Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
File:                     MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json)
Hash identifier:          h73lpDjBwcRlQdDJqT0M+w2n5rUPC/fjhDNm5Srs/qU=
Subject key identifier:   25:98:09:5D:E8:0F:11:C1:01:49:5B:9C:FF:D9:1D:40:D6:A3:EE:21
Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
Certificate issuer:       /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
Manifest number:          B4
Signing time:             Sat 13 Jun 2026 07:10:46 +0000
Manifest this update:     Sat 13 Jun 2026 07:10:45 +0000
Manifest next update:     Sat 20 Jun 2026 07:10:45 +0000
Files and hashes:         1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: kALa+tHn9dJAr4PxLG6hgbL0ofK4AI2l2c5wLOnosQA=)
                          2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
                          rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
        Validity
            Not Before: Jun 13 07:10:45 2026 GMT
            Not After : Jun 20 07:10:45 2026 GMT
        Subject: CN=6a2d0275-f963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:de:c8:f3:d7:b5:b3:50:75:37:4b:95:45:84:
                    5c:8a:8c:de:02:dc:3c:b7:1d:28:72:57:5f:ca:e6:
                    69:1a:34:37:bd:25:f7:4a:ab:12:83:bc:94:e0:2e:
                    1f:3a:c8:80:5f:0a:e7:ed:d8:cd:f2:af:b3:6a:ae:
                    5e:c1:ab:42:22:af:66:fc:bd:5f:56:a8:5f:1e:f1:
                    8c:fc:00:4c:21:0f:de:d1:fd:75:0e:cb:09:d8:bd:
                    02:40:5a:15:7d:bf:92:c9:1b:74:51:c2:c1:fa:c9:
                    22:29:a5:9f:e6:08:d0:da:bb:0d:0a:36:15:07:d9:
                    4b:79:ff:ab:a3:40:fb:c2:f7:01:81:90:59:ee:80:
                    4b:33:36:64:22:0f:72:13:e0:1b:3d:59:6c:97:da:
                    ae:be:fe:96:39:5b:f0:66:63:c5:84:a8:f9:34:dd:
                    e6:39:77:22:58:db:f0:eb:d1:6b:de:e9:f5:2c:b9:
                    74:76:0c:7c:6a:a6:ea:46:6e:e4:d5:7d:b2:b3:33:
                    ca:4f:44:60:e9:00:7c:36:d5:24:92:38:1f:c0:78:
                    43:3a:40:f2:63:e2:d3:44:0b:8d:20:8b:88:6a:2e:
                    a4:64:ef:3f:7d:f7:75:c0:c3:d5:2f:40:df:0c:09:
                    00:75:2c:c8:5d:f9:97:e6:21:a2:8f:db:dc:ae:93:
                    d1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:98:09:5D:E8:0F:11:C1:01:49:5B:9C:FF:D9:1D:40:D6:A3:EE:21
            X509v3 Authority Key Identifier:
                keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6e:e2:5f:ea:11:51:50:be:49:f1:8a:ae:64:c8:5c:89:77:
         d1:85:a2:12:b3:37:f3:51:b3:0b:bc:fe:d0:aa:2b:45:2d:29:
         24:89:e3:67:6d:c4:bb:41:d7:64:6b:a4:02:d1:40:96:b5:00:
         77:49:d9:9e:86:98:c2:54:83:4f:23:7f:ed:8f:39:ee:3e:47:
         f4:31:b6:b9:a6:87:e7:68:27:84:87:c4:35:1e:ca:a3:a3:82:
         88:e0:b6:87:36:21:cd:44:4e:61:73:30:d1:aa:17:eb:5a:14:
         e9:23:b1:09:4b:54:94:24:e5:32:5f:0f:87:2c:86:aa:97:bb:
         8c:26:0c:71:d8:3d:ef:41:77:39:c0:fb:b0:a3:45:4d:2e:d2:
         f1:38:d6:8e:56:cd:65:07:f1:cf:4f:82:19:2c:ff:2a:67:52:
         f9:98:70:71:eb:12:af:a7:a6:e5:e4:7b:3f:52:d7:ba:f1:c7:
         d5:92:05:11:40:9b:0f:c3:a6:7e:52:49:ee:c9:bf:f0:16:4c:
         ed:be:88:7b:53:8b:0d:92:6e:8e:45:cd:bb:6f:77:29:a1:aa:
         42:03:ca:5f:82:54:17:f2:d7:97:2b:73:11:53:d8:ea:d3:2c:
         c6:63:5f:e2:64:95:6b:af:b8:4f:a5:69:79:ee:b5:76:03:d6:
         ba:58:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:01 2026 by rpki-client