Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
File:                     IcuqoETeGlZkRp9Bi80Id7ITlzo.mft (raw, json)
Hash identifier:          mRPXyDAdMt8jM7pPz6iCZN9olh7svOy+3Rnn9YvbmHg=
Subject key identifier:   00:9A:A9:9D:AA:22:92:C6:AD:81:85:C9:79:E8:E0:6B:20:FF:67:A0
Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
Certificate issuer:       /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
Manifest number:          01FD
Signing time:             Sat 13 Jun 2026 03:12:54 +0000
Manifest this update:     Sat 13 Jun 2026 03:12:54 +0000
Manifest next update:     Sat 20 Jun 2026 03:12:54 +0000
Files and hashes:         1: IcuqoETeGlZkRp9Bi80Id7ITlzo.crl (hash: rdMEx07QE8WXsBk4bKJxcdS46H4vu7v6b3INbXiAZ4g=)
                          2: 6538D178628E11EEBF375134C4F9AE02.roa (hash: qVMa/Xz0rkX7Diy34qfbgTAPdgO1If06CjZkRcC7AXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl
                          rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911393B, serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
        Validity
            Not Before: Jun 13 03:12:54 2026 GMT
            Not After : Jun 20 03:12:54 2026 GMT
        Subject: CN=6a2ccab6-b135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:ed:19:c2:b1:35:06:70:9c:f1:04:c3:64:
                    f3:b5:88:5f:e5:d5:3c:f8:ef:f3:86:df:d4:6c:92:
                    6e:b5:9f:4b:7a:fc:be:25:67:1f:8d:08:75:69:37:
                    41:9f:b8:60:0a:1f:b5:a6:91:9c:5f:a1:95:d5:88:
                    28:7c:5c:65:7f:27:b9:71:23:bb:63:35:ba:20:98:
                    29:34:83:c9:8d:65:61:bd:5a:56:11:05:bf:46:56:
                    f0:1b:a4:53:66:61:5e:96:2c:1b:54:98:8a:19:b3:
                    f2:5b:55:a7:4a:56:40:e5:8b:70:d6:a0:b9:4c:86:
                    d3:bf:4f:02:4b:68:81:58:bc:1f:44:d9:a5:c9:be:
                    d8:e8:d2:d3:58:55:18:5d:51:b2:b2:b0:fc:52:16:
                    4a:42:90:b9:0f:f3:a8:35:80:4e:c6:8d:aa:f4:2f:
                    5f:44:21:0a:63:93:80:af:f3:1b:01:94:d4:1e:a1:
                    4f:4e:50:83:d1:c5:34:69:37:db:4c:01:ee:f2:d6:
                    11:97:41:f9:4d:45:84:71:b0:40:43:12:f9:34:c2:
                    a7:df:67:4d:35:53:f1:76:51:de:8a:7a:46:69:bb:
                    27:03:cc:30:c0:f3:37:bf:fe:aa:bd:09:19:12:82:
                    32:d9:96:04:4b:53:25:34:46:21:59:8d:df:40:d0:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9A:A9:9D:AA:22:92:C6:AD:81:85:C9:79:E8:E0:6B:20:FF:67:A0
            X509v3 Authority Key Identifier:
                keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0a:7c:da:ac:29:33:f1:6c:66:0b:45:02:d1:5f:3a:da:e4:
         c6:71:7a:89:c2:2e:74:0b:e8:05:fe:d2:2d:cb:90:91:ae:c4:
         37:8a:61:de:93:88:ff:e6:68:f3:ca:9d:5b:16:33:5a:d4:17:
         2a:2c:6f:e3:9f:a6:73:f4:7e:6c:a3:2e:64:01:1a:57:27:e4:
         7a:7c:b6:63:85:83:05:4c:a6:00:33:17:56:ee:6e:7b:7d:bc:
         ec:4d:15:e8:44:12:8c:c4:9b:a0:8e:92:dc:be:5e:c0:e8:f4:
         6d:60:2d:f0:2a:e0:11:73:26:6e:61:f3:25:e2:4b:4e:11:aa:
         a4:5e:67:51:ec:b6:f5:4e:1b:a4:8c:1a:88:56:3c:5f:e4:db:
         a8:79:79:b7:52:a5:aa:fe:04:a5:2d:69:6d:45:7b:72:2e:dd:
         58:8f:af:39:3f:bb:68:21:af:e8:85:92:75:73:65:1c:fc:42:
         a3:ff:77:9f:b5:89:03:a0:21:61:ad:f0:d3:aa:f1:47:8e:ab:
         44:c7:06:9b:bf:a6:1f:f8:48:42:c3:5c:6d:76:b3:2e:67:9d:
         72:76:e6:e8:ba:22:11:21:bf:a7:eb:13:2f:b2:04:86:3c:0a:
         77:68:7d:71:e6:83:c5:1c:8f:d4:e4:a2:55:28:19:a0:1e:88:
         96:53:de:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:43 2026 by rpki-client