1:3a:7c:8e:f6:cf:e7:1d:bf:ca:35:d6:21:45:8e:89:d5:
         dd:5a:30:27:c2:5d:47:46:ea:76:b9:37:e0:94:09:8e:99:32:
         89:3a:11:b6:5b:73:1f:d8:0e:7e:1f:51:89:84:bd:02:18:57:
         5c:c6:39:5a:a4:25:4a:77:5e:7d:25:2f:f7:27:f5:d4:34:ce:
         4e:0c:b5:82:98:b4:f2:d9:59:85:54:eb:6b:45:e7:ac:dd:8f:
         cd:ff:e1:03:d3:89:e6:42:22:76:e6:01:70:c6:98:a5:6a:6a:
         24:e7:f1:4a:0f:7b:87:f3:1e:66:48:0e:b0:c5:39:29:64:55:
         3c:8f:3d:79:49:c1:25:c9:9f:30:90:6d:a2:28:56:55:97:6f:
         6d:c8:4d:49:24:9e:08:d0:14:e1:b5:fd:c2:8d:85:4e:23:6c:
         ff:99:83:37:34:ac:64:16:d2:9e:5c:6b:e5:79:55:07:94:d2:
         57:11:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:31 2026 by rpki-client