Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
File:                     C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json)
Hash identifier:          m093f0XtC7LRyUw1yclFT/+sp/8jx22XP6tjfkDASdQ=
Subject key identifier:   88:8D:57:F7:E2:C2:28:FC:93:1F:CA:AD:1F:A5:92:D0:A1:20:DD:78
Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A
Certificate issuer:       /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A
Certificate serial:       0603
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
Manifest number:          05FB
Signing time:             Fri 12 Jun 2026 22:57:14 +0000
Manifest this update:     Fri 12 Jun 2026 22:57:13 +0000
Manifest next update:     Fri 19 Jun 2026 22:57:13 +0000
Files and hashes:         1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: +RH+rCJnORA8+h4GdvzqQUYbrv/dTyq1h2E1C5xmGh8=)
                          2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: Y4F1ja4wcw1eseQD+81vZYB519DcIWC7aDAimVmHoaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl
                          rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140E48, serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A
        Validity
            Not Before: Jun 12 22:57:13 2026 GMT
            Not After : Jun 19 22:57:13 2026 GMT
        Subject: CN=6a2c8eca-5588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:56:32:67:8f:a4:df:a2:76:68:ae:ec:7a:
                    19:07:70:3e:b8:2d:d8:df:5d:6d:57:2d:72:4a:1a:
                    04:45:9e:7c:85:f6:4d:66:e5:bf:cd:f3:77:6e:77:
                    ed:a3:63:6f:86:13:c0:f2:51:10:53:3a:5d:eb:e4:
                    29:1d:ed:ab:bc:0a:fa:58:40:4d:98:34:a2:09:7e:
                    0f:a7:55:79:e1:14:16:a3:2b:a3:0a:6d:c2:f8:ad:
                    1d:a7:44:a4:f4:c6:09:da:4b:c9:bf:ce:0b:65:15:
                    3c:dd:a7:6d:e4:a9:e5:00:67:2c:f8:e3:69:81:f3:
                    ce:f1:9a:1e:40:9b:da:56:0a:24:f0:82:37:f8:18:
                    5b:8c:58:b0:31:35:ce:03:30:8f:1f:d5:93:2e:32:
                    cc:41:02:9b:2f:7b:1b:48:e9:76:c9:de:17:b6:d0:
                    81:5a:44:c2:0c:77:87:05:7a:cf:92:85:c4:36:ec:
                    a4:e6:cd:7e:66:68:fb:2e:aa:9b:99:ab:02:da:bd:
                    da:68:5a:86:51:f5:4e:6b:ef:7b:92:be:5f:c3:23:
                    05:da:af:e5:72:b4:f8:64:33:7e:af:29:5f:c1:26:
                    0f:0f:8a:16:d2:69:7a:6f:35:e8:66:81:25:d3:0c:
                    0f:a9:4b:c9:10:3e:dd:d1:88:66:2d:19:d2:20:e5:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8D:57:F7:E2:C2:28:FC:93:1F:CA:AD:1F:A5:92:D0:A1:20:DD:78
            X509v3 Authority Key Identifier:
                keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c5:88:a6:0b:3d:dc:8f:e4:fc:29:bd:78:e0:50:d5:c3:cc:
         a6:54:1b:36:12:63:77:7d:97:f1:a3:4b:0f:8a:19:cf:5e:b6:
         34:34:ba:f5:7f:03:c0:fe:5d:f6:27:90:44:0d:60:34:0a:1d:
         c7:ff:58:8f:95:97:6b:3d:39:1e:11:56:0e:33:7d:de:91:03:
         bc:66:1d:3b:ee:67:3a:92:1c:ba:53:3f:75:35:f4:fb:ec:01:
         bc:71:2f:7d:e9:de:89:2e:9d:fe:44:cc:43:c4:fc:96:9d:d1:
         f4:4d:56:1a:c5:31:73:10:09:bc:3f:51:9c:6e:c0:df:71:53:
         a4:37:9d:be:82:14:54:d3:cd:9f:40:90:25:6b:c5:59:7b:a1:
         27:c0:7d:3e:62:a4:37:0e:09:76:df:4d:12:bc:35:33:5f:fc:
         e3:79:2a:6b:7b:6d:7d:30:61:30:a8:5b:dd:ea:84:6e:19:a3:
         50:03:55:73:1d:27:2d:fa:22:cc:79:dd:ce:3b:7c:ed:e9:ee:
         10:64:47:fa:3f:99:5c:6a:e4:80:1d:c4:cc:32:4f:7b:26:08:
         dc:13:c5:44:dd:ac:00:c7:be:a9:9b:9e:94:33:7e:81:35:92:
         a0:17:64:10:d0:01:13:2c:11:4a:22:fe:f9:ad:b7:1c:19:29:
         19:2a:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:09 2026 by rpki-client