Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
File:                     8a29DnE5HfIQ3jRh52V4tHoBYko.mft (raw, json)
Hash identifier:          Lry7Po4jbf72xikEll5opWWJI8ZKrJQAmTRu0Xbj/N8=
Subject key identifier:   33:10:62:32:1F:FB:5D:69:0A:34:94:A8:3B:3D:44:D9:E3:6F:54:F9
Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
Certificate issuer:       /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
Manifest number:          01B6
Signing time:             Sat 13 Jun 2026 03:58:24 +0000
Manifest this update:     Sat 13 Jun 2026 03:58:24 +0000
Manifest next update:     Sat 20 Jun 2026 03:58:24 +0000
Files and hashes:         1: 8a29DnE5HfIQ3jRh52V4tHoBYko.crl (hash: ZDdDAoohfu/CAEcOflEO9W+icNiLVpS+0Z4Th5mZS7Q=)
                          2: 1D63B4248BB011F0A730E413C4F9AE02.roa (hash: Klyy/dVtwsbFsvWmxb8UIFOVeT5tKXYuBYTRi8r0Nuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
                          rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
        Validity
            Not Before: Jun 13 03:58:24 2026 GMT
            Not After : Jun 20 03:58:24 2026 GMT
        Subject: CN=6a2cd560-fa02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:3d:e8:7d:23:b8:86:cf:33:d7:71:ee:96:
                    05:8b:3f:a9:2b:2b:f5:c8:8a:4f:a5:35:19:91:d3:
                    e9:41:86:76:0f:0a:a2:af:ba:5d:ba:1d:1b:43:ab:
                    44:63:c9:35:c9:ce:52:d1:0b:b0:5e:88:47:d5:f8:
                    9d:a5:41:16:0d:60:ed:e2:ca:65:50:c5:9f:a5:84:
                    c4:f9:22:83:63:6e:7a:a6:d7:b6:77:9e:33:d5:0c:
                    59:21:8b:8c:76:0d:1a:0d:56:0b:aa:11:e0:3d:a5:
                    8b:bc:1b:29:2c:2d:b3:79:81:ef:fa:8a:ad:a5:7c:
                    05:d2:e0:44:c0:1e:c7:7e:6f:59:df:e3:4c:c6:61:
                    dc:85:47:b2:14:3f:7a:ef:fb:65:7f:91:48:54:80:
                    70:76:48:ad:25:d9:d6:3b:6f:a6:72:21:b7:2d:2e:
                    a7:10:a6:89:8c:87:e8:db:21:d0:4d:9c:a8:73:ad:
                    db:e8:08:c7:1b:e2:6d:66:d9:9a:9a:53:cc:1d:7e:
                    61:17:65:0c:39:1e:25:4c:d6:86:f7:77:d7:16:25:
                    69:b1:4e:4f:ba:8c:2a:b1:ed:8f:69:41:8a:ec:c6:
                    6e:c4:08:01:da:e5:f2:c6:a1:76:17:a5:6e:73:de:
                    1c:1d:6a:4e:18:8c:e7:95:cd:39:72:67:c1:85:49:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:10:62:32:1F:FB:5D:69:0A:34:94:A8:3B:3D:44:D9:E3:6F:54:F9
            X509v3 Authority Key Identifier:
                keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:8c:1b:78:e9:b2:f5:40:11:26:f9:76:94:8a:0d:bb:a2:52:
         1c:9e:53:cd:73:78:dc:54:50:b3:53:5d:d4:a0:9a:3f:50:20:
         ef:bb:a0:3b:c4:6e:94:c2:10:e3:30:b8:b8:b5:5e:32:9f:71:
         b7:c0:6b:b6:44:f6:d4:31:69:87:80:01:e4:a9:f6:07:bf:5a:
         c5:55:11:dc:58:e2:be:d8:e3:bd:79:71:8b:65:12:10:3d:f6:
         ee:3f:84:33:68:51:4c:2e:0c:6a:5d:58:09:09:58:7c:3d:da:
         ea:6e:c0:ca:8a:3d:08:5c:d9:7c:e8:ab:1d:85:b5:6f:0f:2b:
         9e:90:f8:ef:c7:58:48:4d:68:b9:92:9b:87:3a:2b:2f:8e:ed:
         71:84:5a:09:2d:71:35:9f:2d:da:19:56:48:8f:09:23:ce:22:
         c6:19:d3:26:4f:74:57:48:ce:6c:cb:3a:ef:8e:3a:c0:88:bf:
         ef:2f:72:21:b9:cb:70:33:80:58:a5:fa:38:f0:f9:f2:dd:73:
         99:d4:61:4d:91:4d:bc:12:7a:aa:a3:6f:c7:bf:2e:8a:b2:f5:
         2c:8b:87:93:44:c2:69:79:9e:7b:be:50:5e:43:7e:f0:f8:68:
         66:ba:c1:11:15:ba:87:99:47:ef:53:f2:cd:8c:3c:9b:d6:23:
         fc:c5:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:57 2026 by rpki-client