Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
File:                     ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json)
Hash identifier:          Dv5NxvyKfCc7/p6dL77+g4WopyL2c53ceNZBA0JkA7w=
Subject key identifier:   7D:6A:6D:29:AF:C2:86:9D:EE:33:05:CC:D4:75:E4:88:38:97:FA:83
Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
Certificate issuer:       /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
Certificate serial:       042F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
Manifest number:          040D
Signing time:             Sat 13 Jun 2026 00:28:51 +0000
Manifest this update:     Sat 13 Jun 2026 00:28:50 +0000
Manifest next update:     Sat 20 Jun 2026 00:28:50 +0000
Files and hashes:         1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: S9crhpLMp8eC8xtLNfvARjWeBbBnWm6YwFZZSsWY4xk=)
                          2: 2A616414808A11EF813A8343C4F9AE02.roa (hash: H4XlQT8YJyI/+h2ZQgxbC5lWcfJk5rnOXu02XWl3y7o=)
                          3: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: Ta8P8ZlJNRZOOFxGWrA6sGVXlUCQZKAEPu0o6UyWhpE=)
                          4: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: X3lbzZGPgotkq76L6mKpw9+PljAruzWQzmyb0blRPVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl
                          rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071 (0x42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
        Validity
            Not Before: Jun 13 00:28:50 2026 GMT
            Not After : Jun 20 00:28:50 2026 GMT
        Subject: CN=6a2ca442-47f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:a9:d1:36:32:37:5a:bd:44:4c:af:64:57:
                    17:0b:c8:3b:d1:44:cb:8c:73:5b:02:70:05:4c:b8:
                    2a:33:68:fa:b6:64:1d:ee:42:6f:fd:91:87:3a:0e:
                    ce:9d:2a:7b:a2:8f:45:d0:4a:e2:27:c2:e6:ad:2e:
                    13:89:66:e0:6c:a9:24:6c:79:dd:45:dc:ad:59:78:
                    cb:01:94:af:36:45:1b:7f:27:54:04:74:89:36:f5:
                    e3:c5:1e:1d:f6:34:ee:18:75:26:38:7b:28:46:70:
                    5a:2e:e4:22:2e:c8:4b:2b:a2:e6:4a:a2:6a:38:66:
                    9b:1c:d9:23:88:63:64:f4:0b:93:32:d3:cb:a4:f2:
                    95:77:29:32:06:5a:04:73:b7:95:0c:01:34:45:80:
                    b0:17:07:c6:0d:73:87:9c:af:05:8f:2e:5e:56:fd:
                    18:ab:67:2e:20:ae:3b:66:44:69:d3:b2:b5:b3:93:
                    f8:90:85:7b:fa:30:73:88:fe:7f:f9:6e:d8:73:2c:
                    bb:bf:1e:23:27:3a:3a:6e:e0:66:c5:6e:fa:ae:de:
                    c4:6e:79:d3:c9:dd:e4:d3:a5:55:97:39:14:bb:dd:
                    ee:c7:27:3d:05:6b:b2:83:54:d2:00:42:47:30:53:
                    62:1c:c4:32:57:c9:04:9f:7f:b3:33:e5:78:7f:21:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6A:6D:29:AF:C2:86:9D:EE:33:05:CC:D4:75:E4:88:38:97:FA:83
            X509v3 Authority Key Identifier:
                keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b7:fc:7e:30:51:b4:a6:ca:f2:8d:a4:f0:50:cb:34:f9:d7:
         b8:75:3a:4d:71:7b:f3:d0:23:a5:e1:5c:e9:9d:cb:1e:3a:71:
         ec:8d:33:7b:c8:2b:af:bc:a3:73:93:e2:e9:02:37:4f:2a:6d:
         5c:24:04:31:5b:82:15:e4:99:fa:77:f0:2d:7c:d1:5a:fa:bc:
         09:84:59:bd:31:84:6f:37:8b:ba:54:f8:52:49:c8:e2:89:1d:
         6f:ee:86:98:6f:b6:3e:1f:e4:18:5c:47:f8:53:f5:7c:83:9e:
         35:36:13:89:44:fd:7f:61:76:6d:9b:5b:11:84:38:c2:3f:08:
         b2:30:57:cb:c2:d2:86:ec:7d:c2:1f:fa:89:f0:30:2f:58:81:
         95:f8:6c:b8:71:c1:ae:86:6a:ba:d9:1f:10:11:ff:88:03:b8:
         88:87:f1:a7:c7:69:9c:d0:d8:8f:54:f3:a2:1c:df:b5:ee:74:
         ce:82:3a:28:70:09:28:23:1b:e2:90:33:29:7f:b2:f1:cf:46:
         bb:fb:bf:ad:a1:0e:84:a9:c7:1c:54:4b:74:0c:31:a6:36:59:
         af:62:3c:34:63:4b:50:e3:07:29:04:19:15:b3:f4:cc:48:9c:
         ae:27:22:71:19:ac:26:20:34:77:04:28:31:0f:96:04:1d:07:
         0d:08:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:08:32 2026 by rpki-client