Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
File:                     pObuKivUtt87NTuua8SJKm047yk.mft (raw, json)
Hash identifier:          xGpIgYEoNSR+xLSwvekD3dqfLzgJBMX++BHfYJCVkbw=
Subject key identifier:   23:9A:A4:AF:FA:D0:11:68:E4:D7:46:C4:2E:4E:16:E1:D3:BC:A8:76
Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Certificate issuer:       /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
Manifest number:          0173
Signing time:             Fri 12 Jun 2026 21:26:31 +0000
Manifest this update:     Fri 12 Jun 2026 21:26:31 +0000
Manifest next update:     Fri 19 Jun 2026 21:26:31 +0000
Files and hashes:         1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: o+e4J77uFNJHP6B7+bGG1Lh7a+gLEhTC1QerRM7uJWE=)
                          2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: datkaq9Qj7s5b2XKTfU6R7KhB3Tz4l6ZdYv0MI/ikx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
                          rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
        Validity
            Not Before: Jun 12 21:26:31 2026 GMT
            Not After : Jun 19 21:26:31 2026 GMT
        Subject: CN=6a2c7987-497b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:51:22:79:a2:38:db:84:4b:68:57:32:c4:2f:
                    3a:6a:2b:21:33:76:04:8b:69:6b:7f:b6:0c:b2:16:
                    16:96:ff:e3:f8:40:4e:48:3c:a3:cf:24:a5:ba:d6:
                    6e:0c:f0:a0:f0:ad:bd:20:39:e3:66:4e:e4:e6:6c:
                    b8:99:f4:59:57:0a:16:0c:69:14:f8:40:1e:a5:76:
                    da:17:df:5e:44:58:39:8d:6c:47:3c:f9:fd:ca:53:
                    58:5e:92:de:98:a9:67:27:e4:7c:27:05:c3:5e:64:
                    dc:e8:a5:4d:71:60:87:ef:3d:fe:32:a5:6a:42:51:
                    71:ab:46:d1:90:33:c9:1d:dc:12:53:4e:72:39:0c:
                    85:46:3a:37:a1:a6:a7:d6:a9:cf:43:43:36:9a:9e:
                    fd:ce:1a:5a:75:21:74:ef:a7:87:d6:7c:2b:7e:e1:
                    3a:f9:e5:86:81:40:10:ea:32:38:0c:34:49:b2:18:
                    c5:b8:be:92:6c:f2:26:f4:66:d0:d3:7b:cc:b9:6d:
                    19:4b:01:45:9b:6f:5b:7b:c3:ca:f2:3e:09:58:15:
                    e4:93:fa:2a:48:e7:72:3e:ec:b5:cb:3d:f0:45:5b:
                    37:2c:1b:b7:68:41:19:75:ab:70:81:86:cb:9c:59:
                    3b:ee:4c:38:44:c3:0c:83:9e:bc:eb:e8:d1:ef:0b:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9A:A4:AF:FA:D0:11:68:E4:D7:46:C4:2E:4E:16:E1:D3:BC:A8:76
            X509v3 Authority Key Identifier:
                keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:87:80:49:d5:fd:39:dd:d2:fb:eb:da:b8:9f:c1:b4:23:ac:
         fa:9e:10:b3:86:6c:00:05:ac:87:51:e9:29:c0:9b:0a:8c:85:
         84:fd:60:aa:8f:02:b9:12:b3:21:50:fd:f8:2c:7c:21:96:5f:
         9c:c3:53:d2:6e:fc:22:b7:b3:67:ba:58:39:2a:f0:6e:29:ce:
         81:19:5c:77:b7:ec:4c:2d:19:3e:ed:9e:67:68:dc:54:19:5b:
         e2:ac:b4:65:a4:cf:4f:ec:08:48:18:3e:08:66:66:d3:0e:58:
         12:6c:c7:f7:7a:36:86:84:ea:6b:2b:f7:73:70:f6:c6:64:b7:
         00:bb:78:3b:00:d7:6d:63:38:47:f1:7e:30:ad:f8:b9:6d:51:
         b6:80:41:1a:06:6d:d1:3e:8c:27:f9:29:77:c9:c1:07:70:63:
         38:92:bd:ec:1b:14:d7:a3:26:4c:17:ca:3c:f3:bb:37:23:bd:
         a0:e4:46:d7:1d:b0:1c:db:a1:44:23:6a:42:03:e0:96:1c:ab:
         d7:b2:ea:77:6c:74:80:f3:32:d4:7d:60:02:03:7f:7f:7f:c1:
         27:52:06:8a:57:6f:20:28:be:59:51:4a:2b:3a:98:b7:b4:52:
         75:59:3f:4d:a7:fb:81:ff:d7:26:c2:df:aa:e6:ca:53:cb:f8:
         73:dd:49:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:18:38 2026 by rpki-client