Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
File:                     cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json)
Hash identifier:          2/j4EFMMce0rTiloDUigTBoTNvKY/rVDkETR8oEfyC4=
Subject key identifier:   14:98:3D:1E:D4:84:5F:46:A1:7E:8D:E6:9D:26:22:AC:CD:8B:01:AB
Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
Certificate issuer:       /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
Manifest number:          02B1
Signing time:             Sat 13 Jun 2026 01:26:48 +0000
Manifest this update:     Sat 13 Jun 2026 01:26:47 +0000
Manifest next update:     Sat 20 Jun 2026 01:26:47 +0000
Files and hashes:         1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: egwfN27mI0PequGmq3HrO6EinVMxcZ4BtXnixYtMXSE=)
                          2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: NdDZZRgK9g6DqkIOgNxd6KDbkad4VeSpXexgW2KxCEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
                          rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F124, serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
        Validity
            Not Before: Jun 13 01:26:47 2026 GMT
            Not After : Jun 20 01:26:47 2026 GMT
        Subject: CN=6a2cb1d7-e09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:98:6f:0d:34:ea:4a:a1:a0:1d:d7:db:44:
                    c4:a2:39:4e:29:c5:a3:21:2a:1f:bf:95:2e:63:07:
                    b5:14:30:fd:a5:6d:63:7e:02:8a:97:66:55:e7:a9:
                    5b:19:27:6f:93:a8:d2:92:ac:bd:ee:62:b6:be:50:
                    f6:cf:c2:ba:d4:04:a0:ea:1f:5a:a1:ca:12:29:e1:
                    5e:74:c2:bd:68:34:7f:58:37:b0:ea:61:fa:68:a9:
                    e0:01:db:df:2e:9f:9b:34:30:c1:ff:99:4b:84:a9:
                    de:69:ee:9c:cb:1d:ba:52:1d:81:ea:6b:02:18:f4:
                    a4:74:28:cb:b2:cd:ba:b9:db:36:23:8d:ae:86:28:
                    ab:53:1e:60:4d:5d:e8:46:05:2c:38:fe:47:44:24:
                    60:18:ad:9a:09:b6:ab:3d:80:07:53:99:24:ac:29:
                    89:0f:05:5d:41:7c:4a:23:38:6f:5a:a5:65:d7:a9:
                    fb:c8:5f:60:64:8f:e8:8a:ef:03:79:a5:c7:20:6d:
                    a4:dc:6d:fa:b0:aa:d8:a9:ec:e2:f1:9c:3c:bb:90:
                    55:aa:4e:14:6f:ee:8c:cc:6f:01:0f:ac:24:4c:60:
                    44:0b:5e:48:57:79:d8:06:db:47:94:6b:8e:31:b2:
                    b1:ba:dd:ce:97:b4:a8:9d:38:98:77:30:80:2e:13:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:98:3D:1E:D4:84:5F:46:A1:7E:8D:E6:9D:26:22:AC:CD:8B:01:AB
            X509v3 Authority Key Identifier:
                keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:77:64:52:77:eb:41:03:4c:10:07:8b:f4:1e:b4:c5:e3:d8:
         24:ad:83:6a:9b:91:7b:93:9a:88:75:fa:cd:53:a0:0a:c4:10:
         b4:cb:64:7d:ee:da:d6:95:71:fa:71:e0:89:66:e2:be:f3:7a:
         01:3c:a6:79:92:84:65:7e:0d:45:c7:f7:04:8f:b1:46:a6:80:
         2b:22:98:8b:f8:1e:a9:1d:d2:c6:5f:43:bf:1d:da:00:55:af:
         d4:43:c5:4b:a9:07:97:91:94:7d:1c:64:a7:89:d7:70:6e:9f:
         85:13:72:ad:13:3a:6a:f8:3c:dc:d0:0f:7f:d0:9f:a8:45:64:
         c7:2a:1f:90:64:c3:d6:6a:f7:e5:82:19:f4:36:6a:92:d4:83:
         f8:97:b5:0d:6f:6e:1b:e2:e7:97:d9:86:70:e8:d6:38:48:c1:
         d0:a6:a4:cc:09:33:a6:20:06:80:53:d8:67:aa:21:45:e6:87:
         fe:5e:d1:88:13:87:d6:8b:f9:4c:f9:2c:87:41:14:6b:2d:b3:
         6d:82:b7:fc:cd:35:08:98:26:c4:6c:f9:08:c0:19:cc:51:91:
         8b:2c:f7:81:af:d0:a6:c5:bc:9d:2b:4b:32:b6:b9:d9:a2:c7:
         08:a1:60:f8:64:b4:b6:54:05:16:a9:a1:fd:49:ef:c3:ed:b7:
         40:6a:e1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:56:05 2026 by rpki-client