Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
File:                     aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json)
Hash identifier:          IEpKO4NqVs3kEwqxUyw5ml/iFRqeDYLkPV64OX099gQ=
Subject key identifier:   28:BE:A4:AE:EA:A4:74:C5:4D:44:2E:3F:00:49:95:AE:3E:38:5B:61
Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C
Certificate issuer:       /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
Certificate serial:       050B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
Manifest number:          0502
Signing time:             Fri 12 Jun 2026 23:43:49 +0000
Manifest this update:     Fri 12 Jun 2026 23:43:48 +0000
Manifest next update:     Fri 19 Jun 2026 23:43:48 +0000
Files and hashes:         1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: j9qiQOg1LDe46ZClkFMC4hpXCJx0qvJ3lwUvtGrZ0OE=)
                          2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 6u8EDQPeHd1f5myvUPvFnltCBejoVUEG20zIQZJhOPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl
                          rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291 (0x50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
        Validity
            Not Before: Jun 12 23:43:48 2026 GMT
            Not After : Jun 19 23:43:48 2026 GMT
        Subject: CN=6a2c99b5-c438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:a6:55:69:9f:cb:e2:f3:de:39:6b:47:24:
                    7b:54:46:74:e5:b9:a8:7c:09:28:d5:b4:b8:f3:a8:
                    b6:73:02:90:89:f3:f8:d4:bb:59:7a:d2:55:7f:e9:
                    91:48:24:64:70:55:9a:23:1b:da:c1:65:c2:68:06:
                    23:d0:55:f5:5d:ce:f1:81:1a:a8:64:6a:95:3a:80:
                    84:71:f0:a7:70:8c:ed:c8:87:a3:5e:95:0e:9b:4e:
                    81:e6:6a:65:c3:cd:0f:93:06:0d:9e:73:d1:b3:ea:
                    f0:30:18:93:19:15:c1:33:9e:4c:ab:de:55:97:29:
                    b4:a3:87:36:c1:f5:9b:9e:44:ea:0f:b4:e2:d3:cc:
                    4f:d9:7e:c7:25:2d:2f:d2:56:c4:2b:b8:97:6a:d4:
                    d0:58:62:53:32:b7:c6:19:d6:34:f8:26:75:23:93:
                    a1:9e:49:c4:39:47:a5:00:f6:22:51:60:46:ab:22:
                    ce:7b:e5:a1:d9:ab:3f:03:10:9a:f2:8a:c3:0d:16:
                    e9:8c:a6:99:1c:39:8b:e1:9f:e2:85:3e:cb:f4:ae:
                    39:d7:d7:e3:2e:2d:01:c9:49:76:fd:6c:70:1b:72:
                    40:4c:df:4c:a0:6d:78:d8:6a:d8:77:f6:f0:ea:d9:
                    7f:80:63:a4:64:1f:c4:c4:97:2d:25:92:3a:2f:6a:
                    ed:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BE:A4:AE:EA:A4:74:C5:4D:44:2E:3F:00:49:95:AE:3E:38:5B:61
            X509v3 Authority Key Identifier:
                keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:97:bd:86:dc:b7:6a:ff:f6:ec:84:47:a8:0d:8a:27:9e:51:
         e5:c0:c8:e9:83:b4:d1:2c:0a:80:f7:66:72:98:34:30:77:35:
         45:18:a7:fd:43:dc:cc:66:ff:20:28:d9:13:7f:ed:8a:22:58:
         44:f9:77:eb:6c:f7:6d:39:67:d7:a9:df:ec:03:4e:6c:f3:10:
         22:8c:d8:b6:eb:98:80:a1:01:f0:ac:4a:7a:8f:37:36:84:84:
         c5:c3:16:0c:31:47:b4:a1:26:42:51:33:c2:eb:dc:08:39:07:
         02:3b:d8:93:e3:3a:7f:0e:d9:4c:b9:88:0b:51:86:2c:1b:57:
         d3:b5:2c:a0:02:73:42:ea:01:03:ec:aa:b6:35:be:7a:72:73:
         d3:e7:78:b4:af:08:b4:59:d2:e9:02:76:d6:dd:81:73:02:14:
         85:78:24:97:a8:7d:8e:18:ed:b9:a9:21:a7:99:91:cb:50:4d:
         12:00:ae:68:e3:01:8f:72:f9:52:4f:5d:19:74:26:e1:56:3d:
         7c:b1:5c:2f:5d:ad:f8:40:19:de:d7:86:f3:f1:f7:ae:61:7b:
         05:56:71:8e:ef:18:c3:39:cd:ff:b0:a4:51:11:8c:b3:46:08:
         96:3b:33:fa:b7:e4:b4:57:1d:bf:cb:dc:c4:ab:42:35:d5:fb:
         30:6f:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:05 2026 by rpki-client