Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft
File:                     lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json)
Hash identifier:          9XVawf7aNh4eCtQtc0F3pisX61NVIoLvdoazdzDtKow=
Subject key identifier:   23:27:7D:97:95:BC:6A:9D:DB:B8:B7:2B:3C:F8:E6:AE:1F:25:22:67
Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57
Certificate issuer:       /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
Certificate serial:       09CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft
Manifest number:          09B3
Signing time:             Fri 12 Jun 2026 20:01:53 +0000
Manifest this update:     Fri 12 Jun 2026 20:01:52 +0000
Manifest next update:     Fri 19 Jun 2026 20:01:52 +0000
Files and hashes:         1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: PniC0AdaAKYOQlAZ3tCn37dGVyLq14uA6gmtgT9UKVU=)
                          2: C51E21964E6E11F18914D768AA833773.roa (hash: zipkwEwfKvKs9YWsnBUKVG+rOAHA5B8lFyQzCssBVr0=)
                          3: C6375A0C4E6E11F18914D768AA833773.roa (hash: LWTMgu/Rj8mxnaBR+W4WL09UY/B1DqeAC/Sg7AaI1Xg=)
                          4: 73F46EA421DE11F18A474186263D8C67.roa (hash: 3UN4xbRTimMuR44cwoOR2FSGZhlpECHhB+D/CVZEmSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl
                          rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2510 (0x9ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
        Validity
            Not Before: Jun 12 20:01:52 2026 GMT
            Not After : Jun 19 20:01:52 2026 GMT
        Subject: CN=6a2c65b1-8c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:0b:79:0f:ee:65:c7:ae:a4:74:e2:a0:65:
                    7f:bb:56:0a:48:7d:5e:25:b8:55:7e:6e:4c:83:11:
                    62:86:45:93:4b:a8:c0:f3:5c:30:ae:d5:27:51:c9:
                    05:5b:9e:eb:25:2f:e8:86:ed:05:80:94:11:13:c9:
                    31:92:3b:77:e8:e1:fe:53:ae:db:ec:5f:10:a9:90:
                    44:64:dd:f5:d3:fb:32:2a:ed:18:12:33:8e:d9:66:
                    22:95:09:35:5c:7b:e7:12:d1:b5:72:30:2c:d5:d7:
                    a3:1f:5f:83:4e:50:a0:05:82:2e:86:81:e4:aa:d8:
                    87:41:e0:66:82:ab:bb:a4:0e:34:0e:ed:53:6b:75:
                    dd:57:a3:04:68:38:e5:5e:f9:47:78:c3:2b:6b:ed:
                    12:8e:9d:3f:a5:17:3c:fd:cc:2a:63:a3:9a:d8:38:
                    41:6c:f1:83:cb:c8:ff:21:9c:1c:e8:22:4d:e4:e3:
                    a7:68:ae:ef:27:ad:23:9e:c5:b1:41:9b:f7:f5:72:
                    a2:e7:e6:c3:ba:9a:fa:20:80:3e:68:4b:f5:c0:7b:
                    aa:45:a0:e2:ef:c7:dd:43:51:8c:d5:11:28:30:6a:
                    05:3b:f3:d5:10:ef:e5:05:35:a0:87:a8:ef:b6:e2:
                    e5:72:c2:22:b0:21:5c:e2:e7:72:4e:0c:66:f8:8c:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:27:7D:97:95:BC:6A:9D:DB:B8:B7:2B:3C:F8:E6:AE:1F:25:22:67
            X509v3 Authority Key Identifier:
                keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b2:b6:97:e7:2d:7d:48:fa:c3:74:32:92:ef:c1:84:83:85:
         8a:c8:0e:65:90:d5:07:df:dc:f8:b0:ff:92:63:79:17:69:63:
         03:6c:6f:da:1c:00:aa:bb:7e:01:e7:e4:44:55:58:fe:2e:15:
         cf:71:cb:b8:fe:26:f2:6d:0a:e4:66:b5:91:24:bc:ef:bd:e4:
         35:92:29:9f:5e:a4:ca:8b:f0:84:95:c8:07:35:93:fc:7d:64:
         00:60:fc:18:03:98:7d:dd:bd:b3:7d:7c:25:b6:39:8f:aa:cb:
         c2:c3:50:f9:9a:0a:ab:6c:f7:c3:3f:b9:c9:96:b6:33:63:5d:
         ae:ff:17:ce:35:fe:53:8d:cf:f2:cb:96:6c:40:ba:78:a1:cf:
         f2:f3:ce:b9:d8:9c:09:e3:0a:52:13:87:f0:67:6a:14:53:d8:
         1d:c4:a1:a7:bc:96:05:4b:c3:32:94:d9:bf:3d:f6:93:65:c0:
         f1:2d:98:11:86:54:da:24:75:56:4d:65:01:3c:3a:33:d3:df:
         44:88:51:7b:da:30:ea:0a:ef:35:2e:3a:1b:4f:9a:88:6d:64:
         a4:38:36:66:92:ec:c5:46:1d:46:af:4e:94:05:fb:bf:16:4d:
         b8:3c:8d:c6:02:4d:52:e8:79:22:3e:2e:a5:05:0c:26:33:44:
         bf:29:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:49:53 2026 by rpki-client