Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.mft
File:                     R2lFsh8liffnEnUf50f6IUOlI1s.mft (raw, json)
Hash identifier:          4/6MKddxt7S/6TNpLofOkszEQsHJ7K3zK9+7Z00veX0=
Subject key identifier:   90:E4:5E:CD:43:7D:35:29:5C:36:D4:15:0D:0B:0E:00:B2:28:AB:47
Authority key identifier: 47:69:45:B2:1F:25:89:F7:E7:12:75:1F:E7:47:FA:21:43:A5:23:5B
Certificate issuer:       /CN=A9132B1D/serialNumber=476945B21F2589F7E712751FE747FA2143A5235B
Certificate serial:       032B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2lFsh8liffnEnUf50f6IUOlI1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.mft
Manifest number:          0324
Signing time:             Sat 13 Jun 2026 01:09:56 +0000
Manifest this update:     Sat 13 Jun 2026 01:09:55 +0000
Manifest next update:     Sat 20 Jun 2026 01:09:55 +0000
Files and hashes:         1: R2lFsh8liffnEnUf50f6IUOlI1s.crl (hash: VXnYvAtycijYm89Aftw0pbaRCN45D+tNw5ksCyNJ4lc=)
                          2: A917D87217A711ED8D17FC7CC4F9AE02.roa (hash: CHlJpAmUO3HeXSZX7Pc0z854lGAon91AqOY8MRP1VAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.crl
                          rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2lFsh8liffnEnUf50f6IUOlI1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B1D, serialNumber=476945B21F2589F7E712751FE747FA2143A5235B
        Validity
            Not Before: Jun 13 01:09:55 2026 GMT
            Not After : Jun 20 01:09:55 2026 GMT
        Subject: CN=6a2cade4-83ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:30:b3:66:18:43:81:fd:53:f9:3a:ea:72:
                    38:19:c2:59:5b:a1:d2:0c:6a:56:b5:ba:00:36:33:
                    f1:b2:1b:f6:3d:af:28:54:05:52:c8:3f:9d:f5:d6:
                    73:71:be:eb:7a:0c:7b:c4:03:b5:9e:10:d6:d6:19:
                    b5:fc:22:37:36:86:95:cf:0f:b5:71:be:0b:86:38:
                    7a:d2:16:a1:e7:44:3c:cb:2f:31:1b:87:c8:55:eb:
                    8a:8a:40:ef:f8:3a:34:fe:b3:fb:7f:24:af:02:7c:
                    9c:45:ff:23:44:e1:62:84:12:f0:c8:52:45:68:91:
                    4a:8f:6b:26:1d:15:0f:98:3a:21:ee:5e:63:8c:b0:
                    42:de:3f:1e:59:14:b2:d6:19:ff:ac:61:74:d5:be:
                    2d:a9:7e:41:7a:99:8f:00:a4:cc:4b:3c:92:f3:e1:
                    67:13:7a:d7:58:1d:8f:ef:86:c0:cd:85:72:61:7c:
                    b6:75:97:d2:26:0d:eb:70:44:7b:82:7a:98:7e:05:
                    5a:cc:ea:86:65:94:6f:57:73:36:a7:06:a3:43:0d:
                    b7:af:98:43:f7:ae:60:16:96:cd:ff:c2:d1:b2:98:
                    f4:d7:83:34:3f:e4:b9:1f:6d:eb:e3:f2:1d:b4:b7:
                    ac:1f:68:d7:3e:71:4f:97:ad:ca:c0:ab:b5:4d:26:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E4:5E:CD:43:7D:35:29:5C:36:D4:15:0D:0B:0E:00:B2:28:AB:47
            X509v3 Authority Key Identifier:
                keyid:47:69:45:B2:1F:25:89:F7:E7:12:75:1F:E7:47:FA:21:43:A5:23:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2lFsh8liffnEnUf50f6IUOlI1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:23:80:56:35:a6:21:ca:d4:85:6b:1b:83:7c:ea:3b:2f:7c:
         76:45:52:b2:05:15:14:8e:72:d4:fa:c4:66:db:3c:43:6e:0d:
         2b:c2:35:cf:a0:95:ca:f1:95:d9:7b:78:67:a7:fc:30:4c:00:
         fe:0d:ed:f1:25:70:ca:74:a2:7a:a8:93:ee:04:dd:f2:31:b1:
         d0:04:fb:eb:8d:95:a8:c8:36:84:27:0a:f7:02:da:c4:e8:35:
         56:5c:89:a1:af:8c:08:59:5e:de:d3:27:1d:14:b5:2a:b6:d0:
         63:0c:b4:3b:43:96:81:3e:a5:0e:d4:6e:d0:32:08:ef:a5:51:
         67:c8:9f:87:db:b3:3e:75:d4:61:c8:25:3b:da:09:ff:bc:3a:
         31:73:d0:75:83:fb:e6:15:be:2f:27:fc:d9:97:e4:32:47:b1:
         20:50:5d:72:67:be:b4:9b:2d:50:dc:a5:6d:98:4c:23:a9:ca:
         9f:c7:31:52:29:90:f0:6b:4e:93:1e:a1:10:69:1b:4c:9e:99:
         b9:69:04:61:c9:9e:d2:cb:35:42:54:fb:02:09:ba:27:e6:ff:
         23:88:d0:6f:f3:91:be:ba:82:e8:11:ab:4b:47:bb:40:31:73:
         ac:08:72:4f:9c:f9:a0:59:85:9f:eb:8d:72:0b:e0:21:6c:84:
         34:8e:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:13:05 2026 by rpki-client