Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
File:                     AEu7wBxXH6cPIOpEBQBX2dyeutI.mft (raw, json)
Hash identifier:          ExWTjlH1E/IVpdUwnqMq7FqIFLkSYaW4cHTq7Q9ZZ2c=
Subject key identifier:   7C:6A:46:97:9C:60:1E:15:A2:FB:65:D0:E1:5C:97:F0:F7:53:B3:E5
Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Certificate issuer:       /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Certificate serial:       01A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
Manifest number:          01A4
Signing time:             Sat 13 Jun 2026 04:11:09 +0000
Manifest this update:     Sat 13 Jun 2026 04:11:09 +0000
Manifest next update:     Sat 20 Jun 2026 04:11:09 +0000
Files and hashes:         1: AEu7wBxXH6cPIOpEBQBX2dyeutI.crl (hash: 8kFQMUKC0Anvt00MKvzedL4FkdHqYDR7dRaRQy0CrEU=)
                          2: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (hash: MyCVqIOapLAqkPEbtp0lVmBHxbYqY2/3hoqeYDo7nAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl
                          rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326B3, serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
        Validity
            Not Before: Jun 13 04:11:09 2026 GMT
            Not After : Jun 20 04:11:09 2026 GMT
        Subject: CN=6a2cd85d-ad18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d6:ef:74:cd:2c:e1:f9:cd:84:be:29:ab:ea:
                    6b:55:47:6e:79:db:25:89:64:d0:c9:df:e8:9d:d5:
                    a4:30:88:36:08:f4:20:c4:d5:18:10:bb:2b:99:f0:
                    98:4e:54:38:27:44:f1:52:be:15:99:be:da:fd:9f:
                    02:10:e2:46:4e:2f:ba:e5:8b:a9:a5:b9:4b:22:99:
                    70:2f:c7:6c:9d:0d:db:5f:db:5f:c2:35:a5:27:88:
                    1f:21:ec:44:7d:8a:fb:ac:fb:71:5f:a5:13:16:b5:
                    f1:a1:34:4f:2d:de:44:06:4c:65:e1:20:84:45:d7:
                    21:ba:c0:38:5f:8b:25:9f:1e:e9:e7:71:aa:14:b0:
                    64:aa:16:c1:8e:e4:19:fc:69:22:85:94:51:d4:53:
                    28:7c:95:29:e8:12:42:72:03:b0:d4:27:fc:04:d7:
                    48:5e:ed:8b:3a:61:75:c2:23:a8:13:83:e2:a5:7b:
                    b6:25:3e:ea:48:a4:a2:7b:aa:da:52:ce:0e:f0:7a:
                    3f:4c:2e:81:39:76:ca:77:d1:c4:4a:04:0b:3a:ee:
                    73:b6:64:c4:cd:34:a8:39:d0:98:82:a4:f6:49:f1:
                    05:7e:83:a7:44:de:9a:ab:1c:67:b9:0e:9b:60:f1:
                    9f:53:0b:9c:3e:f5:3a:b5:9c:02:c9:5a:8a:78:8e:
                    e0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6A:46:97:9C:60:1E:15:A2:FB:65:D0:E1:5C:97:F0:F7:53:B3:E5
            X509v3 Authority Key Identifier:
                keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e1:bd:9a:d1:90:dc:9a:8d:ec:c9:cf:9a:2f:91:40:2d:22:
         f4:e8:b6:7e:9c:a5:c8:41:ea:db:8c:f4:04:52:85:8e:b7:63:
         25:6f:9b:a8:be:ee:e1:a6:a6:12:4a:6e:fe:fd:38:8a:b2:8c:
         cc:18:ae:56:41:70:e3:a9:eb:55:44:37:df:cd:95:ab:7b:15:
         10:d6:e2:a1:0f:dc:61:96:34:ee:0c:70:6e:54:81:76:1e:b1:
         3f:6f:94:37:39:1e:ce:3e:c7:67:a5:e6:e1:5e:76:7d:0d:b9:
         41:02:b0:f6:6b:f9:3a:80:12:23:c0:a1:ff:63:d9:03:93:28:
         b9:9a:bc:a9:eb:a5:a8:db:69:67:df:2e:1e:47:29:f5:65:c9:
         e9:87:0d:d0:5f:7b:cc:f4:53:f4:5c:c0:62:c7:e2:ce:b5:7f:
         c7:0b:1b:c0:d4:83:84:6a:74:cb:9c:c2:cc:2c:9b:8a:c2:73:
         a8:a5:a4:ab:3a:c6:8c:c6:ce:e5:2d:8e:4f:68:7b:d6:20:0e:
         4c:48:64:c7:69:21:11:53:df:71:cf:bf:d9:bc:67:45:32:eb:
         8f:83:ff:b0:72:f4:8e:df:28:6c:af:80:4c:a7:59:4a:57:b9:
         18:ec:bd:ad:7e:d9:18:1d:2d:2a:f2:6b:ef:e6:94:96:8a:02:
         62:84:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:49 2026 by rpki-client