Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
File:                     M_vQn8uwMstkN8-6pg9cH6xVob8.mft (raw, json)
Hash identifier:          jR4jCXNQbGI/7bLduLOAtJJB+JQtPVFW2nwOaprSzLc=
Subject key identifier:   BB:EF:BF:15:76:71:EF:9B:8C:C2:C6:F1:0B:B0:83:EE:59:BB:CF:A6
Authority key identifier: 33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
Certificate issuer:       /CN=A91201EE/serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
Manifest number:          64
Signing time:             Sat 13 Jun 2026 08:09:11 +0000
Manifest this update:     Sat 13 Jun 2026 08:09:10 +0000
Manifest next update:     Sat 20 Jun 2026 08:09:10 +0000
Files and hashes:         1: M_vQn8uwMstkN8-6pg9cH6xVob8.crl (hash: +O2HwCCcoluuSVsDfH/kw5wDfBMOSIqLfDWV15hbKUE=)
                          2: 5922C8E2DA7011F095E8A22F9BD3641D.roa (hash: XJ8M9A8mI6SrwXUmjGLeL6tg84g5T3IN8OttgBdZuFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
                          rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91201EE, serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
        Validity
            Not Before: Jun 13 08:09:10 2026 GMT
            Not After : Jun 20 08:09:10 2026 GMT
        Subject: CN=6a2d1027-a341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:a0:87:83:7d:f6:0e:ea:64:04:ab:65:08:
                    1a:d5:d6:61:62:b1:5a:a7:77:1c:2a:01:14:40:0d:
                    fe:45:00:28:b8:ca:40:14:b0:33:a7:15:ef:65:79:
                    e7:77:e1:f3:f8:10:92:65:95:a1:27:f5:44:8a:2d:
                    ef:0d:24:8e:18:2a:45:23:d1:c2:84:93:ba:68:2d:
                    47:23:67:40:70:44:a4:f4:2a:3d:6a:8f:f0:93:a1:
                    11:ee:88:e8:29:f7:a2:6e:89:61:d6:95:d8:5b:23:
                    a3:05:81:1d:79:f1:a4:65:cb:8a:12:72:9d:b7:27:
                    59:a9:50:92:d8:c1:4f:d5:b3:67:a8:5d:85:bf:0b:
                    5b:84:07:6f:18:4a:d2:bd:08:04:73:fc:da:d4:32:
                    08:93:51:d9:2d:59:46:7e:ec:c0:33:47:d9:11:60:
                    2b:62:4c:00:be:dc:7d:7e:0e:95:aa:c4:9e:19:c2:
                    9a:f1:50:66:18:39:b9:6b:39:16:87:06:10:c4:b6:
                    69:44:36:11:70:96:9a:a4:f7:b0:1d:16:70:3e:7e:
                    5b:32:83:8c:f5:48:46:41:4c:71:31:2b:56:af:22:
                    22:13:69:11:54:51:7c:b2:31:7f:e5:6b:1b:f4:f1:
                    b8:a7:1f:dc:16:9e:e6:75:e8:95:3d:ce:3f:ca:96:
                    8f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EF:BF:15:76:71:EF:9B:8C:C2:C6:F1:0B:B0:83:EE:59:BB:CF:A6
            X509v3 Authority Key Identifier:
                keyid:33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:3a:5b:9e:6d:30:90:4e:af:67:d7:c2:da:d5:1a:1d:98:e6:
         21:98:c4:b3:5b:71:7e:fe:5d:ce:ce:17:d6:d8:06:39:43:f2:
         ab:94:c8:b8:19:d6:5a:d5:3d:c8:84:ae:66:e0:09:83:29:ca:
         3f:3e:c8:ed:7b:ad:c2:9b:c9:fa:a6:8a:fd:02:11:fc:91:2f:
         b7:60:c7:30:79:b0:d8:92:e2:53:88:ed:a2:76:8e:cf:01:00:
         0b:92:da:3a:d5:ed:ff:96:13:b2:07:f4:9a:55:05:af:3c:cb:
         17:8b:a1:7d:bc:b8:df:b0:5b:b8:ba:a6:39:e5:53:81:f1:38:
         cd:ba:db:ee:6a:8f:0a:4f:01:40:60:a8:b2:4d:10:62:a1:3e:
         be:75:db:ac:9e:56:52:41:ac:26:2b:be:70:ee:d6:96:7b:3c:
         f7:28:3d:1d:3d:bc:71:6e:77:fe:d3:5f:0d:bd:82:dd:03:a1:
         37:26:0e:62:6d:37:0a:80:d6:08:46:68:4f:98:a5:e1:a5:90:
         f6:4b:22:b9:33:9c:e1:f8:07:51:c7:7b:df:35:e4:52:9c:58:
         e4:42:da:7a:ae:1d:3f:13:79:6a:11:40:7c:28:cc:dc:79:a3:
         46:6c:e2:a7:b4:41:4c:8d:cb:5b:f5:e3:0b:c2:da:a7:95:0a:
         62:bb:6a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:52:25 2026 by rpki-client