Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File:                     agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier:          LYGCibfDv2Le2T2nPAft0HznkDwS0J2bUN5eYSb6tJs=
Subject key identifier:   C0:5B:A7:FC:22:65:B2:9E:7E:0E:DD:FB:EE:3B:16:79:C5:D9:D9:C6
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer:       /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number:          0131
Signing time:             Thu 11 Jun 2026 07:56:33 +0000
Manifest this update:     Thu 11 Jun 2026 07:56:33 +0000
Manifest next update:     Thu 18 Jun 2026 07:56:33 +0000
Files and hashes:         1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: sEMKGHB0V8bGVbH2qWYilIiEKhHO6ivqbug6arTH/Rk=)
                          2: FD380306BD4D11F091CCAA18C4F9AE02.roa (hash: cFkFVqkyH5/Yzi/+1hjNwIGGMl+Q2mo1X7sF0INIyzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 07:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
        Validity
            Not Before: Jun 11 07:56:33 2026 GMT
            Not After : Jun 18 07:56:33 2026 GMT
        Subject: CN=6a2a6a31-7e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:99:32:a0:26:b5:6c:30:35:b4:5c:71:4e:
                    46:20:9a:ec:0d:9f:a9:91:a4:35:50:44:c8:33:1b:
                    80:1f:6c:70:36:08:98:a9:10:d2:64:5f:c0:bb:fd:
                    fa:dc:9c:2f:c3:5f:2c:d5:61:8a:be:11:b2:fc:77:
                    5c:07:b1:bd:8c:73:c9:ee:bf:15:a3:d8:9d:d0:70:
                    84:c3:64:7e:1b:ce:07:1f:13:10:c7:b7:cb:d0:5d:
                    1c:7a:95:d3:1c:7a:f7:96:9d:c0:43:0d:a4:9e:6d:
                    3e:72:f6:51:74:11:04:6f:5c:27:32:84:32:fc:ff:
                    80:e0:73:8d:3b:18:e6:84:5b:4f:82:dd:93:8c:5d:
                    49:b8:0a:71:6c:7d:3f:64:96:5c:bd:66:e9:52:4f:
                    8c:f2:e5:42:02:21:78:c9:4a:91:c9:62:71:54:ad:
                    0c:c7:cd:d2:5d:fc:cb:d2:1e:78:fb:4c:78:c2:81:
                    42:9e:b5:a4:25:1d:9d:6d:8d:27:03:65:b3:6d:ec:
                    fc:09:b1:09:4d:35:66:61:bd:6c:b4:c0:13:eb:33:
                    d0:b6:92:0a:a5:f2:2c:df:8d:64:8e:d4:89:66:0a:
                    e3:08:72:51:7e:da:e1:fa:fc:20:10:09:9a:89:8d:
                    98:e4:ef:56:62:e0:d1:c6:8d:10:ab:a7:99:1f:bc:
                    83:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5B:A7:FC:22:65:B2:9E:7E:0E:DD:FB:EE:3B:16:79:C5:D9:D9:C6
            X509v3 Authority Key Identifier:
                keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:23:05:dd:ae:97:50:10:87:cb:40:f6:28:02:4a:b8:e0:2f:
         17:62:83:c0:0b:e7:21:f6:30:61:4e:1a:78:23:34:b4:cd:7d:
         d1:1e:6e:45:fd:c7:c0:86:54:59:03:0e:14:12:c2:11:ce:b1:
         ae:79:b7:d7:17:7d:99:15:58:63:ce:85:91:66:48:3b:e1:e1:
         50:66:e9:b8:78:49:6a:fa:28:26:7f:70:06:54:03:f2:76:27:
         ad:9a:ca:7e:99:21:7f:9a:32:85:04:48:7a:98:91:2c:3f:91:
         0f:c2:ea:27:b2:93:02:ad:d3:b8:51:36:a1:57:ae:35:3d:45:
         fa:e0:a8:b6:47:3a:72:fa:eb:e8:f1:5e:84:f7:25:cd:b7:f4:
         82:71:4b:67:78:d9:e0:26:34:7d:69:8a:2d:1b:4e:a5:b7:be:
         c5:ca:60:3f:29:8a:d8:94:c5:2a:e2:9b:3a:a0:5d:66:8e:e8:
         e4:c4:3b:07:4a:92:04:e9:a9:3e:94:2e:ce:0e:74:0d:68:22:
         a3:39:8e:cc:8b:8c:b2:d8:79:65:01:29:c8:3b:8a:8a:68:ea:
         dd:c5:f1:ed:23:43:e0:e7:7d:94:86:31:4f:b7:54:54:66:5e:
         e9:7b:0b:a9:2a:20:f5:51:69:fd:13:87:98:68:48:32:18:e3:
         6b:d1:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:29 2026 by rpki-client