Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
File:                     chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json)
Hash identifier:          B0MCaFYaHgCMUNYt1qs2olLOPr0x+dnZePxSqz1+CVQ=
Subject key identifier:   08:D5:78:1F:F9:79:7E:C2:B5:7A:2F:0A:58:8B:71:1B:8C:7D:85:20
Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71
Certificate issuer:       /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
Manifest number:          015D
Signing time:             Sat 13 Jun 2026 04:57:20 +0000
Manifest this update:     Sat 13 Jun 2026 04:57:19 +0000
Manifest next update:     Sat 20 Jun 2026 04:57:19 +0000
Files and hashes:         1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: DtX6PH3OcrPvWP/+jEYR7vmAKAVxlwi22Ufye8hcOUc=)
                          2: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: kiewIghlA3eSE6JqoPitcKxULZmtrJbpqxq8AfoM0zA=)
                          3: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: IiOfuavzgr4udhdI2026QD5t6vsu21nW0i15GhoklvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl
                          rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
        Validity
            Not Before: Jun 13 04:57:19 2026 GMT
            Not After : Jun 20 04:57:19 2026 GMT
        Subject: CN=6a2ce330-d383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e4:b2:79:7c:86:9b:86:f9:2c:d2:ff:e7:e6:
                    2e:01:a9:bb:79:2b:e9:99:8a:a3:93:1d:05:b8:53:
                    bd:d5:86:71:68:c5:87:1a:fd:2e:b9:4b:97:36:be:
                    bf:27:fe:76:61:d9:af:df:a2:2e:6e:95:c9:8e:92:
                    8b:87:aa:16:49:04:e4:88:b1:b3:1e:3b:ca:7c:5e:
                    b2:f6:82:07:5f:c9:1a:96:58:c2:93:22:7d:53:d5:
                    65:fe:a9:04:42:4c:42:9d:45:38:f7:58:0e:46:d2:
                    63:e3:43:0c:d9:d3:40:d9:a7:13:4c:ae:f7:99:d3:
                    84:c2:92:72:b8:43:b9:65:64:32:e0:13:a8:df:1f:
                    20:7a:ce:61:27:64:62:07:fc:02:97:0e:2b:07:db:
                    0f:e7:d7:dd:42:0b:64:8c:9b:a7:be:b7:6c:9c:5b:
                    41:7a:64:d4:fa:6b:99:c6:15:d7:6a:a4:16:79:1b:
                    c4:74:52:8b:48:4b:51:9b:b7:ac:55:ee:d2:90:35:
                    fc:3a:a2:c8:17:ed:1f:8b:58:04:f8:60:25:dc:b7:
                    72:1b:6a:56:0f:1e:cd:17:f5:68:1f:b1:0e:0f:b7:
                    24:71:46:bf:09:49:78:76:04:05:31:f7:27:c4:7e:
                    97:91:b7:45:8f:4c:e9:cb:50:1b:5f:ea:08:8e:c8:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D5:78:1F:F9:79:7E:C2:B5:7A:2F:0A:58:8B:71:1B:8C:7D:85:20
            X509v3 Authority Key Identifier:
                keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:e9:3a:88:25:ba:4e:95:9d:b3:e2:a8:bb:20:51:cb:4a:
         3b:ec:2e:54:6a:18:12:6f:a7:71:25:f9:3f:e1:2c:a1:19:1d:
         96:07:a8:63:bb:7c:ab:7c:42:20:ce:b3:18:fd:14:27:64:07:
         a6:d0:a8:bc:ef:17:a5:a0:0c:30:e7:64:d6:fc:94:71:c4:e2:
         d3:07:2b:84:06:42:72:a2:e6:51:92:a9:1b:ef:f8:2a:80:01:
         01:7a:1f:c8:5b:6e:85:ad:0c:6f:4f:29:44:97:d3:5b:87:9e:
         9d:ec:35:b5:ba:c3:3c:42:77:d4:55:dd:f2:c2:4b:78:28:82:
         12:95:14:62:3c:56:b9:4b:e2:5c:d7:14:5f:f5:81:f7:83:b9:
         17:86:cb:3b:ca:66:58:6e:4c:ff:40:86:ce:79:fd:7e:2b:f5:
         83:6a:3f:92:d3:f2:e5:c4:d3:9f:4d:c1:a4:00:e3:15:30:5e:
         d5:33:cf:8c:a3:81:ab:c3:c6:db:d8:14:78:c3:56:92:9f:45:
         eb:28:cc:42:db:da:80:5b:02:65:92:ad:70:81:bb:e9:fc:43:
         18:c5:85:7f:90:87:53:05:6d:e8:42:65:09:f2:df:e5:70:ea:
         46:46:95:e7:db:41:d6:ba:fd:13:96:4f:15:1c:20:2e:e0:14:
         fb:a9:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:49:12 2026 by rpki-client