Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
File:                     E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json)
Hash identifier:          mCrAwQzXrXB26HVOAT3GYFte9I5qlKXDz8V4fPHQim0=
Subject key identifier:   2C:B6:1B:C8:82:B0:5E:6D:E1:C0:AA:3F:28:42:0C:87:DD:D2:5D:0B
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Certificate issuer:       /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
Manifest number:          016E
Signing time:             Sat 13 Jun 2026 04:42:59 +0000
Manifest this update:     Sat 13 Jun 2026 04:42:58 +0000
Manifest next update:     Sat 20 Jun 2026 04:42:58 +0000
Files and hashes:         1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: vzljoEyknMCCp7Xmxhn3MgdWHp/KqPmRpegGRcmKwO0=)
                          2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: HlUO0ONie9spEM92jusEyJRYy9zRFqGpZ3NndsommrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
        Validity
            Not Before: Jun 13 04:42:58 2026 GMT
            Not After : Jun 20 04:42:58 2026 GMT
        Subject: CN=6a2cdfd2-e8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:9f:16:f1:5b:9b:fd:27:10:24:56:fa:2b:
                    76:54:bf:5e:4f:51:5e:9f:0b:30:f8:28:69:32:97:
                    2d:0c:9e:4f:9b:38:fc:17:05:e1:53:07:30:2f:4b:
                    93:d1:f5:9e:01:f2:19:e8:ac:27:e8:58:99:0a:c0:
                    ed:30:7f:aa:fe:88:31:98:59:c1:8e:8d:0e:dd:c0:
                    04:58:a2:b0:59:a0:70:71:9d:76:12:67:3e:1e:c9:
                    d4:bb:4e:50:2f:2d:9e:3f:be:dd:17:86:64:07:f7:
                    f4:5e:83:c8:5f:ef:7f:bd:1f:12:9c:b0:25:56:5e:
                    c8:f3:f4:4c:31:df:4b:86:66:3f:c3:6e:a1:d0:8d:
                    fc:7f:be:6c:e3:5a:4d:cf:37:3e:eb:e5:c9:fd:6b:
                    38:3b:0f:2d:07:37:1f:b6:2a:3b:9f:7a:1d:3a:b9:
                    df:af:fb:b2:19:06:33:14:f6:43:c5:d3:80:a4:69:
                    dc:cf:b5:17:6f:4b:18:1d:a2:a3:5c:38:b2:bf:5f:
                    ed:8b:b6:c2:45:70:f0:9b:61:de:9a:72:12:c7:d5:
                    1f:22:dc:87:b1:8f:47:b8:b3:cd:b7:7e:25:3f:78:
                    8f:73:4c:27:8a:ab:65:9f:d7:c6:85:5d:e4:f6:fa:
                    3e:53:13:47:e4:63:1d:f7:98:53:96:a3:2f:37:6f:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B6:1B:C8:82:B0:5E:6D:E1:C0:AA:3F:28:42:0C:87:DD:D2:5D:0B
            X509v3 Authority Key Identifier:
                keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:e9:2a:43:56:f7:b9:d0:18:11:dc:3f:24:86:53:36:b7:
         b2:b8:d8:8e:22:ac:8e:89:31:56:d4:64:83:29:c5:c5:e8:68:
         0c:f9:03:72:7f:5e:ae:f4:c5:a3:06:21:02:7e:a4:67:c8:49:
         8d:08:27:ee:83:22:7c:4f:a8:02:27:36:94:41:13:23:17:3f:
         6e:1e:69:59:d1:84:7b:14:64:b1:7f:b0:aa:57:16:b8:31:cd:
         39:f8:70:57:34:67:3d:5a:16:ae:70:05:22:be:fb:93:3b:c5:
         34:2c:e3:82:92:79:2f:55:5d:14:b6:0e:99:24:bc:46:14:e6:
         f5:95:f1:d1:e7:53:e2:7a:e4:b4:31:9e:ff:bb:ca:aa:71:ee:
         32:bf:87:e1:f8:c9:ae:f9:39:75:5c:0a:7d:a2:01:8e:25:12:
         5d:f8:b9:35:83:42:86:8e:ec:10:25:b4:fb:55:67:d9:80:32:
         45:e8:13:86:fb:dd:a7:e2:9b:21:18:ad:2b:87:45:1a:75:12:
         cf:7c:cd:70:8d:ed:f2:51:d5:2d:7a:69:f6:47:48:c9:55:48:
         68:53:00:d7:2f:fc:46:54:73:41:44:4d:9a:70:b9:53:32:f1:
         d5:33:b8:95:45:d8:f8:94:6c:79:db:c4:ef:41:76:0c:a5:54:
         b8:6b:bf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:33:52 2026 by rpki-client