Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
File:                     ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json)
Hash identifier:          p+Qsk9hm7mQ7bSAgzoehoi/2bHym+ulfNf4rugG+MDM=
Subject key identifier:   55:06:71:22:FD:D9:E9:71:0E:1D:FA:C7:E2:43:00:DC:20:DC:89:52
Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
Certificate issuer:       /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Certificate serial:       068E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
Manifest number:          0687
Signing time:             Fri 12 Jun 2026 22:34:03 +0000
Manifest this update:     Fri 12 Jun 2026 22:34:03 +0000
Manifest next update:     Fri 19 Jun 2026 22:34:03 +0000
Files and hashes:         1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: zEh42ss0/eRv4c5/wh6yzbsTfM5G0XrZZr+2cwD0kmg=)
                          2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: TOu4rTok/YTcP4XYz+qFAKVXMljHMOdt2vuAWSKuetQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
                          rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678 (0x68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
        Validity
            Not Before: Jun 12 22:34:03 2026 GMT
            Not After : Jun 19 22:34:03 2026 GMT
        Subject: CN=6a2c895b-4466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b5:2e:db:cb:d2:1d:7d:62:37:3e:22:f7:1f:
                    85:d1:30:85:6d:ec:dc:fa:b2:b3:cf:53:5f:89:94:
                    99:63:96:ff:27:6c:12:7c:83:e6:e7:8c:f3:7a:cc:
                    af:df:8e:8e:d0:9d:b9:1c:d5:05:8f:1e:55:82:19:
                    f9:64:2f:87:7f:e6:ca:e7:bf:15:ea:e9:d9:7c:0c:
                    24:77:16:16:bf:6f:d5:39:fc:f3:10:65:b4:f9:61:
                    5f:8d:00:fe:cb:81:8c:54:64:ef:57:a8:bb:c0:7e:
                    a1:9b:b9:4e:fd:7b:25:ac:3b:31:34:4a:8c:cf:87:
                    9f:05:5b:0f:ea:2c:f4:69:56:e9:1c:ec:3e:76:9c:
                    a4:6e:07:f1:2a:e7:20:53:08:da:ae:1c:87:d7:09:
                    d6:62:79:02:43:d2:67:f2:be:93:62:3b:3d:21:eb:
                    66:8b:87:03:e8:74:0a:55:a6:16:f0:b3:69:f7:e0:
                    a4:b0:ac:8f:01:7a:d2:4c:be:71:a1:ef:42:dd:ca:
                    e4:73:f6:30:a1:5a:91:3a:4c:45:f1:63:cd:62:96:
                    7f:da:77:3e:18:4f:73:0d:23:94:b9:f8:86:12:20:
                    53:92:18:a8:4e:86:08:6a:41:eb:f9:d9:89:de:33:
                    1d:98:15:d0:fb:96:14:93:20:c4:0b:79:00:df:e7:
                    a0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:06:71:22:FD:D9:E9:71:0E:1D:FA:C7:E2:43:00:DC:20:DC:89:52
            X509v3 Authority Key Identifier:
                keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1c:d0:e0:a8:5d:ed:da:e3:03:03:c8:15:03:bd:d6:65:8b:
         cc:5a:f0:0f:d5:84:ed:0f:49:4e:02:ab:93:2d:08:4c:10:9d:
         8e:33:09:10:26:13:7c:41:11:9b:d9:58:43:9e:08:af:00:63:
         5a:f0:a1:60:41:36:bb:ad:47:9e:18:6f:de:e7:bb:ff:ad:0d:
         b8:41:de:20:25:4c:38:2a:bb:b2:f9:65:c2:da:fc:06:a8:a5:
         41:38:70:cd:a6:1d:24:10:58:7a:b4:35:37:28:1e:15:cc:ef:
         3c:f9:cd:2d:17:e9:3a:02:0c:61:ee:ea:f6:3f:81:14:44:d6:
         78:1d:8d:76:43:ad:dc:47:b2:2a:0a:4e:19:22:97:99:b1:e2:
         23:50:65:2f:12:25:fd:da:92:ca:ed:ac:71:f8:b8:ce:bf:11:
         60:67:f7:5d:a6:ed:1a:42:e1:bb:cc:44:dc:99:1e:07:87:6b:
         8c:90:2c:3e:6d:30:cb:e3:42:60:cc:93:ac:76:bc:c1:e9:1f:
         87:57:84:01:b2:a6:0a:29:71:cc:5f:93:a0:05:14:37:77:5c:
         e9:12:7f:33:96:6b:7d:86:7a:f9:ef:be:4a:da:1d:a7:d6:b1:
         76:9f:e3:1a:68:c5:12:79:01:4e:45:db:36:dd:9c:cf:4a:4d:
         88:56:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:35 2026 by rpki-client