Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
File:                     af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json)
Hash identifier:          qi8UBgPgysBPFWpC6c1iISIqRtL8DZEQD+BYaYpe4eA=
Subject key identifier:   7A:8B:44:21:7A:5D:66:CF:C9:25:F8:26:51:11:07:CE:DB:3A:D9:38
Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B
Certificate issuer:       /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
Manifest number:          DD
Signing time:             Sat 13 Jun 2026 06:44:01 +0000
Manifest this update:     Sat 13 Jun 2026 06:44:00 +0000
Manifest next update:     Sat 20 Jun 2026 06:44:00 +0000
Files and hashes:         1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: ijTwShHde/VasWTPXCibFTzPJwqXqfimA4ihbC5UgO8=)
                          2: 136834E05FA411F189336C2D6447A888.roa (hash: jaSZMPt/7qEgI70+BaRDVpbnOmgZ4JyLB8v5C8xqApk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl
                          rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
        Validity
            Not Before: Jun 13 06:44:00 2026 GMT
            Not After : Jun 20 06:44:00 2026 GMT
        Subject: CN=6a2cfc31-3f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b6:1b:28:b9:91:c6:10:fb:96:44:22:de:cc:
                    83:7a:5e:ff:a3:ae:c3:87:c3:3b:8a:b5:f5:2c:3e:
                    4b:f9:ef:6c:bc:de:ed:68:6e:83:73:e3:14:a3:21:
                    da:a3:e2:24:42:21:f1:e0:a2:6b:03:89:79:28:df:
                    75:58:21:73:42:4b:7a:a9:1c:4a:e2:c5:48:e2:f6:
                    e1:4c:67:51:ff:1b:f9:e7:08:fd:bd:e3:c5:8e:92:
                    72:26:6e:08:2a:79:d0:43:3a:6f:05:dc:67:f8:b1:
                    7e:17:c2:5e:ac:7b:97:8d:d1:07:97:cc:77:92:46:
                    f7:05:56:b1:1c:66:fb:14:41:da:b1:23:d1:56:06:
                    c3:67:71:3c:dc:f3:24:c3:d4:20:1c:b0:42:7a:af:
                    b6:94:c9:c1:38:d1:a6:eb:bb:5d:a8:3c:20:f2:1f:
                    f4:cb:74:7b:a6:38:3e:99:5d:0f:e1:d5:43:15:57:
                    fc:12:d4:f8:c7:4d:82:c2:6d:aa:d4:fd:7e:ae:19:
                    b5:24:bf:5a:6b:50:e1:ba:2c:54:e2:c8:80:ed:21:
                    37:4e:4a:83:94:3f:bf:86:2d:11:83:8e:40:f8:ef:
                    9f:3d:ec:9a:f4:1c:8d:2b:62:0a:26:35:61:e1:58:
                    2e:2e:53:5c:0a:c9:3c:3c:33:f7:c3:ed:67:38:20:
                    b4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8B:44:21:7A:5D:66:CF:C9:25:F8:26:51:11:07:CE:DB:3A:D9:38
            X509v3 Authority Key Identifier:
                keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:56:55:eb:f5:c7:4d:2d:c5:43:5d:19:4a:9a:c7:ec:46:e6:
         49:97:3c:2d:4a:f2:21:f6:ce:1d:e8:dc:eb:5f:57:94:0f:bb:
         2c:ed:7a:86:0a:56:34:ef:72:55:19:f5:08:55:5b:dd:67:cd:
         22:54:bf:6e:4e:56:15:2a:0d:0d:14:e6:6a:4a:b6:6b:cd:8d:
         0c:24:68:e4:10:49:a2:c9:b2:35:8e:48:35:cb:ea:6a:4f:fb:
         ba:24:c4:69:92:60:f2:b3:41:b7:88:84:45:74:67:95:95:5c:
         1a:48:fc:3c:8b:ff:e0:50:b8:a5:5e:fd:96:ad:df:44:2e:98:
         44:e0:cc:6f:3d:d2:3e:79:85:4e:f3:d8:42:34:db:c2:d4:36:
         1f:7c:f2:47:30:30:a8:40:64:37:41:0d:04:43:ac:ff:82:e8:
         8b:7a:c0:89:96:ee:27:66:bc:7a:12:d8:5d:a1:21:76:9f:00:
         f1:bc:fc:ae:6f:f3:67:19:0d:63:df:da:7e:12:91:b7:50:26:
         93:7c:5a:6e:45:9c:eb:78:d6:58:d9:0e:2d:2e:e2:96:29:f9:
         3d:28:60:59:58:77:e3:fb:07:46:02:09:6e:b0:72:6c:56:4a:
         c9:bc:9a:03:3b:59:96:c7:1b:65:51:dd:47:d0:1f:ca:40:ff:
         8c:43:3e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:17 2026 by rpki-client