Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft
File:                     rSHioIh9gBBYg2nxR4WWAoR3zb4.mft (raw, json)
Hash identifier:          xHFHbvyQyucTN0FJVy6rV6netFIugFR7inWG0TRskB8=
Subject key identifier:   0B:5A:15:58:E9:E5:10:79:2A:EC:02:8B:A4:34:F1:DF:CE:42:43:DB
Authority key identifier: AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE
Certificate issuer:       /CN=A913344F/serialNumber=AD21E2A0887D8010588369F1478596028477CDBE
Certificate serial:       1187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft
Manifest number:          117D
Signing time:             Fri 12 Jun 2026 17:10:04 +0000
Manifest this update:     Fri 12 Jun 2026 17:10:03 +0000
Manifest next update:     Fri 19 Jun 2026 17:10:03 +0000
Files and hashes:         1: rSHioIh9gBBYg2nxR4WWAoR3zb4.crl (hash: AQ8m+ETY0blGgHBrAnsfaJZOJqu0mZQqVXAfM7ZKcBE=)
                          2: 2CDBC1B0251111E997B74770C4F9AE02.roa (hash: Wx/86gHJ71jQTxYclZwaPeqVn76733fuw3ihJhTA/qM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4487 (0x1187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=AD21E2A0887D8010588369F1478596028477CDBE
        Validity
            Not Before: Jun 12 17:10:03 2026 GMT
            Not After : Jun 19 17:10:03 2026 GMT
        Subject: CN=6a2c3d6c-1efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:0f:1b:aa:8d:bd:12:70:d9:81:54:23:54:
                    4c:37:4f:0f:8c:57:b5:0b:0a:14:93:3f:87:85:32:
                    b7:f5:2e:e9:57:09:f0:53:41:27:9e:91:f8:7f:ed:
                    ab:98:6f:aa:bc:42:42:0a:3f:a5:3a:c3:9f:26:a1:
                    1d:10:4c:81:92:7e:12:b2:66:c7:3e:b7:08:11:da:
                    5a:8b:14:00:b3:b5:e6:8b:8e:fd:2b:57:49:52:06:
                    8a:92:d6:8b:df:ea:f4:d7:2d:47:e3:d0:41:24:71:
                    25:8b:4a:03:9e:48:33:2c:6a:0c:e3:61:26:a4:39:
                    6d:0e:e0:80:93:e7:20:bf:58:8c:9b:c0:1c:47:4b:
                    f1:d9:ce:6d:d2:ea:86:7a:c8:24:c3:c9:ba:b6:48:
                    25:8b:d1:54:25:9f:7e:11:86:5b:1e:f0:31:db:09:
                    b2:a2:25:f5:8e:0c:de:2d:a2:63:0e:bf:bf:f6:02:
                    88:ee:34:c4:c3:8b:32:93:7d:67:66:99:fa:7b:f8:
                    5f:1d:8d:93:d1:5b:c9:82:0b:b7:f5:c4:99:40:d6:
                    cc:8c:86:f6:67:f9:42:38:8d:f8:eb:fb:da:69:ac:
                    59:ba:71:58:d7:12:f8:0d:70:8e:14:aa:eb:af:62:
                    2b:37:85:5e:0d:bb:2f:8e:3b:cb:2f:40:6f:25:6c:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5A:15:58:E9:E5:10:79:2A:EC:02:8B:A4:34:F1:DF:CE:42:43:DB
            X509v3 Authority Key Identifier:
                keyid:AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:41:94:f1:b4:20:20:45:87:70:89:8e:97:f2:ec:8b:40:0e:
         97:25:b1:18:cd:72:65:73:b1:46:22:fd:e3:c0:42:f6:a0:d0:
         c4:95:cb:31:39:a1:37:2b:14:3c:5e:f7:95:f7:c4:a4:85:46:
         e7:db:d4:39:a5:f2:c2:bc:e9:20:bd:76:4e:69:16:0d:84:c3:
         47:3b:4f:e5:02:60:98:60:75:fd:71:75:92:93:46:c4:8f:51:
         56:8b:8e:4e:c2:61:5f:1f:36:a0:a0:5f:6b:82:85:fc:d2:25:
         b4:5d:13:35:76:2d:55:36:ff:0a:1d:22:af:82:d5:c2:ac:dd:
         d6:91:42:b2:cc:e7:73:87:76:ec:19:53:79:d6:6d:fb:b8:d4:
         c6:b2:4c:7a:60:0b:ac:fe:60:db:83:08:fa:50:9c:a7:6e:00:
         b3:11:d2:cf:c7:55:35:91:12:7f:d3:7d:58:f2:83:d5:19:23:
         70:0d:5f:2d:15:97:8f:65:4d:d2:ff:ae:d6:fb:3f:92:17:87:
         4b:9e:88:6b:d7:b4:ce:8f:db:41:55:00:c8:b5:e3:ea:81:2a:
         df:d4:6c:d0:70:52:e1:33:72:70:ff:07:92:f7:6d:28:12:f8:
         3f:83:46:d1:cf:2f:81:9f:51:d7:c2:0b:94:bf:cf:14:ee:ae:
         df:ba:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:38:54 2026 by rpki-client