Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
File:                     i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json)
Hash identifier:          H+F6cXBFS8m2Vq3B8dFOZQcRSRjwhG11SQba22G1r4E=
Subject key identifier:   95:E6:60:9A:33:60:EF:77:EB:44:C3:47:6B:AF:E6:11:1A:AC:2E:5B
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Certificate issuer:       /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
Manifest number:          0140
Signing time:             Sat 13 Jun 2026 05:20:37 +0000
Manifest this update:     Sat 13 Jun 2026 05:20:37 +0000
Manifest next update:     Sat 20 Jun 2026 05:20:37 +0000
Files and hashes:         1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: aZ/C9TWIzdW90p9uR6I5UYuLm7oQbhzTrP21GTR5lfs=)
                          2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: i2D61RcLKQP58CDCbPDGvuB2d5cTYj011lg/w0u6Ink=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
                          rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
        Validity
            Not Before: Jun 13 05:20:37 2026 GMT
            Not After : Jun 20 05:20:37 2026 GMT
        Subject: CN=6a2ce8a5-1602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:f7:f8:a6:44:6a:af:6b:70:26:bb:a1:4b:
                    53:73:a6:59:84:8b:3f:39:7d:0a:46:35:98:cc:1e:
                    1e:05:0f:e8:0f:af:aa:10:6c:0c:3b:96:04:3d:be:
                    9c:ed:5a:08:ce:1b:df:6e:cc:48:2c:b5:e5:d6:c0:
                    c3:b9:6a:8b:66:f6:c9:29:b6:fe:52:12:59:48:13:
                    ce:b5:4f:0f:43:a9:78:c9:e8:2f:4d:e8:c3:fa:62:
                    80:77:40:dc:6e:71:13:88:05:7d:ad:e6:5e:c3:23:
                    2d:ce:e0:cc:da:0a:22:07:42:03:f8:ec:eb:76:b2:
                    40:0e:af:c2:52:4d:1a:1a:7d:08:83:56:2b:66:40:
                    5f:dc:9f:63:23:1e:c7:e0:6b:ba:f4:58:78:fe:f5:
                    af:e3:27:76:43:6d:3c:70:b4:84:e6:ea:fa:f7:55:
                    42:34:08:d0:04:53:44:39:5c:a5:19:2a:cb:b1:8f:
                    fa:04:7c:89:b8:ba:bc:99:3c:28:00:49:d4:1f:4b:
                    a9:f5:67:90:ef:32:92:da:02:88:bd:8a:5b:b9:1a:
                    f8:28:61:69:4e:f9:62:d4:b7:a2:45:9d:70:d6:a1:
                    3f:d0:d6:35:6b:cd:b1:cc:84:71:bc:01:4f:ca:4d:
                    af:2f:80:6c:f1:4e:c8:e2:11:77:e8:9b:32:e0:2c:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E6:60:9A:33:60:EF:77:EB:44:C3:47:6B:AF:E6:11:1A:AC:2E:5B
            X509v3 Authority Key Identifier:
                keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:34:10:5c:6f:3f:a1:e8:9c:71:a1:f3:04:ae:94:1c:fe:c4:
         6b:1c:b6:b7:f5:29:51:0d:b7:4a:3f:99:1d:ac:c3:6d:8d:ca:
         70:15:a7:01:ed:f1:10:14:64:71:82:db:cf:8f:9d:34:ca:40:
         b4:90:e2:73:fb:60:0e:d4:b4:3d:9b:03:48:9d:7a:74:99:d3:
         f2:79:c4:fd:f7:ef:07:d5:bf:e1:8f:96:be:8b:d1:63:36:9a:
         c5:6a:a3:dd:7d:c2:58:5b:6b:22:8e:4e:c5:fb:57:73:3f:81:
         91:e0:52:97:11:af:35:fe:c8:3d:f0:2c:27:7a:ad:cd:eb:95:
         fe:0f:f4:0f:b7:2e:d6:f7:2a:f7:00:33:f2:cd:4b:da:fd:26:
         e4:0f:d4:ca:e6:77:b4:11:29:42:ad:1d:5b:84:62:bb:d9:37:
         0d:de:9a:88:fa:a6:b0:24:d2:d3:e7:42:89:df:64:f1:42:ce:
         c6:04:47:73:10:ae:7f:ca:5e:90:24:1e:3d:07:d2:8f:d8:76:
         6e:ef:d8:1f:9b:b3:c8:f2:58:f5:be:4d:99:79:7d:5e:4d:d9:
         58:a9:51:bd:ba:62:d4:fc:c4:81:aa:df:6c:c2:fb:ef:f1:b4:
         9c:b3:a8:cc:de:c7:1a:14:5d:99:64:01:5b:24:a2:b1:7a:7c:
         f2:4d:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:19:31 2026 by rpki-client