Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
File:                     X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json)
Hash identifier:          /vxavswd57cGveGp2rEg/Vo+/G9fJlSP4MaoMDbAUtE=
Subject key identifier:   B7:56:EA:AC:94:19:B5:44:D7:D7:0F:5C:A7:7F:A3:03:B9:74:E0:0E
Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02
Certificate issuer:       /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02
Certificate serial:       0895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
Manifest number:          0888
Signing time:             Fri 12 Jun 2026 20:41:44 +0000
Manifest this update:     Fri 12 Jun 2026 20:41:43 +0000
Manifest next update:     Fri 19 Jun 2026 20:41:43 +0000
Files and hashes:         1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: rnJPNZlWc+cDXiA5CpGVl/ZwEbWPEVzc9Dj2500iOTU=)
                          2: 137DD3E8E60C11F0A18B1E57676F56BC.roa (hash: uV78r469K9kpBYYycBaJqz/OEoI2cFdGsz5vaAFm0kA=)
                          3: B08421401D2C11F1AC765BFB153D8C67.roa (hash: TAh33/TweOL0Zp6UZEAPfCKrE9xE2i8YoGrm5wZloBU=)
                          4: DFBB127A1FD911F18338B27E3F3D8C67.roa (hash: /SYY7WeR+aA+gbxGrf5qM5FajASTqqxf81wX3CNIlA0=)
                          5: 8FB8171E1D2C11F18BD061F8153D8C67.roa (hash: 0P5+1QsMe2etRxHYksVVwvkONUIo2rGlANvWQyHYTKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl
                          rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02
        Validity
            Not Before: Jun 12 20:41:43 2026 GMT
            Not After : Jun 19 20:41:43 2026 GMT
        Subject: CN=6a2c6f08-c8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:c7:68:8c:bb:60:36:c3:e3:a2:b8:9a:25:
                    5c:89:bd:c4:f3:79:cc:15:c1:98:05:b5:fe:49:3a:
                    0b:95:13:a3:87:f4:a5:1b:a5:be:90:dc:7e:ca:d2:
                    61:eb:44:ad:44:96:e1:84:bd:5c:3d:01:81:62:66:
                    51:4c:36:97:71:6f:4b:94:18:6b:e3:3b:8e:65:aa:
                    a3:43:d9:8d:4e:f5:97:20:d2:0b:23:78:41:68:e9:
                    11:fb:cf:47:52:70:5e:ff:75:82:b2:79:d6:c4:36:
                    c8:15:e0:b0:50:1e:98:fd:fd:c7:35:b7:0b:2f:01:
                    00:90:27:63:8b:76:79:48:8a:47:c9:82:a7:d7:a4:
                    94:83:87:7f:5e:38:f4:a4:81:59:9f:8c:37:21:85:
                    b4:b3:74:dc:22:41:1f:fb:35:4b:f4:d5:69:aa:bb:
                    e8:f2:0e:ef:82:e5:45:aa:b1:3d:46:cf:09:71:88:
                    3e:9e:ae:cd:f7:f9:ab:48:cb:f1:0a:b1:46:8d:4e:
                    a3:bc:ae:1a:90:13:15:65:2f:40:51:23:2a:0f:59:
                    2b:fb:80:a5:d1:47:82:af:e1:f5:27:36:77:13:d1:
                    f3:97:14:31:49:7c:a3:ef:2f:43:c0:cf:4b:0a:b4:
                    84:54:c1:c1:ad:48:d7:ea:1f:3b:ab:d7:0a:8e:56:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:56:EA:AC:94:19:B5:44:D7:D7:0F:5C:A7:7F:A3:03:B9:74:E0:0E
            X509v3 Authority Key Identifier:
                keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f8:e9:a3:c0:5e:aa:1a:e4:d2:ee:62:88:c5:d6:a6:05:6d:
         d5:d9:fa:10:1f:84:b9:3d:41:c5:84:be:59:0d:69:c0:fb:ba:
         a1:63:db:43:83:ed:ae:26:68:8c:b0:b1:72:13:57:72:44:10:
         20:8c:30:51:d2:45:ad:c0:88:ca:bf:3d:be:94:e6:fc:88:85:
         17:d3:0e:1d:7a:64:0e:88:3d:91:2c:99:ff:2c:d6:ff:ed:0b:
         3b:4c:1d:aa:9a:84:08:e3:3d:94:79:59:4f:2f:cc:5b:71:86:
         51:28:36:97:f9:78:e4:82:b4:c1:d2:21:41:72:7e:bf:43:5a:
         0b:0b:50:f1:aa:d9:af:c0:7e:e9:d7:5c:f4:d3:7c:78:d6:74:
         ac:ab:24:b7:ed:db:ac:8e:6b:6f:d9:16:c1:b7:c3:ff:1a:f9:
         d7:e7:88:cb:62:60:b1:5b:af:19:18:73:c4:f6:6b:ae:e6:8b:
         ce:9a:66:33:10:b8:b2:bd:03:50:5c:42:ba:8b:0e:f3:6f:99:
         00:57:ed:fe:e8:ab:a8:f8:19:93:c2:bc:e6:d5:07:66:6e:f7:
         49:82:e3:02:d4:f3:eb:bc:3e:c7:06:3c:ef:91:14:de:a2:84:
         60:27:10:39:c7:03:ab:cd:49:11:8e:dd:9a:68:ea:e1:ec:bc:
         6c:77:fd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:31:12 2026 by rpki-client