Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
File:                     2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json)
Hash identifier:          IEUWUFTGth7ZBqSf0CDNCYbxVQIae2C1lPF5YUrkS08=
Subject key identifier:   0F:16:54:1B:91:40:A1:46:13:49:53:DE:4E:DE:EE:BC:71:D7:19:96
Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
Certificate issuer:       /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
Manifest number:          CB
Signing time:             Sat 13 Jun 2026 06:51:04 +0000
Manifest this update:     Sat 13 Jun 2026 06:51:03 +0000
Manifest next update:     Sat 20 Jun 2026 06:51:03 +0000
Files and hashes:         1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: x95bPxyUHzCSzA3a5TiFPYvqeIh/v/q61nLEwY9rmfI=)
                          2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: t+j78JKyyGcK9bTbXkrgFsRqm83ni7JvJaxQ5E6oLdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
                          rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
        Validity
            Not Before: Jun 13 06:51:03 2026 GMT
            Not After : Jun 20 06:51:03 2026 GMT
        Subject: CN=6a2cfdd8-9d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:a3:51:58:78:5a:26:09:da:2f:cd:8f:7c:
                    3c:80:0a:25:e3:fb:eb:9c:78:4b:c1:66:c3:c5:19:
                    b4:52:3e:1b:a6:60:c2:bb:89:b3:16:45:85:1d:eb:
                    fd:eb:9c:2e:5b:78:13:83:21:fd:a2:63:a9:35:4e:
                    4d:82:df:5a:6d:dd:60:ab:e7:87:40:87:63:7a:ea:
                    69:0a:91:8f:43:36:c6:28:9b:a9:a9:2f:84:75:5a:
                    93:45:b7:d6:47:4f:53:69:fc:1b:10:74:ff:6e:6e:
                    0c:3f:43:f8:0a:78:76:48:d4:1f:0c:bb:37:fc:bb:
                    10:b5:a6:5b:d5:17:90:1c:aa:60:f9:19:12:28:8f:
                    2f:4c:20:14:d2:99:9c:ae:0d:81:3f:bd:e1:d3:0f:
                    01:14:d0:23:61:7c:5a:15:e0:8c:af:3d:94:df:cb:
                    16:96:01:e8:da:26:bc:c3:08:2c:08:c0:29:b8:2e:
                    5b:84:32:5a:3d:05:6b:bd:16:6c:18:10:ea:d3:75:
                    48:14:d2:47:cd:1f:e6:dc:b8:8a:e8:af:f7:03:5e:
                    74:e4:6f:75:53:16:90:49:d8:f6:09:ef:25:f8:92:
                    3b:c9:ef:cd:e7:5b:57:1f:c7:2c:00:b9:f2:a1:4f:
                    58:c9:9f:e4:8f:1d:19:00:eb:db:10:0f:53:6a:0a:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:16:54:1B:91:40:A1:46:13:49:53:DE:4E:DE:EE:BC:71:D7:19:96
            X509v3 Authority Key Identifier:
                keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2b:79:16:e9:ce:06:2b:6c:fb:c0:44:3b:74:66:78:2c:28:
         d6:b8:7d:8d:4d:ca:76:1e:f4:d4:3a:6e:59:a6:18:4f:f9:dd:
         bf:34:36:87:2d:28:2e:b2:fe:88:91:9f:f3:03:8d:84:2e:4e:
         25:d3:95:6c:2b:f8:e6:15:3c:64:cf:91:8b:cf:98:48:18:88:
         72:d2:10:07:77:40:6b:05:02:ef:99:52:e2:76:9f:94:37:f9:
         e2:f2:2e:0e:87:a8:e5:bf:6a:f2:ed:82:c4:f9:0d:1c:f0:7c:
         3b:9c:24:ca:22:46:fc:d7:9f:1a:4e:5f:b4:e9:f1:31:83:e5:
         fa:3b:67:bf:85:df:0d:7a:3f:af:11:ef:20:3f:d9:72:39:bf:
         3d:5b:6d:7e:41:ac:ee:97:f6:ad:1a:1c:dd:77:1a:fa:a0:2d:
         dd:21:2b:d9:9b:0e:5e:4f:06:70:c0:fd:13:14:cc:62:18:76:
         a7:f9:ab:7a:e4:3a:79:9a:de:54:17:34:7a:e9:b2:32:b4:17:
         fe:cb:a1:63:f5:db:66:f2:a7:80:6c:9a:c3:2b:53:35:55:ad:
         50:df:a6:63:82:43:03:92:81:5b:ab:54:84:19:da:94:07:70:
         93:ac:a6:4e:ed:ce:7a:5a:23:40:fd:6f:e8:6b:97:ed:da:75:
         9e:6a:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:04:52 2026 by rpki-client