Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File:                     ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier:          CNenYzfHq4ncdekYjyz4Ml+dL83rNAhb5SZwNgmL1WU=
Subject key identifier:   E7:A9:BD:0A:60:EB:B3:0C:78:06:3C:41:F4:46:20:74:47:17:7E:7E
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer:       /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number:          0121
Signing time:             Sat 13 Jun 2026 05:57:25 +0000
Manifest this update:     Sat 13 Jun 2026 05:57:25 +0000
Manifest next update:     Sat 20 Jun 2026 05:57:25 +0000
Files and hashes:         1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: 2CYAYvnyte2NKOeWgWlmWm+TufbkKhT+Ck753Q2gBUQ=)
                          2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: j5AEAb8kY5M3sbYrBrlhwU1t8O30/erdyML6Xz5HVZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
                          rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
        Validity
            Not Before: Jun 13 05:57:25 2026 GMT
            Not After : Jun 20 05:57:25 2026 GMT
        Subject: CN=6a2cf145-0bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4b:df:82:1c:e7:f9:4e:f8:54:bc:9f:d7:c7:
                    fb:d8:58:4f:e9:9d:ad:d9:2d:f1:04:9c:e4:a6:83:
                    8e:43:39:fc:dc:16:0b:58:31:10:4b:80:8d:b6:b5:
                    9a:73:c0:3b:95:a4:d3:c2:45:e7:7e:f7:d7:1d:19:
                    3d:0b:57:d1:d8:ab:6f:98:4f:bd:d3:e4:ed:29:84:
                    ac:eb:7b:7a:bd:69:f3:8a:d2:28:cf:4a:0e:10:bd:
                    fd:94:46:29:ca:0f:b8:30:6e:7e:84:28:26:a3:f7:
                    8f:32:42:1e:d9:6f:19:08:f5:99:46:ed:e1:45:b9:
                    3d:d0:d0:ea:f1:67:bd:7f:3f:73:a7:c1:ee:87:8e:
                    77:63:5a:b4:42:28:68:ce:c6:c1:27:c5:0e:c0:42:
                    67:0d:41:ea:8e:ad:5f:85:f7:fc:f2:45:90:f0:31:
                    3c:d3:fb:9a:4a:bc:77:b4:7e:d3:1c:29:28:cf:cb:
                    49:94:c9:75:d8:f1:93:53:7e:5f:7f:1b:9f:8e:dd:
                    ff:0a:15:ae:2e:e8:0d:e7:5f:90:43:66:b1:f8:02:
                    f9:11:1f:13:92:db:22:b0:da:8e:d3:6d:a6:8d:c5:
                    2c:99:b8:8e:af:ed:2b:7a:6f:8f:69:fa:d7:e4:4d:
                    2f:19:86:b1:82:4d:a5:d3:b5:26:c3:a5:a7:e1:a3:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A9:BD:0A:60:EB:B3:0C:78:06:3C:41:F4:46:20:74:47:17:7E:7E
            X509v3 Authority Key Identifier:
                keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7a:58:a0:cd:33:1a:00:7d:d2:8d:36:40:23:9b:4e:b2:9b:
         67:f0:6a:e3:7d:85:7b:16:9f:4e:28:65:5a:84:77:93:30:f6:
         f6:c6:27:f7:83:ba:f1:01:b6:05:4f:6a:af:83:39:d5:11:92:
         bc:a5:35:39:17:53:86:7a:7f:32:09:fe:7b:d3:fc:69:f3:f8:
         b4:b6:de:f2:06:e1:86:86:0e:cd:c3:7c:86:5e:7f:6a:80:93:
         79:ef:d4:de:c7:48:fa:19:47:4b:58:33:6b:bb:2f:30:42:bb:
         c9:8f:55:03:fc:60:3d:50:4c:29:ab:e7:ca:d0:74:8d:e8:1c:
         77:22:c9:1e:e7:1f:d0:26:72:5e:53:75:ec:91:8a:77:9e:43:
         3d:3e:e4:e8:be:47:92:91:8d:c6:83:5b:01:d3:26:67:a0:62:
         98:37:f4:4d:73:9f:10:98:3b:25:38:8e:3e:a4:b5:9d:dd:41:
         b0:4c:b1:87:d3:18:50:ef:9f:83:4a:3a:5e:aa:ac:25:b5:07:
         22:87:dc:51:84:66:6d:f7:4d:ef:bb:c2:f5:d0:3e:ef:60:18:
         32:9e:35:9b:fc:68:c7:be:cc:96:a6:d5:6d:d6:f7:18:92:ce:
         92:50:9e:26:d3:f8:37:e3:4d:15:64:a6:c1:a0:40:14:c7:c7:
         52:6c:f6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:12:55 2026 by rpki-client