Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
File:                     CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json)
Hash identifier:          QTZwPH70aQKm2AOoT+7sFec2vdBBvB8n8W2Avr1aSkg=
Subject key identifier:   2E:94:74:3C:1E:A8:16:F5:7C:91:54:CE:79:F7:52:C3:41:03:0A:E9
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Certificate issuer:       /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial:       0879
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
Manifest number:          086F
Signing time:             Fri 12 Jun 2026 20:45:44 +0000
Manifest this update:     Fri 12 Jun 2026 20:45:44 +0000
Manifest next update:     Fri 19 Jun 2026 20:45:44 +0000
Files and hashes:         1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: SLW3WPSuHKNNWZZ1KoAD02CH2d6JZiYUjLSGKm9OQ0Q=)
                          2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: 1d5DWa9kmJ4w10WbuE7/Yrtfavj9f+ay8eq6OsazIQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
                          rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169 (0x879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
        Validity
            Not Before: Jun 12 20:45:44 2026 GMT
            Not After : Jun 19 20:45:44 2026 GMT
        Subject: CN=6a2c6ff8-5b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:db:29:7a:eb:48:98:07:4b:52:fb:3c:c2:
                    5e:3d:ad:13:5c:78:33:3a:64:92:21:a0:dd:43:ac:
                    3a:21:b5:32:5e:ed:b5:df:e4:f2:ef:b4:7c:24:70:
                    f6:2e:16:21:d0:ad:2c:52:29:d8:1e:78:6f:97:82:
                    26:df:bd:5f:9f:60:65:dc:55:cf:33:aa:4d:ee:65:
                    ed:85:b5:c6:f4:86:8b:cc:cc:3e:9d:b7:0d:4f:f9:
                    fd:99:37:a8:94:f6:fa:6a:f7:3e:e7:66:ce:dd:c4:
                    0c:1f:33:10:ff:ad:18:db:6a:0c:16:24:6b:ea:ad:
                    a0:fd:25:bd:32:a1:17:e1:05:89:91:e3:db:ce:9a:
                    a4:fc:43:34:df:60:a3:ae:80:d8:f4:6d:c7:ef:b1:
                    74:bd:18:72:9c:c9:79:9e:85:f7:26:01:48:d5:74:
                    f4:d3:dc:b6:d7:fd:7c:ef:d9:a1:f3:bc:0d:af:d8:
                    77:bd:01:c7:a5:7c:26:2d:0a:17:63:a2:6d:01:6a:
                    de:17:65:df:68:2a:5d:b7:99:f5:f6:f2:15:58:27:
                    56:6d:bf:e6:06:aa:df:91:21:cd:7c:f8:38:d7:8d:
                    74:04:a9:41:80:41:4a:d2:ee:35:39:ac:af:98:dd:
                    92:46:5a:64:b6:df:ee:ca:12:c1:7c:6d:3b:b9:80:
                    2b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:94:74:3C:1E:A8:16:F5:7C:91:54:CE:79:F7:52:C3:41:03:0A:E9
            X509v3 Authority Key Identifier:
                keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:a5:7f:64:8a:f8:68:20:4c:e5:92:9f:5c:60:08:da:c8:
         ca:50:4b:a5:ce:b7:57:83:a7:ba:c2:e2:33:c7:82:57:72:62:
         c3:e6:aa:c0:8f:7f:3b:95:cd:4e:95:ac:54:ef:74:06:bb:5b:
         c7:09:86:e1:df:ae:ef:de:94:0a:51:89:3e:4a:f9:25:e9:1d:
         c6:97:16:87:35:fa:bf:05:4c:ee:8b:ba:99:5b:9d:a9:b2:90:
         1c:93:b2:e8:56:af:3e:38:00:c2:10:92:f5:6a:9e:ce:f3:7e:
         a3:9d:3a:7c:9a:62:9f:aa:81:5a:5f:af:22:2a:91:15:d7:0e:
         5b:75:6c:dc:ac:07:00:6c:fa:ce:f5:26:14:a0:0e:47:59:56:
         69:13:51:4e:47:a2:1c:61:48:33:b7:4d:cc:f8:9a:75:be:6c:
         18:ed:a4:53:96:57:54:9a:94:7b:4f:60:5b:ba:ae:60:60:c5:
         ed:ae:65:b0:57:cb:08:15:0f:ef:ae:1b:d6:e2:90:eb:74:e9:
         2c:bf:e1:79:86:3f:a3:53:60:e9:82:fb:a6:b6:e8:5c:04:58:
         0a:c3:a7:6c:95:0d:89:8b:d8:2d:e6:8a:ef:16:23:1f:91:34:
         27:80:98:3a:e1:8b:57:fc:30:9b:03:78:17:e0:1b:a8:e8:18:
         4a:8d:40:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:13:30 2026 by rpki-client