Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
File:                     60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json)
Hash identifier:          Vm/dCUFGgIYzP4skdOgdN7Qjws0pSB19R16LhdTyt4g=
Subject key identifier:   12:E3:BD:73:33:62:AE:E9:8F:35:08:E9:39:C8:BB:9E:D2:F8:BE:7D
Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
Certificate issuer:       /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
Manifest number:          9A
Signing time:             Sat 13 Jun 2026 07:25:59 +0000
Manifest this update:     Sat 13 Jun 2026 07:25:59 +0000
Manifest next update:     Sat 20 Jun 2026 07:25:59 +0000
Files and hashes:         1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: iYQ5zWnqM7ZzesVyCPHRKt39sMmTIB7La7LtVNl+hHY=)
                          2: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: KgTcEBQwyeNNEcPVGV0LGEJQJnqAyFvRcFGWQSUD/3E=)
                          3: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 2Sh4HNxYtB9dGVF8vJ1SzNebK3nTgLRc3WLrBkkeJGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
                          rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
        Validity
            Not Before: Jun 13 07:25:59 2026 GMT
            Not After : Jun 20 07:25:59 2026 GMT
        Subject: CN=6a2d0607-57c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:b8:bb:93:57:a0:cc:67:28:61:12:72:18:
                    b6:59:3b:c3:52:1f:bf:0e:fe:c3:68:1e:5b:1b:fc:
                    77:3e:67:b7:8c:e5:4e:64:d5:d0:50:48:ec:4c:c1:
                    15:7d:54:95:7a:9c:85:b2:7f:f1:ef:cc:eb:f0:c7:
                    be:56:b5:cf:23:24:cb:6b:f0:4d:12:1a:ce:de:c5:
                    02:8f:85:81:1b:b7:09:98:1e:28:96:06:db:5a:71:
                    b2:ef:32:60:3a:ed:d0:59:62:68:f1:99:4f:af:ef:
                    e9:d4:22:93:dc:2c:7c:88:0b:46:23:f6:49:00:4c:
                    6c:06:5f:25:6d:b8:3d:ed:20:42:bd:30:6b:9e:2c:
                    59:ab:c2:35:9a:4f:13:e7:cb:60:1a:57:8f:5f:3e:
                    f0:b6:2d:75:59:06:08:db:47:40:ad:f4:f9:d1:75:
                    92:ef:8c:73:80:2b:08:e1:f2:6c:0e:a8:da:f8:4f:
                    d7:a2:b0:0d:54:86:8c:99:cf:b7:57:dd:c9:f1:5d:
                    2f:1d:13:b9:2e:c9:b3:3d:47:ef:ff:b0:d2:fe:be:
                    7c:5b:ab:23:d3:71:30:aa:31:67:8c:53:04:a9:41:
                    11:b4:7c:99:08:17:2c:9d:b2:3a:20:f9:34:90:58:
                    1b:6b:8b:3e:be:c2:dc:ac:f2:72:af:fd:1e:3e:4e:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E3:BD:73:33:62:AE:E9:8F:35:08:E9:39:C8:BB:9E:D2:F8:BE:7D
            X509v3 Authority Key Identifier:
                keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:e7:53:bc:c8:cf:b7:20:65:db:be:49:76:40:3a:aa:a8:07:
         be:e1:8a:b2:89:33:b7:e0:a9:14:27:3b:40:4e:8e:c9:2f:3d:
         b4:9d:84:2e:85:7b:53:66:55:89:de:0d:6e:df:3e:db:e1:78:
         4f:cb:9d:e4:9b:73:fb:d3:2d:5e:f4:f2:13:11:9f:ba:1a:12:
         18:98:71:35:1c:4e:37:44:66:44:96:3a:ff:88:4e:b3:8a:77:
         f1:8b:16:e3:40:f6:c7:10:ed:06:6e:20:c5:62:48:d4:da:59:
         e5:26:b3:70:0d:b8:b8:9e:bd:50:a1:48:2c:0c:f3:66:69:0f:
         16:e0:ec:d3:5c:31:8c:be:0b:9c:39:d8:6d:43:82:59:7b:fa:
         13:d4:8f:4a:35:4c:d9:ab:fe:7b:2b:0d:c1:67:e9:7d:38:23:
         a2:de:79:46:e6:92:f6:a5:8c:3b:d1:5d:20:2c:c3:78:b0:03:
         8e:e2:3a:3e:16:13:01:dd:1b:2f:ce:7b:8e:62:69:d5:89:18:
         fc:6e:be:cf:5d:eb:c6:14:02:2d:3e:b3:22:7b:e0:d0:7e:df:
         bc:61:d7:06:f8:03:78:4f:da:25:0f:08:cb:e2:18:8e:6b:38:
         72:a7:bd:59:52:4f:f2:b9:c4:19:9b:ff:e5:7b:b0:49:50:58:
         e4:c1:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:11:56 2026 by rpki-client