Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File:                     lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier:          TpBI73GAfyyr7tT47kP85pz6Sa5Pzdsup6TnfxSm/u8=
Subject key identifier:   17:42:DA:19:C1:EB:75:3E:75:69:98:FF:A9:DB:65:9B:35:9A:8F:EF
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number:          0809
Signing time:             Fri 12 Jun 2026 22:58:45 +0000
Manifest this update:     Fri 12 Jun 2026 22:58:44 +0000
Manifest next update:     Fri 19 Jun 2026 22:58:44 +0000
Files and hashes:         1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: DmYITZayNVtbnrkD21gAwVnHwzii5HTP9PApCkt3zD8=)
                          2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Jun 12 22:58:44 2026 GMT
            Not After : Jun 19 22:58:44 2026 GMT
        Subject: CN=6a2c8f25-7f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:ae:79:52:ce:05:c8:a6:42:98:75:f9:c9:
                    21:15:3e:a4:d5:5e:39:74:59:23:c3:ea:64:ef:a3:
                    eb:ba:1a:61:14:1f:92:6f:dd:c2:b6:ec:f1:9b:f1:
                    c2:35:10:0c:73:27:ea:d8:51:51:6b:61:bf:df:b5:
                    34:5a:f6:36:eb:ef:63:77:f8:75:93:62:ea:6a:c6:
                    4e:2e:3d:01:95:52:2e:23:c4:6a:c5:7e:c3:8e:85:
                    34:3b:97:75:3e:0c:44:9f:9d:61:09:1b:98:52:1d:
                    2d:f4:19:15:9c:b2:0c:bc:e1:1c:22:21:cb:1d:ff:
                    61:d8:79:62:91:c4:ba:66:f5:52:6a:d1:b8:39:00:
                    37:84:1c:f5:db:05:78:b6:5a:36:52:18:27:6f:3e:
                    15:7e:43:4e:8c:2e:51:ff:18:7d:a4:73:b5:48:b2:
                    8f:89:c3:c7:cb:40:15:f6:d3:4b:8e:68:7d:d1:2a:
                    c2:4d:40:db:19:80:15:c5:60:e3:77:39:a6:16:45:
                    de:a6:dd:20:54:f6:0b:1c:c7:dd:46:76:1f:2b:c8:
                    6d:df:7c:2c:2f:ea:e7:92:82:fb:42:e3:c7:74:37:
                    0e:a3:90:37:90:2d:88:2a:fc:75:41:b7:d3:b4:79:
                    49:de:8a:62:9c:ad:3a:d8:20:9d:df:55:fa:0e:ee:
                    7f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:42:DA:19:C1:EB:75:3E:75:69:98:FF:A9:DB:65:9B:35:9A:8F:EF
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:74:03:b3:fa:ee:ea:51:06:de:ac:91:9a:c9:51:6d:ec:ab:
         90:88:08:09:db:a7:88:e4:c3:d5:00:5d:a6:53:9e:ff:1b:b9:
         42:c4:8a:6c:df:43:9f:dc:f3:26:38:07:f2:e2:e1:a4:bd:fe:
         8c:cb:c4:de:93:ab:24:0e:b7:74:8f:00:cf:cf:72:7a:c4:ac:
         6e:b7:11:6d:cd:82:ec:17:42:1d:6f:af:ca:28:7d:c2:16:71:
         dc:c5:ef:17:7a:9f:43:c2:2a:fd:1b:be:5b:f3:51:fa:f5:bf:
         eb:c7:71:9f:57:55:58:8a:ba:51:e1:01:c4:7a:80:b8:54:9b:
         73:7c:11:57:66:74:65:9f:89:cc:04:42:70:a8:23:7f:70:42:
         d5:34:a2:73:1b:ee:3d:c4:af:f5:2e:56:18:08:65:97:9d:c2:
         79:b0:f9:69:a5:62:09:00:2a:7d:9a:41:2d:75:e5:69:92:f9:
         b1:da:d3:aa:c4:86:7b:a9:a1:f1:ee:29:6f:f3:f0:b5:56:c6:
         d0:76:f8:50:3a:d8:58:c0:1a:e1:6b:9a:61:ad:20:6a:97:49:
         f4:ce:b2:5f:ce:2d:6d:8c:3d:92:76:ab:7d:bc:42:42:9a:ea:
         9d:b1:7f:3d:bc:53:d7:f0:c0:29:a3:92:4a:1b:77:10:30:08:
         85:d5:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:36:35 2026 by rpki-client