Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
File:                     yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json)
Hash identifier:          nJNN2VyIWKMb+ZshnKapbATD3H5It5IENBkTgFLNVFY=
Subject key identifier:   2F:CB:30:C8:B8:4D:7D:D5:DD:15:C0:00:AD:FC:97:DE:8D:2B:F9:A4
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Certificate issuer:       /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
Manifest number:          0110
Signing time:             Sat 13 Jun 2026 06:07:28 +0000
Manifest this update:     Sat 13 Jun 2026 06:07:28 +0000
Manifest next update:     Sat 20 Jun 2026 06:07:28 +0000
Files and hashes:         1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: qohOZ/o1t5dfsBE67nSvPPoHNPfHyfzKMZrG/1bAa6M=)
                          2: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: wuMfV4Prav1vTN6DDOAaG6aXaeJ/i3o0GNDpEUWZL6g=)
                          3: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: TnUIMsTLLUWLq6RKFJvvlaICGc8yJRHnp3bZVmKD+K8=)
                          4: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: VHWzuR8NTDaBmGYmSm5ZS2QGGvm+Hb7NngfwNUpxxQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
                          rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
        Validity
            Not Before: Jun 13 06:07:28 2026 GMT
            Not After : Jun 20 06:07:28 2026 GMT
        Subject: CN=6a2cf3a0-a9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:61:33:66:dc:ef:11:74:3d:84:1d:c9:9c:
                    19:da:b7:fe:7a:bc:ff:6c:86:f9:0a:49:af:df:aa:
                    f8:cb:c0:71:ae:8f:81:03:09:2c:45:77:da:1c:84:
                    cf:3c:74:89:10:c6:28:8e:af:93:69:53:be:be:42:
                    aa:1e:a0:71:ba:15:b3:29:65:55:a0:f6:0d:e4:cf:
                    d4:58:a1:7c:bb:af:bc:5b:02:85:63:3d:e2:74:32:
                    8b:05:71:62:61:67:36:f7:cb:d4:fb:5f:e6:80:54:
                    ba:95:5c:40:24:f1:e9:31:51:3d:19:64:fc:61:be:
                    85:30:60:6d:ae:36:2d:f9:da:52:78:43:f6:9f:0c:
                    0d:97:ce:4b:99:cc:94:1f:67:22:41:36:c9:ef:08:
                    74:fb:a2:b6:f3:66:38:f7:a3:8e:4b:97:36:90:d4:
                    5b:36:76:f8:53:c4:70:8a:33:fe:d3:c5:3c:16:fc:
                    2a:8f:10:ba:2b:d1:1f:51:c2:f8:de:eb:13:5e:7c:
                    7c:18:25:3c:64:64:a2:65:de:ad:9b:d0:de:73:fe:
                    ce:20:d6:36:b9:28:81:e6:c4:c9:ab:8b:92:99:6e:
                    1e:e4:30:e8:6d:e9:11:3a:49:e2:32:77:c6:3f:28:
                    4b:63:00:a6:83:18:d0:99:2c:27:59:e2:95:bd:a6:
                    79:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CB:30:C8:B8:4D:7D:D5:DD:15:C0:00:AD:FC:97:DE:8D:2B:F9:A4
            X509v3 Authority Key Identifier:
                keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:3f:00:98:b0:e3:ff:26:a3:92:ae:0e:b3:ef:4b:dd:c5:
         9c:a7:cc:94:20:34:0e:52:b0:7f:08:e5:06:de:20:b1:02:c9:
         29:5c:eb:c1:6f:6b:a9:f5:02:d0:5a:2e:93:ef:39:a3:f3:e7:
         46:fd:37:1d:ca:3d:96:ff:e7:48:85:30:a4:12:ba:5a:36:26:
         b8:29:fc:1d:d6:10:8a:bf:07:d1:de:78:66:da:47:c9:55:30:
         65:19:29:3c:f1:68:23:92:14:3c:7e:3e:8f:ee:f6:7c:d0:c4:
         48:d7:af:41:9f:37:74:4d:19:8c:92:c8:b1:8c:a9:c6:4b:b4:
         34:b3:87:8a:e8:38:c3:5f:28:5f:83:a4:81:87:22:81:0d:95:
         b9:aa:b0:4f:ac:f5:2a:4f:be:fe:4c:15:13:27:3c:13:78:b0:
         36:f9:06:a3:29:c2:4f:04:50:3d:8b:23:fa:c2:41:ec:42:bb:
         26:5c:45:38:76:a6:1b:3c:4b:02:b8:44:72:a5:ac:72:c6:1a:
         d5:49:80:1a:13:6f:43:70:9f:ad:59:7e:15:a8:94:b7:52:c4:
         be:6c:e7:10:e3:9a:d4:05:10:9d:f3:5f:4a:33:b1:5b:88:8c:
         55:7b:75:43:fd:e4:ff:a0:1c:22:22:a0:dc:79:ab:1f:82:3f:
         74:ce:57:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:51 2026 by rpki-client