Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
File:                     P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json)
Hash identifier:          1y095N768Hgd+g9WiY3/szilhBfgS5KFmJ7zrE8hMXI=
Subject key identifier:   D9:61:57:F6:B5:5E:B9:07:E6:C8:17:9B:E6:5D:EA:79:60:73:F1:B0
Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
Certificate issuer:       /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
Manifest number:          0287
Signing time:             Sat 13 Jun 2026 01:57:38 +0000
Manifest this update:     Sat 13 Jun 2026 01:57:37 +0000
Manifest next update:     Sat 20 Jun 2026 01:57:37 +0000
Files and hashes:         1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: nYFNvRZjt3WyBasZlvI6Fc+LlCw9cQ6Lcj5eLyZQ8Ig=)
                          2: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: Mgaf9CSqoVizRMwA95HzOIftcIqXK+Ix2kwlxzxOnak=)
                          3: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: 8QPHRn8irHtyPflJX7FXyll2eB+IKwt/6uDtxAHI16I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
                          rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
        Validity
            Not Before: Jun 13 01:57:37 2026 GMT
            Not After : Jun 20 01:57:37 2026 GMT
        Subject: CN=6a2cb912-9e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:03:13:1b:6d:dd:94:77:ce:74:4d:8b:73:
                    5a:ae:b0:b1:6b:27:1b:40:2b:49:78:33:95:0f:9d:
                    13:3f:b3:fe:2d:14:5f:52:ce:ac:7e:33:e3:19:25:
                    a2:02:16:c3:1b:4f:64:81:61:a6:ae:af:b1:3b:3f:
                    4c:26:a5:0d:86:0c:b7:14:af:88:de:25:31:ff:d6:
                    65:fb:cb:7b:ae:41:a4:d9:e0:76:34:f8:61:3f:eb:
                    fe:8d:48:7b:83:01:58:cd:9b:50:06:e5:05:fc:17:
                    8d:19:6b:85:38:27:a1:8f:c1:75:f8:39:36:24:c9:
                    66:76:bf:88:e7:f3:79:51:58:64:d9:b6:3e:83:b1:
                    96:12:3f:fd:95:c8:a1:31:29:c9:f6:52:bd:b8:3b:
                    f0:db:fd:8b:3d:d5:d0:98:ab:fd:e8:0b:57:0f:21:
                    2b:de:d9:3f:8a:05:fd:53:46:70:1a:8a:36:fe:90:
                    1a:c2:b5:07:6c:52:7f:2e:40:27:91:0d:94:f5:5e:
                    b8:c2:bd:d8:68:c2:1b:cb:d8:71:bc:9e:69:9c:1f:
                    dd:2a:23:7d:af:b8:4d:49:32:fd:d5:7b:7f:a6:6f:
                    81:15:38:61:1b:02:34:07:d3:c9:48:57:f5:d3:7d:
                    a6:1d:5e:90:66:45:e1:d6:8d:14:0d:ce:28:31:a0:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:61:57:F6:B5:5E:B9:07:E6:C8:17:9B:E6:5D:EA:79:60:73:F1:B0
            X509v3 Authority Key Identifier:
                keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a9:2b:79:e9:7a:1a:76:d9:53:cc:3a:3b:f9:00:08:98:97:
         b7:4e:cc:2c:1f:d2:6a:e6:36:6d:fb:9b:86:d0:a8:45:a3:3e:
         6e:dd:d9:cc:bf:c0:1f:06:28:43:60:3a:20:89:ce:80:43:b7:
         4a:d3:ee:f6:c6:da:f9:e7:9c:9b:ef:33:b9:e6:a8:b2:2e:fc:
         a9:4e:cb:4a:60:89:1f:0c:9c:04:a5:c7:bd:e1:e1:5c:0c:21:
         bb:16:02:34:b3:0c:2e:44:09:83:bf:91:b9:ae:fe:e7:96:78:
         94:80:55:2a:63:2a:af:77:f9:80:21:5d:9a:c3:da:cf:66:c2:
         cc:31:ad:96:05:fd:81:bf:39:3b:5d:48:c4:06:42:ea:e6:aa:
         4c:a6:eb:e5:ba:8e:14:ed:80:a1:1c:eb:c8:b2:46:1f:48:0b:
         4b:f8:26:2f:ba:f1:22:fe:66:98:c5:a1:76:29:b6:97:53:fb:
         0f:70:90:9e:23:55:34:9d:ee:c2:61:06:d6:6d:21:24:b8:8c:
         ea:53:1f:b8:9c:ab:ac:5f:05:06:45:47:08:08:f9:b9:a4:96:
         42:ef:a0:5d:4c:38:a2:40:1b:d0:27:83:00:7c:1a:f1:02:59:
         bd:07:a0:02:d0:73:bd:b8:7e:e8:68:7e:de:e8:5a:e5:94:cc:
         51:67:ad:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:34:23 2026 by rpki-client