Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File:                     n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier:          yi/YvrNGrnt97MehiXjunS8k14q3avipsZYeDCcdF1U=
Subject key identifier:   35:C6:8C:9E:7E:53:EF:0C:05:4B:C1:34:38:E1:36:47:C4:8D:1F:EE
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer:       /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial:       2BFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number:          2BA7
Signing time:             Fri 12 Jun 2026 15:31:13 +0000
Manifest this update:     Fri 12 Jun 2026 15:31:12 +0000
Manifest next update:     Fri 19 Jun 2026 15:31:12 +0000
Files and hashes:         1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: vpKe2qTnUw/orSMXe+C348B70YEZcr4gZy1rrmQLPcI=)
                          2: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=)
                          3: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=)
                          4: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: XMn1rTIy3jaeKDZE05M5b8eeprfjm2rfHPZwQzTw2V8=)
                          5: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
                          rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11259 (0x2bfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
        Validity
            Not Before: Jun 12 15:31:12 2026 GMT
            Not After : Jun 19 15:31:12 2026 GMT
        Subject: CN=6a2c2641-8aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:9d:c7:57:88:81:bc:82:03:3a:55:74:46:
                    eb:1b:e2:83:1c:0e:6b:77:4c:48:4a:99:e2:79:ca:
                    34:61:48:3a:22:ba:84:fe:15:a9:27:99:28:04:86:
                    79:b0:86:29:e2:c5:eb:dc:aa:78:56:88:66:73:e5:
                    38:0b:3a:63:b9:60:31:67:8b:e2:6e:1a:72:ea:25:
                    65:a5:fe:fd:44:98:5a:5f:97:12:43:96:d3:65:8d:
                    97:e1:cb:b8:3e:9c:c3:06:b5:82:ca:04:fb:bf:43:
                    38:97:94:1b:1a:00:cf:bc:42:19:38:d6:af:4e:35:
                    68:a3:27:e1:6c:cb:3b:ac:47:19:8e:e9:1d:89:8d:
                    61:10:73:da:95:98:75:23:23:c2:1a:5a:48:43:73:
                    a8:10:56:00:4d:e5:fa:e1:cb:fc:81:13:4e:4a:e8:
                    2f:34:54:58:fc:19:5b:c1:47:0c:2e:50:27:a6:b0:
                    07:93:dc:11:8b:96:63:71:81:18:1a:fa:97:71:e0:
                    4e:91:24:6c:74:3d:80:1e:04:1e:e0:07:09:27:4a:
                    5e:1d:f8:41:98:64:d5:71:ca:01:e3:7c:93:3b:59:
                    73:1c:09:10:3f:45:0a:10:0c:50:e0:96:f3:3f:6d:
                    20:75:d5:a8:22:56:dd:27:fc:8e:85:1d:fb:41:72:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C6:8C:9E:7E:53:EF:0C:05:4B:C1:34:38:E1:36:47:C4:8D:1F:EE
            X509v3 Authority Key Identifier:
                keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:71:86:a5:ae:bd:c5:29:2d:84:a0:55:dd:95:d3:54:4e:76:
         80:5d:d1:a6:86:07:ee:fd:2c:21:4c:fb:24:c0:1c:fc:ee:f7:
         d2:3c:54:9c:d4:f8:a4:9b:e2:fd:19:ee:3a:9d:1e:e7:6d:cb:
         20:d4:c3:ed:96:99:24:fe:51:ae:27:77:c4:14:6d:0d:ee:30:
         1b:78:50:84:90:98:90:c1:99:17:95:1d:1b:e3:3d:35:e4:5b:
         2e:e1:d0:dd:dc:da:4e:94:ee:ef:0a:1f:a7:c0:09:6e:10:d4:
         ee:2b:ba:a2:8c:0d:41:73:e1:10:75:1a:79:ff:4f:b7:65:96:
         f9:9a:cf:f4:04:15:d7:12:bb:40:95:12:9f:52:1a:e1:37:19:
         10:42:80:49:72:0e:74:38:48:b3:2e:8e:db:2d:f2:34:41:7c:
         7b:2b:22:8b:92:90:c4:d2:b3:37:dc:1f:34:bc:a7:26:fe:87:
         d4:72:5e:f4:d8:07:c2:ca:c7:2b:71:1f:63:d5:8c:e0:fb:00:
         62:42:41:29:ac:77:23:75:aa:0c:2e:bc:98:03:fd:21:ab:a8:
         62:26:62:9f:56:4d:72:e6:e9:bf:db:21:e3:6e:15:d5:95:34:
         f3:e8:71:b7:8c:86:cb:e6:98:87:fb:4a:21:5e:97:64:95:e3:
         f4:05:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:14:39 2026 by rpki-client