Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
File:                     J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json)
Hash identifier:          /gdKgdMLW+ohvoilHO7cMVHV/h1qifvYDATFm4JSslQ=
Subject key identifier:   59:5F:CE:CF:90:C8:B2:3F:0F:50:70:20:73:F3:96:43:A5:03:4D:74
Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07
Certificate issuer:       /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
Manifest number:          0270
Signing time:             Sat 13 Jun 2026 02:05:56 +0000
Manifest this update:     Sat 13 Jun 2026 02:05:56 +0000
Manifest next update:     Sat 20 Jun 2026 02:05:56 +0000
Files and hashes:         1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: 0tbyGDbWRFrMPK46tHbdLCPSQoU80ROosUhTk0FA2Hg=)
                          2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: iSo5vuWbG03RQHVz/yWnx8Hzh3kOIF3ZXYUxF1Dp2jI=)
                          3: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: 5QEuxCPhlNT5MkVim+JlJUzX9cGTTGSeehOabrAMH3w=)
                          4: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: u9cehntkmN+Per/glhjpUt2xiu+ij4ZxhwGHfN+ijAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl
                          rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
        Validity
            Not Before: Jun 13 02:05:56 2026 GMT
            Not After : Jun 20 02:05:56 2026 GMT
        Subject: CN=6a2cbb04-5c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:0c:83:0b:3a:6b:31:5f:c6:3e:fc:9a:b2:
                    55:1b:d4:94:8e:f0:4a:8d:c6:79:31:52:d2:6c:5e:
                    96:22:63:9e:87:0a:ec:a0:72:ac:c1:cb:d4:c6:e3:
                    f4:4f:ae:a9:f4:37:f7:b8:0d:4c:7b:c9:93:e3:06:
                    38:46:02:3d:99:99:bc:19:d0:89:2a:95:33:cc:b8:
                    a7:09:b8:82:b2:96:42:f2:61:34:cb:87:c9:a7:ea:
                    cc:6b:0e:a2:eb:fb:6b:8e:38:26:86:8c:11:33:2f:
                    c1:05:47:0c:b9:c2:06:bd:68:e0:ce:cb:57:65:76:
                    fe:e4:68:ae:f1:3d:7a:7a:16:a8:ca:52:3f:ee:8f:
                    98:98:5b:a4:0a:f0:c7:9d:30:61:a3:fd:54:9b:9f:
                    8b:df:23:be:21:70:53:00:3f:07:91:9c:fc:82:8b:
                    49:b6:9d:17:52:da:9f:d8:81:3d:e1:99:8a:c8:1c:
                    54:ef:ec:4f:dd:0e:21:1b:8d:57:11:18:41:d5:97:
                    8e:6c:d3:e6:a8:86:6d:ce:2f:48:ab:f0:c1:df:e5:
                    6c:90:e1:2c:fa:71:d1:1f:cb:d0:48:c3:d7:a2:ac:
                    53:b3:45:1b:b3:ad:9a:ff:bc:6f:4e:d4:1a:40:80:
                    f6:ce:aa:48:08:62:65:7e:52:57:81:2e:43:c9:db:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5F:CE:CF:90:C8:B2:3F:0F:50:70:20:73:F3:96:43:A5:03:4D:74
            X509v3 Authority Key Identifier:
                keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:5a:7c:b7:51:5d:67:31:4d:e7:56:bf:1c:ce:88:7c:11:
         2f:3b:e6:9a:12:8c:be:81:4d:df:5c:22:df:5f:00:72:33:f0:
         c6:c7:58:4d:44:c9:c8:36:52:48:c9:69:d1:90:35:37:75:26:
         79:2b:fc:0b:f2:ab:34:de:29:4f:b8:84:73:1b:02:06:b4:d0:
         f8:be:d0:8b:a5:ab:43:79:f2:5e:42:4c:48:8b:0a:e8:f6:ae:
         e5:68:2f:d2:38:ba:ff:44:c8:e9:a4:da:e3:59:8e:af:1b:92:
         7d:a5:73:9c:40:db:87:5a:19:af:d6:a7:81:aa:6c:26:61:c6:
         8d:ba:9f:bf:0d:db:49:1c:ca:90:24:54:51:ce:b7:fb:8a:db:
         88:53:7b:b3:50:ea:40:e3:28:22:19:f7:b0:2b:8c:3f:6b:6b:
         85:f6:b9:04:e5:05:a8:ec:ef:32:66:59:39:25:4f:29:3f:c6:
         4a:c6:f7:f0:1f:2f:ba:a6:a8:64:40:66:df:4f:9d:7a:d9:d5:
         38:a2:ba:ac:5a:d7:0b:c7:32:e5:5b:5c:5b:c4:eb:1c:c5:bb:
         df:82:c9:90:7a:68:94:ff:f4:19:0e:c1:1a:21:cb:bd:e0:3f:
         db:ac:3f:c7:60:d8:cb:8e:1d:9f:59:de:77:eb:ec:0f:13:04:
         39:5f:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:34:35 2026 by rpki-client