Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
File:                     sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json)
Hash identifier:          PPCqW1XnvcnT4RHpr3bBzZFSA6K3euo+eUyZ9oaCc3E=
Subject key identifier:   06:14:FC:5A:FE:7F:D9:2A:9F:A8:79:1E:8D:D7:F2:D7:08:65:D7:36
Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
Certificate issuer:       /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Certificate serial:       1FDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
Manifest number:          1FCA
Signing time:             Fri 12 Jun 2026 15:57:16 +0000
Manifest this update:     Fri 12 Jun 2026 15:57:15 +0000
Manifest next update:     Fri 19 Jun 2026 15:57:15 +0000
Files and hashes:         1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: hpfERo+azoZmWf1gK+yQRb2J3CsMdK0ANsH4FBOJEwU=)
                          2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: 8KvkPRwmxhEV4smy31k45OPE8C8gicai+UQplmn5B6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
                          rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8157 (0x1fdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
        Validity
            Not Before: Jun 12 15:57:15 2026 GMT
            Not After : Jun 19 15:57:15 2026 GMT
        Subject: CN=6a2c2c5b-85ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:59:ec:46:7d:aa:31:af:48:41:e8:01:35:
                    67:4d:a8:bb:49:ab:50:64:1c:53:c7:ec:56:fc:87:
                    c0:46:27:49:49:0b:91:e1:09:35:e6:28:c3:7b:09:
                    66:e4:fc:1d:d9:4d:07:76:43:f2:b0:57:1b:7d:dd:
                    09:88:44:ee:dd:c5:7b:6b:2e:d4:23:73:b7:6d:11:
                    b4:4c:2e:36:93:07:21:de:79:e9:85:ba:2f:72:a7:
                    d1:be:8e:6c:15:a6:42:fc:e2:04:4a:1e:e3:6c:ea:
                    ab:4a:a9:6a:a5:19:dd:f0:a0:25:ec:1c:93:f1:41:
                    3f:45:c3:b1:5a:24:73:a6:8f:72:8b:11:7c:39:bc:
                    e3:e5:53:c6:27:d1:b3:11:5d:69:f6:9c:d3:ff:b1:
                    1d:53:c8:24:46:e1:5d:27:a0:e3:0e:01:3d:04:44:
                    1c:7e:1f:ab:3a:98:cf:bb:61:57:ac:9c:33:7d:2f:
                    dc:01:7d:a3:a6:dc:d8:59:f6:e6:60:34:24:fe:2c:
                    1a:42:8e:d5:f9:db:3d:25:17:9c:16:e6:22:1a:74:
                    f2:3e:9e:1a:9c:36:ad:ef:7f:be:17:62:41:19:05:
                    40:5b:d4:0f:8d:98:ae:b6:4d:e5:90:ef:fe:be:ce:
                    a7:af:5b:e8:2c:cf:d3:d9:ba:27:5e:4e:ed:4b:10:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:14:FC:5A:FE:7F:D9:2A:9F:A8:79:1E:8D:D7:F2:D7:08:65:D7:36
            X509v3 Authority Key Identifier:
                keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:09:c9:da:03:ef:ca:fe:05:de:25:85:08:2f:0f:d0:d6:db:
         be:9a:78:ef:f4:8d:c8:8b:36:ce:35:38:f9:62:ab:89:16:56:
         5f:eb:84:85:2e:fb:b4:07:5c:ca:d5:a5:6c:db:f7:ea:1f:57:
         93:3a:c5:c7:0d:28:68:d4:c2:a1:87:1a:bd:97:c9:55:0b:d2:
         b6:9f:8b:de:63:6f:95:8f:45:67:c1:f4:5f:20:de:8e:20:fb:
         5e:c3:6a:d9:1b:11:01:ef:ea:ef:ed:e0:88:de:13:e2:95:98:
         c3:c5:f3:e1:96:33:07:f4:a2:52:17:16:50:5a:b5:57:46:e5:
         93:29:d6:40:a7:5f:cb:38:03:ca:b0:c5:d9:0e:4a:bf:97:59:
         d1:a6:c9:bb:0c:18:e6:42:b3:5d:ea:1a:e3:d6:3e:4f:42:e9:
         28:cb:bd:99:9a:e2:3c:93:74:f8:af:01:01:ad:f4:7f:34:b9:
         d8:c5:1b:62:ee:ce:d1:4c:fe:92:0e:e2:05:b5:6d:27:5c:f6:
         13:85:6f:fa:9a:7d:95:61:4e:37:f8:b8:7d:4e:30:d1:99:22:
         a4:d6:71:0f:d6:4e:fd:d2:4d:2f:40:f5:61:91:73:92:45:04:
         25:74:06:8a:18:e0:fe:aa:b6:1e:44:c9:c0:96:79:7f:be:ac:
         64:49:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:12:15 2026 by rpki-client