Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
File:                     2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft (raw, json)
Hash identifier:          mU1l4osMjvPjhJOQs5398tisll4rVGY8GeGFfA9g0FE=
Subject key identifier:   AD:5E:E3:95:00:2F:77:5B:12:D7:DD:73:39:F7:F5:23:FF:2B:81:4A
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Certificate issuer:       /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
Manifest number:          27
Signing time:             Thu 11 Jun 2026 11:08:37 +0000
Manifest this update:     Thu 11 Jun 2026 11:08:37 +0000
Manifest next update:     Thu 18 Jun 2026 11:08:37 +0000
Files and hashes:         1: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl (hash: w3y4fFoGrDv/8AgmPvdZoMXeaN8a5QQD7SwRZ7wIoNY=)
                          2: 8C138F502CCA11F1960EC6ED91833773.roa (hash: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
                          rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
        Validity
            Not Before: Jun 11 11:08:37 2026 GMT
            Not After : Jun 18 11:08:37 2026 GMT
        Subject: CN=6a2a9735-c092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:84:03:32:7d:17:17:2b:34:40:25:71:2c:
                    03:51:26:bd:20:1a:3a:8d:29:d1:2d:34:41:c8:63:
                    b5:64:e2:a0:39:b1:25:90:b7:6e:16:ef:8d:de:52:
                    a1:33:25:49:98:69:e7:94:e8:ba:73:29:71:1a:8b:
                    81:62:d7:1a:bc:98:35:1c:2b:ac:f9:a3:31:64:d2:
                    24:ca:22:cc:45:c1:d1:31:c9:65:4b:15:ef:cb:86:
                    5b:f5:64:f3:d0:49:49:2c:0c:22:f3:b9:84:52:00:
                    45:98:8b:db:74:2b:7d:bf:64:93:b5:76:74:9a:be:
                    4f:0e:ef:58:ab:61:a5:8b:fe:67:e4:b9:59:53:88:
                    42:c8:e2:ff:62:49:29:78:4b:62:a5:09:8b:b8:80:
                    fe:94:d4:25:76:b5:24:14:74:38:1e:3b:46:11:3a:
                    61:cb:5e:30:98:91:a5:70:2c:21:98:b4:d0:e6:00:
                    13:26:fd:fa:33:f2:e3:73:26:61:3c:9c:96:62:f9:
                    b8:47:c4:a8:2c:2b:8c:87:05:88:f4:21:db:80:6e:
                    28:eb:bc:e4:0f:7c:17:70:5e:fa:1c:e8:91:46:1d:
                    0a:63:c2:2c:77:49:1e:7f:da:37:0f:90:a2:8f:80:
                    66:52:d6:4d:1a:b1:02:bb:80:e3:5e:23:34:ec:fc:
                    ec:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5E:E3:95:00:2F:77:5B:12:D7:DD:73:39:F7:F5:23:FF:2B:81:4A
            X509v3 Authority Key Identifier:
                keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:61:a2:f0:16:69:f5:27:e2:85:ad:ea:22:a7:61:fc:62:e4:
         f5:bf:d6:0e:b4:b7:12:3a:cc:10:53:6b:62:2f:8c:a5:40:67:
         2d:13:6a:18:aa:7d:5d:5a:fa:94:cc:dd:d3:d6:ab:25:ec:62:
         1e:a3:a2:f4:e5:4b:12:3f:ec:54:24:f5:ad:67:8b:47:5b:ba:
         c3:1e:09:b0:ea:11:17:03:9c:4e:11:22:f8:d2:47:99:30:94:
         2a:3f:29:47:76:5e:e7:12:72:de:4d:a9:3f:cf:18:59:f0:9b:
         99:01:bb:7c:e5:0e:c9:4d:19:39:1d:de:23:c8:80:c2:84:a4:
         24:5d:41:83:22:be:7d:06:75:9b:a3:80:db:14:61:2a:19:49:
         87:55:e9:51:22:24:e0:e2:4a:a3:1a:b6:f7:98:5a:a2:39:f0:
         d8:0a:50:a4:da:5a:dc:a5:2e:e8:05:df:a1:85:ea:7a:18:0d:
         42:93:0f:7f:c6:d6:8a:d6:be:31:f5:0d:e4:2c:af:ae:98:46:
         02:4d:72:ce:fd:12:0c:d3:63:50:5d:58:18:36:c1:5f:e8:dc:
         60:e0:04:7d:1d:19:ac:5e:f4:e7:87:9e:78:ea:d8:07:1c:81:
         78:83:29:7e:cd:a6:fc:79:26:e2:46:00:5d:35:1b:2f:c9:d8:
         16:2a:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:03:47 2026 by rpki-client