Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File:                     yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier:          tzIfeih8eb9KSZEkG5xYpAZH3JDTCHT3L9xlvQvq7Dc=
Subject key identifier:   67:68:60:2E:AB:2B:EE:EE:0E:50:02:13:5C:EF:B0:BE:09:6A:A7:2B
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer:       /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial:       0CC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number:          0CB9
Signing time:             Fri 12 Jun 2026 18:30:15 +0000
Manifest this update:     Fri 12 Jun 2026 18:30:14 +0000
Manifest next update:     Fri 19 Jun 2026 18:30:14 +0000
Files and hashes:         1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: MWgRqerxS3r7bYQptTp1yFrrUl2Cs7eizpxAJCWeBLQ=)
                          2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: k4o/xpl05MWpxfINsWsD9ge7BlRuKXGB+2xC5Rxqzp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
                          rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3269 (0xcc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
        Validity
            Not Before: Jun 12 18:30:14 2026 GMT
            Not After : Jun 19 18:30:14 2026 GMT
        Subject: CN=6a2c5037-d622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:b4:22:ac:38:33:7a:de:98:c7:c2:ca:d4:
                    ef:1e:56:45:93:fe:14:c3:2a:7c:dd:0e:26:9d:92:
                    6d:03:b1:b9:50:11:d2:91:87:c4:2d:15:64:ba:bc:
                    47:13:59:5b:e7:35:a2:ab:0f:00:4e:1d:10:91:2e:
                    54:09:d9:ca:35:3c:e1:24:fe:3b:30:66:f1:88:ac:
                    74:c9:48:5d:f9:6d:74:e9:dd:2a:a8:f5:34:db:33:
                    24:1b:78:77:4f:40:99:98:ce:9a:3c:e5:ac:bb:27:
                    da:10:bd:a2:d7:4b:2a:6f:07:f6:1f:ab:b4:e9:b7:
                    34:55:0f:66:36:75:22:96:24:31:6a:f5:9d:cd:da:
                    f6:b2:3b:f2:69:df:f1:42:b6:52:df:6c:19:a0:ce:
                    30:fc:70:72:45:7d:16:9f:09:a8:c2:77:00:31:3a:
                    d8:b0:13:ee:7c:a1:e2:e3:cd:fa:1b:62:85:61:07:
                    84:51:bc:c2:f7:26:40:1c:17:7b:03:f6:fb:57:5e:
                    ef:e1:c6:05:9d:c7:0a:78:63:96:e6:97:2d:36:c1:
                    08:be:9c:0a:a3:86:e9:60:82:b4:52:14:aa:fe:b9:
                    f0:a0:7f:51:2d:25:d9:5c:20:42:64:53:ed:23:81:
                    aa:3a:12:b5:62:4e:ad:ea:fd:ac:21:5e:f3:34:04:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:68:60:2E:AB:2B:EE:EE:0E:50:02:13:5C:EF:B0:BE:09:6A:A7:2B
            X509v3 Authority Key Identifier:
                keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:1b:f4:3a:fd:bd:55:c3:48:e8:89:61:c7:a7:54:cd:46:
         f1:41:00:0e:6e:0f:cd:99:30:2d:03:c0:dd:86:dd:fd:40:1e:
         49:7f:a7:28:3c:4e:2e:8a:5f:88:f0:66:5e:6d:76:99:2e:0b:
         71:f3:10:a8:3a:dd:ec:d3:a3:f3:ac:cd:b5:75:ea:22:4f:00:
         3f:c7:44:74:0b:e4:a8:6e:dd:ce:11:75:e5:5a:f8:1d:77:d8:
         83:97:b2:8b:86:26:ce:98:95:1e:cd:f0:4f:d9:b7:54:04:69:
         a3:a9:15:15:84:06:14:01:36:98:4e:6f:82:92:bd:c3:e7:1b:
         1d:33:62:65:16:a4:30:e7:92:59:b7:0b:ab:d7:29:68:6a:ec:
         03:34:14:ac:9b:1d:d7:cf:a4:de:1d:f0:b7:5a:ff:60:2e:a3:
         99:3b:5d:8d:f2:09:e0:0f:31:27:8f:6b:82:92:d9:0a:88:3d:
         eb:b3:15:a2:c6:a6:e3:64:3a:1c:77:d5:0c:7a:9d:a3:af:cd:
         f4:76:2c:fa:1c:e9:c1:2a:cf:db:fa:88:6d:9e:c7:ac:71:92:
         0f:bf:c3:88:47:79:22:b3:08:10:63:08:8b:56:9c:32:bc:52:
         b7:d8:15:cb:40:60:7c:9c:a1:d0:12:4a:27:48:ff:07:1e:f9:
         84:65:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:17 2026 by rpki-client