Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
File:                     tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json)
Hash identifier:          DreK/mX0rME2rqe3U8jiOeTRF2BGJyiOHtjixKlVDPs=
Subject key identifier:   BC:E0:74:BC:E6:48:49:E6:7E:A0:6B:6D:22:75:86:E8:B2:22:95:6B
Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE
Certificate issuer:       /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE
Certificate serial:       0D09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
Manifest number:          0CF8
Signing time:             Fri 12 Jun 2026 18:20:27 +0000
Manifest this update:     Fri 12 Jun 2026 18:20:27 +0000
Manifest next update:     Fri 19 Jun 2026 18:20:27 +0000
Files and hashes:         1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: iXIednu8YXzaUZbGOR9cjOe4/PUDYDFp4b2P7viVoYk=)
                          2: C3401DEC16E811F1A339CAE0373D8C67.roa (hash: yBowxfuCjhrMqbpO4ruB7+0RN+biV4Rph+HZV83yUAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl
                          rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3337 (0xd09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE
        Validity
            Not Before: Jun 12 18:20:27 2026 GMT
            Not After : Jun 19 18:20:27 2026 GMT
        Subject: CN=6a2c4deb-c5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:b4:35:be:00:07:72:f0:18:65:db:e2:1d:
                    4b:bd:9b:ef:fc:a6:34:e8:e1:7f:1b:18:8e:cb:5f:
                    86:42:ad:97:90:38:ba:47:31:f2:97:3b:23:ec:27:
                    84:33:60:42:1d:79:a1:5b:31:f4:1f:cc:84:b9:ca:
                    93:ca:11:81:fb:3f:08:14:3e:23:ab:bc:23:8e:6a:
                    bc:56:a2:4a:c4:e3:66:c6:f9:52:5a:26:44:ac:1a:
                    73:e0:19:3d:8d:7f:20:b0:36:3f:bd:46:85:6f:91:
                    6c:b5:7a:26:26:b9:1b:29:24:77:e4:93:30:f1:3f:
                    e2:d2:26:82:fc:84:9d:72:38:05:7d:d3:c9:ca:02:
                    dd:1d:28:7c:46:d6:7d:8e:09:52:fb:04:d9:7e:42:
                    8a:f0:49:3a:11:b7:e3:d5:49:8a:a5:37:10:08:3f:
                    a9:0d:47:31:66:78:83:cd:d2:fd:f2:b9:ee:67:f0:
                    28:8e:a4:44:b8:07:73:59:fe:f3:87:cc:a7:fe:82:
                    ec:5e:a0:34:22:5e:6d:e2:b0:ef:54:fd:02:d8:20:
                    61:34:3d:5c:3c:5a:17:d6:5a:c9:02:ac:05:7f:5d:
                    e2:22:b7:d1:5c:34:25:ea:bb:2e:3e:3d:18:9b:4e:
                    75:da:df:2a:bb:1d:7e:1e:94:88:91:ce:67:62:8e:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E0:74:BC:E6:48:49:E6:7E:A0:6B:6D:22:75:86:E8:B2:22:95:6B
            X509v3 Authority Key Identifier:
                keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:ac:be:68:de:a1:ed:f6:b4:ab:31:36:6e:d7:d3:cc:51:df:
         f5:0b:ce:a6:3e:9a:d0:a8:e6:9f:31:c7:ed:d8:f6:38:5e:77:
         e1:16:8f:ba:34:72:14:3d:47:95:05:29:38:f3:ef:40:40:b3:
         36:3f:5d:bb:d1:49:c0:17:ad:d8:c5:de:f5:e0:8a:3c:00:fc:
         d4:23:1d:d5:fb:df:72:72:4c:c3:fb:8e:27:4f:6b:a3:9c:24:
         fe:d1:b1:60:58:1c:d8:39:a0:66:bd:30:37:9d:f3:8f:ba:b5:
         0e:3d:74:a5:02:b8:64:8a:f8:1d:ad:76:30:58:3f:e9:c0:44:
         63:56:96:18:06:66:3c:11:c5:5b:c6:93:2d:8d:fb:90:44:96:
         bf:8b:2b:d2:07:91:66:8c:2d:64:6e:5e:ba:7a:1e:5c:5f:30:
         d8:da:80:ef:6e:a1:1a:50:d4:5d:17:91:c5:3c:10:67:a0:50:
         d6:1f:9e:97:2c:9c:85:fa:38:4e:cd:80:24:f7:27:98:0c:9f:
         84:d3:69:5e:93:0d:73:db:60:d0:90:fb:69:0e:c2:e0:a1:48:
         fe:49:ae:d1:5c:46:43:ee:35:74:05:0c:0b:bf:f3:a9:6c:63:
         db:d0:34:37:12:10:37:b5:4f:ca:78:16:01:9e:42:e3:6b:e3:
         23:ad:8c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:42:25 2026 by rpki-client