Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
File:                     ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json)
Hash identifier:          ioNtfLCiKxWcj9DDMH2hKhMtEvwuh/FeEaE02k+rTYU=
Subject key identifier:   24:4F:88:01:FE:1D:84:52:E4:8F:5A:9C:58:70:F5:72:59:9B:02:5B
Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
Certificate issuer:       /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Certificate serial:       0689
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
Manifest number:          0688
Signing time:             Fri 12 Jun 2026 22:32:57 +0000
Manifest this update:     Fri 12 Jun 2026 22:32:56 +0000
Manifest next update:     Fri 19 Jun 2026 22:32:56 +0000
Files and hashes:         1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: 8fv2JBeOpTPDERNR+L2DlOHEF5cCRRt/ztAyh7/B38g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
                          rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
        Validity
            Not Before: Jun 12 22:32:56 2026 GMT
            Not After : Jun 19 22:32:56 2026 GMT
        Subject: CN=6a2c8919-70e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:b1:fe:b5:f4:76:64:56:f2:ce:bd:42:a2:
                    da:96:1e:99:72:e0:91:b6:b2:3e:7e:1a:d6:66:e2:
                    c1:30:8e:89:9a:bd:5d:e8:87:7d:25:74:6b:c7:f0:
                    26:4f:bb:b1:cd:03:1b:3c:39:eb:4b:5e:68:93:07:
                    c7:e9:e2:6f:9f:a3:93:62:dd:24:f0:ca:e7:38:91:
                    c7:04:44:ac:cc:42:ec:92:85:4b:2b:9d:cb:10:34:
                    4f:dc:53:4d:0c:62:3c:7c:e7:3e:74:23:9d:b3:b2:
                    5c:6a:95:2e:41:da:77:43:00:6b:a2:26:ef:ef:c3:
                    52:04:c8:7f:31:37:19:b5:a3:88:30:9d:6a:5f:49:
                    49:b2:5f:61:75:bd:e2:bc:a7:67:b4:53:c7:6e:9a:
                    b7:5b:c8:63:e7:8a:09:a3:78:ad:10:bf:c5:26:87:
                    97:ea:e9:98:8d:8a:63:51:87:e1:2b:8a:00:eb:58:
                    d4:46:4e:5a:99:38:a9:4f:95:f2:80:b7:4b:59:9f:
                    48:b4:12:52:fe:df:f7:73:e6:5b:b2:23:94:55:a9:
                    7e:ba:37:0d:1b:86:cf:8e:a6:dd:3f:b7:49:10:af:
                    32:28:57:65:54:b5:53:76:91:37:bc:e5:44:ca:cd:
                    f3:a7:07:58:49:38:08:33:75:10:f6:99:d8:61:b4:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4F:88:01:FE:1D:84:52:E4:8F:5A:9C:58:70:F5:72:59:9B:02:5B
            X509v3 Authority Key Identifier:
                keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:6b:09:c9:bb:2f:c7:fe:5e:09:4c:83:aa:bd:83:9d:3c:46:
         68:25:7d:9c:2a:0c:ce:5b:da:02:35:57:ef:92:6c:90:e5:41:
         0f:62:9e:d1:b5:5b:d1:1d:02:6c:f9:38:3a:df:dd:42:57:fc:
         38:bb:32:2b:2f:9b:12:f2:ff:cd:cb:f9:f7:51:3e:6a:71:4a:
         7c:d0:b2:9d:90:b8:6a:f2:b3:11:11:e9:cd:bf:31:62:63:2f:
         0f:c0:92:85:5c:9a:16:18:ce:1b:6c:34:f0:38:52:fc:af:7d:
         5f:1e:db:e9:c5:49:e9:4c:a2:e8:23:6b:80:d4:3a:9d:be:d7:
         13:d9:e0:c8:08:0e:0b:d9:14:a7:c6:0a:c6:9a:b5:6e:9c:93:
         fa:ae:73:e9:ee:0f:c9:1f:7c:59:77:ab:65:4a:ae:de:86:8a:
         4c:77:8a:c6:80:88:13:de:16:3f:06:c3:56:1a:35:76:6c:42:
         3b:f3:42:f7:a1:53:00:7c:91:5c:39:45:e4:48:06:69:6c:58:
         0e:b7:a0:2a:40:52:14:0c:6f:e4:89:29:fe:5b:99:ed:13:d4:
         f1:c2:3f:6c:58:d6:50:43:f7:68:76:5c:e4:11:93:29:ec:f3:
         f3:e7:dd:b6:fb:ac:42:02:a4:87:28:6f:ed:7d:1b:64:1d:be:
         8f:fa:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:52:12 2026 by rpki-client