Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
File:                     H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json)
Hash identifier:          q8CdktCdxsBSmu+XYqYOSFk3ECFkxi1ESaBdrTuP7a8=
Subject key identifier:   75:37:52:E7:93:F7:4C:C9:38:8A:8B:66:6C:5F:FF:86:B5:BC:AC:B7
Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4
Certificate issuer:       /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
Certificate serial:       04C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
Manifest number:          04BE
Signing time:             Fri 12 Jun 2026 23:53:43 +0000
Manifest this update:     Fri 12 Jun 2026 23:53:42 +0000
Manifest next update:     Fri 19 Jun 2026 23:53:42 +0000
Files and hashes:         1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: cEIeiaJPPp53Q6YKL3kbSlR3gIg0Dt9wAfK4eeOSKAE=)
                          2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: JLSpD4WP21I45YnxCYPUZKiI0CXdyL9PtVi/LHX9mJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl
                          rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
        Validity
            Not Before: Jun 12 23:53:42 2026 GMT
            Not After : Jun 19 23:53:42 2026 GMT
        Subject: CN=6a2c9c07-ef88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:a5:33:e6:3e:bc:39:0b:c0:58:65:84:d7:
                    ca:77:fd:98:72:b3:f8:e7:19:70:f5:3b:16:d7:7c:
                    4a:3e:0e:58:21:5c:6c:13:3d:72:0d:86:1c:49:b6:
                    be:2e:66:f5:26:bb:fa:eb:de:72:48:60:38:7b:43:
                    8b:d0:e9:93:03:a9:6a:92:25:66:d9:ab:fd:f8:ec:
                    e9:b4:33:fb:c3:ec:c3:ad:4b:eb:d5:39:1a:2d:0b:
                    b4:15:cd:fe:b6:80:3d:f1:14:11:a8:54:e4:0f:9e:
                    80:3b:22:60:df:1b:b5:2e:26:64:25:e4:b4:e7:ac:
                    3e:ae:e7:69:6f:c3:95:c6:38:b1:3e:57:a3:46:2f:
                    fd:81:0d:cc:cf:17:6d:a0:2d:f3:19:3e:f1:c1:60:
                    68:60:42:48:aa:7f:5f:ff:14:e0:d3:fa:2d:58:39:
                    ce:f2:c9:3d:70:28:ec:9f:d6:ee:92:94:e2:f2:80:
                    c6:b0:b6:65:d2:02:13:d0:dd:03:88:79:d4:f6:ae:
                    1e:f3:9c:36:f2:4a:20:d6:28:43:90:80:98:cc:6e:
                    9a:dd:0d:5b:92:11:ff:0e:96:dc:48:8a:9a:d2:ec:
                    65:fe:03:d5:4a:e3:e2:ee:21:20:f6:23:a8:07:80:
                    d6:b2:59:10:6c:27:19:31:10:ab:f1:32:cd:93:25:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:37:52:E7:93:F7:4C:C9:38:8A:8B:66:6C:5F:FF:86:B5:BC:AC:B7
            X509v3 Authority Key Identifier:
                keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ab:24:12:cf:58:f9:e3:bf:2b:f5:95:d0:aa:a9:a8:c3:6f:
         35:7b:cb:13:be:61:6a:46:b3:1f:c0:bc:89:f3:4b:3a:eb:26:
         35:21:f0:fb:91:8a:1c:4c:e6:1e:03:0b:05:13:2d:d1:b5:4e:
         72:d0:6f:65:c7:f2:d0:82:00:56:ad:81:6a:28:b1:b9:7a:b2:
         81:a5:db:66:64:f6:96:98:9a:01:2d:e9:0f:d2:45:3a:e4:91:
         6a:27:a6:a4:f0:c5:1e:8c:b6:1c:85:60:2a:49:36:4e:72:d6:
         77:19:7e:ed:70:56:ae:3c:1a:55:8a:71:2f:77:d3:ce:2f:5c:
         b1:15:55:3f:ab:32:41:aa:d1:e8:f5:f4:5f:f3:a7:dc:58:b9:
         c8:e1:92:cb:5e:eb:8d:b6:27:99:3d:f1:f8:83:18:86:20:cf:
         74:c7:51:b4:e1:25:d4:f2:1f:26:7a:37:8b:7d:fb:a8:68:3c:
         20:cb:4d:21:e5:bf:33:05:f6:ce:53:6f:78:62:cd:4b:4f:b8:
         ec:26:87:25:8a:bd:1a:a4:40:6e:03:61:27:a9:76:64:fb:08:
         d4:dd:02:c5:1a:4a:1b:f7:2b:64:9c:b8:f3:80:3a:b1:88:26:
         25:c8:ab:50:4d:16:ce:5b:7c:01:e1:fc:39:21:14:b4:23:95:
         50:91:03:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:59 2026 by rpki-client