Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
File:                     ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json)
Hash identifier:          6c9FxaxluSiN5wjfaW+1T0Bogke4v4f1M4Kfx+egpQc=
Subject key identifier:   C2:B8:34:C5:5A:CB:36:1C:BE:3F:B3:80:B8:17:B5:3E:84:84:5F:73
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Certificate issuer:       /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial:       0ADD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
Manifest number:          0AD3
Signing time:             Fri 12 Jun 2026 19:26:47 +0000
Manifest this update:     Fri 12 Jun 2026 19:26:46 +0000
Manifest next update:     Fri 19 Jun 2026 19:26:46 +0000
Files and hashes:         1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: owIDyn9rQS/XtXVbR1QUrpOjpRiHFjo6c7x9Jw4IWmQ=)
                          2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: v2saofmL0m7GfqQUIwDfIhLfQiWIxApSuK3jNuC63SE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2781 (0xadd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
        Validity
            Not Before: Jun 12 19:26:46 2026 GMT
            Not After : Jun 19 19:26:46 2026 GMT
        Subject: CN=6a2c5d77-01b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:13:45:0e:e6:c9:19:3a:78:a4:c4:3e:db:
                    44:5b:60:f7:76:38:8b:14:b2:af:fb:5e:5d:75:24:
                    e4:db:32:11:4f:58:7c:c3:4b:67:7c:22:84:42:f2:
                    39:3f:e3:6a:73:e6:28:d7:b4:8e:14:98:98:2f:bf:
                    71:11:06:f1:a3:03:85:25:06:4c:f1:c7:c7:d2:27:
                    62:28:26:e8:a0:8b:7a:89:46:aa:01:e2:8b:0b:df:
                    ce:52:11:07:c2:8f:65:c6:71:d0:8d:d3:f5:cd:ad:
                    a9:ca:8c:05:02:86:1e:00:81:41:39:72:db:61:ff:
                    2d:97:ae:1f:0c:24:a1:48:53:bc:74:62:8e:ee:70:
                    92:4d:d4:1d:89:c1:7b:ac:be:88:fe:22:1f:0d:ea:
                    9f:a4:29:b1:ec:90:50:33:03:b9:5d:02:f5:3e:6e:
                    05:7e:1b:17:ae:98:ca:36:38:74:69:ee:7a:61:1f:
                    81:94:81:99:8c:9e:b1:8d:08:c8:c2:7c:e9:d2:87:
                    44:2a:02:ba:c3:7d:31:25:32:1a:e4:13:a5:91:0b:
                    c2:84:d4:5f:0f:56:a8:1e:6b:f7:56:db:aa:91:41:
                    ac:c8:56:47:60:96:25:4c:41:47:44:ed:d3:60:c1:
                    a1:f4:60:c2:5f:34:4a:fd:3f:e8:c0:aa:4b:e6:fa:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B8:34:C5:5A:CB:36:1C:BE:3F:B3:80:B8:17:B5:3E:84:84:5F:73
            X509v3 Authority Key Identifier:
                keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:50:c3:bb:41:06:9b:b8:e9:f1:5c:74:90:8f:5c:f6:c9:57:
         0d:d8:e7:70:3e:6c:1d:53:a6:d9:f6:28:88:3f:fe:0d:e8:f3:
         80:93:d3:3b:67:87:13:40:11:0e:2f:a1:c5:f8:5b:68:6d:6c:
         5d:e3:ae:55:38:d7:87:73:d8:f0:e7:6e:12:f0:06:13:f9:81:
         ba:e9:93:5a:b3:21:39:89:20:05:95:f4:75:39:67:60:35:69:
         84:29:f7:7c:f9:ca:b1:88:ea:38:18:a2:65:0a:41:49:73:ba:
         11:56:d1:6c:36:3a:b5:46:f9:0b:c9:61:22:db:24:ed:9c:3f:
         44:43:07:7a:43:67:c4:61:c3:fd:00:5d:0e:9e:ec:f6:7b:0d:
         a7:f9:0d:1b:06:27:74:ab:d5:94:5c:38:0e:9b:ab:d2:8b:d3:
         c9:57:f0:26:6c:7c:6a:c4:f6:56:c1:b4:bd:d6:ef:82:b3:a5:
         90:d8:95:72:e1:a0:42:bf:d9:67:f9:f8:cf:37:ce:8c:f8:67:
         3a:82:3d:4d:dd:00:65:89:a4:e4:e4:07:16:bb:97:05:55:e1:
         56:c9:d1:d7:39:c6:77:56:96:bc:bf:75:7f:68:cb:88:68:58:
         b6:a3:b2:7d:ff:49:18:fb:6f:63:1a:d8:52:f7:ae:e1:25:73:
         d6:a3:0e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:13:50 2026 by rpki-client