Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File:                     u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier:          GDJpXMgMXh87eAKzt/0bkjQH3u4prvA9MTfbPVp1gCg=
Subject key identifier:   4C:7D:C8:F1:68:E9:2E:99:B5:29:E9:3C:91:7C:33:6D:72:D9:66:CD
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer:       /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial:       02C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number:          02B2
Signing time:             Wed 17 Jun 2026 01:34:27 +0000
Manifest this update:     Wed 17 Jun 2026 01:34:27 +0000
Manifest next update:     Wed 24 Jun 2026 01:34:27 +0000
Files and hashes:         1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: ycR6oF7QyIvDBK/mG5W9oOqPV6YXogPWDIMYY8YxPlI=)
                          2: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: 9SKQpptnj/JfGFLLT1UzGMBhecqFZTQ9eSGwwb/vYF8=)
                          3: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: b9DVs3sKMRxCpx6qLE96QA7SsPL0b1qBye22Pru51gY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
                          rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
        Validity
            Not Before: Jun 17 01:34:27 2026 GMT
            Not After : Jun 24 01:34:27 2026 GMT
        Subject: CN=6a31f9a3-fea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:82:f2:f8:f4:f5:64:b4:51:bf:54:69:64:
                    c0:85:43:a9:92:5a:9a:57:4c:50:48:40:35:38:ea:
                    c8:3e:dd:56:8e:c5:34:f5:10:c2:01:af:56:f1:af:
                    99:49:2a:73:27:ee:b3:24:6b:e1:f1:fd:88:dd:20:
                    1e:b2:38:7e:14:09:75:40:33:87:4a:88:3c:91:9b:
                    06:54:34:74:d2:b1:38:b5:cb:46:f9:ae:38:2e:dc:
                    85:71:16:bc:54:ee:24:f6:5b:e4:c7:19:b3:ec:8b:
                    49:9a:25:5c:37:d9:69:e6:6c:92:19:42:35:a2:97:
                    ff:ac:36:39:0e:53:64:a3:b7:9a:0b:19:b7:f7:32:
                    e4:37:fe:84:9e:7d:0e:8e:8f:1c:f1:58:b6:b3:f7:
                    4f:44:47:19:5b:52:24:30:65:07:75:31:01:e8:97:
                    58:62:e1:4e:73:b4:29:9a:f4:c0:56:4e:91:7b:c2:
                    26:5c:eb:ae:7c:72:4f:33:35:e4:9b:bb:bf:e7:2d:
                    0b:1f:45:3d:8d:71:a0:ba:54:61:d7:2d:3c:60:c6:
                    c8:0b:4b:23:aa:b4:95:9f:4e:27:88:d3:da:1b:23:
                    29:61:e9:08:84:e7:d4:f2:f1:cb:bd:d5:af:77:25:
                    53:2a:c7:44:86:41:00:21:78:05:6a:8e:24:10:c5:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7D:C8:F1:68:E9:2E:99:B5:29:E9:3C:91:7C:33:6D:72:D9:66:CD
            X509v3 Authority Key Identifier:
                keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5f:1d:f1:13:86:66:a5:58:ad:d9:37:61:e6:c9:20:88:cf:
         d4:b2:d4:c2:a3:d9:2e:7e:d4:27:1e:58:a2:25:b7:c0:57:4e:
         6d:51:18:22:cd:58:f4:a3:da:a2:1e:5a:57:f7:94:71:56:47:
         cb:2b:0f:5f:67:17:2d:c6:4d:53:dd:59:d2:de:5d:2e:dd:6e:
         3c:bb:37:f0:58:b3:eb:be:f4:22:be:ed:90:3f:bf:6d:de:d4:
         38:e2:93:c0:10:b0:0e:30:0b:cb:59:61:42:e1:64:df:73:76:
         e1:06:da:97:71:c7:e5:23:a1:15:49:b9:30:51:99:1c:48:ff:
         3a:1f:3c:e6:a2:30:76:ac:56:44:f2:6c:75:66:3e:38:80:fe:
         57:52:2b:6f:8c:42:3c:99:4e:27:8d:fb:62:dd:a0:e5:bd:e1:
         66:a7:e3:32:35:6d:0d:df:7a:3b:8c:a8:98:a5:d5:db:cf:17:
         ee:06:7e:e0:62:12:7b:e0:8f:93:b8:d1:15:a7:04:7c:c2:69:
         29:13:ec:c6:4f:83:64:07:ac:fe:84:ee:06:00:b1:32:3b:c2:
         bc:14:c2:45:80:a6:43:a9:24:68:09:e4:0e:21:22:53:6a:c4:
         72:9b:91:93:d2:d6:e0:79:4e:46:04:28:38:4a:f9:02:6b:3c:
         44:6f:11:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:39:34 2026 by rpki-client