Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft
File:                     ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft (raw, json)
Hash identifier:          4hjz2cVVgEpKmMvKEQ76XIG3++R1PIcvykxHE/cBpMU=
Subject key identifier:   68:E5:39:44:C8:11:54:E7:3B:8A:E3:17:FF:F8:B0:6D:58:0F:C4:5F
Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E
Certificate issuer:       /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft
Manifest number:          01DE
Signing time:             Sat 13 Jun 2026 03:37:47 +0000
Manifest this update:     Sat 13 Jun 2026 03:37:46 +0000
Manifest next update:     Sat 20 Jun 2026 03:37:46 +0000
Files and hashes:         1: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl (hash: z7Lj4qwusc8TurtpzZOTHrbmnlqnHiQ3Ba4WJDRvx0U=)
                          2: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (hash: u48zpmX4MX32BsS3SWmiT1sLqFE6P1rFb2rRJj5ZiBw=)
                          3: 813EDCA4137E11EF9969A86BC4F9AE02.roa (hash: MD6k5wA0AqG/dEECYzynxqcMbFFUqeKVXvzHIx4QFZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl
                          rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E
        Validity
            Not Before: Jun 13 03:37:46 2026 GMT
            Not After : Jun 20 03:37:46 2026 GMT
        Subject: CN=6a2cd08a-ac98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:c5:ed:78:dd:6a:7f:80:7f:ef:65:60:ba:
                    db:50:70:0f:7e:c4:44:0e:c2:22:6d:ad:c5:c6:f0:
                    62:14:54:10:51:22:b6:da:e6:aa:ce:d8:99:62:df:
                    c4:9d:1b:e5:71:9d:70:f3:55:52:9a:c7:18:f2:44:
                    82:c8:cb:04:d3:b1:a7:d1:00:2e:d9:0c:2d:d4:db:
                    90:26:fb:f3:ac:4a:47:2e:98:27:fa:ba:ec:55:ec:
                    18:b6:2f:89:c3:b0:a6:86:af:ff:99:a0:88:9d:5f:
                    19:6c:99:1e:70:72:dd:e8:f7:19:3a:66:4c:2d:27:
                    a3:50:1e:c5:9b:ea:ce:3e:8f:c3:16:eb:97:38:a6:
                    d1:ce:b2:37:7a:76:d1:fa:0e:ba:fe:4c:61:f3:39:
                    96:c4:86:ad:cf:6f:b3:78:41:1b:08:c8:0b:66:1f:
                    86:7a:52:fb:21:83:37:ab:38:42:57:7e:30:77:e0:
                    c5:c7:85:77:0a:a5:c6:38:fc:c3:73:0d:29:46:de:
                    3b:95:23:6b:5f:77:53:4e:bc:d9:75:e9:a1:08:ac:
                    c6:a1:ef:ee:c5:03:0d:9d:6d:ea:5c:4a:6a:6b:3f:
                    9f:06:9a:f9:5a:98:5c:e5:bb:cf:07:df:c9:70:2c:
                    7d:a6:fa:ca:c5:bd:07:58:88:27:f7:4f:c7:66:fd:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E5:39:44:C8:11:54:E7:3B:8A:E3:17:FF:F8:B0:6D:58:0F:C4:5F
            X509v3 Authority Key Identifier:
                keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:dc:90:a8:ab:7b:62:19:27:55:f8:ac:40:3a:83:7c:5e:ae:
         be:b3:9f:f8:ac:85:8b:d2:22:e7:0a:8c:64:41:c0:52:78:dc:
         1d:32:b1:48:de:f1:93:68:d1:e9:27:94:8b:b4:3d:52:15:cc:
         c9:12:cf:cb:a4:98:d1:e5:8d:47:4f:5c:f4:88:c0:8b:3b:50:
         8b:f2:d5:45:ea:43:51:54:1d:3b:35:c5:ac:6d:c0:7d:21:2d:
         0c:2b:bc:27:50:4e:68:37:dc:87:8f:18:71:5b:8c:f9:44:9c:
         75:d1:0c:05:cb:51:25:e8:fd:6c:69:9e:3a:c3:cd:01:94:2d:
         bc:22:79:38:1a:a1:7b:32:f6:00:21:e1:52:b2:69:5a:b0:9a:
         bd:1e:97:32:31:a2:5e:ce:72:8b:72:20:6a:89:24:04:8a:10:
         ba:be:1b:59:2c:ed:21:12:85:6d:ab:0a:d3:13:b0:bb:cb:aa:
         2b:84:74:de:df:3b:14:f1:aa:b5:72:20:55:9f:5e:33:f0:ee:
         b3:5f:dd:e9:0b:d4:b2:f9:8c:fd:43:97:73:56:ad:f4:ea:fa:
         39:98:8d:14:d4:62:8f:fe:90:2d:8e:41:35:60:a5:1a:0d:0b:
         ef:fb:35:79:47:97:0b:09:16:e6:05:33:97:f4:02:6e:19:cf:
         28:d1:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:42:50 2026 by rpki-client