Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
File:                     1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json)
Hash identifier:          OjMziz0hrrKlr1gGHu1fVW+iSkil0vLBvbpI4G3k/Gk=
Subject key identifier:   F2:BA:20:F1:85:55:23:53:57:7D:DE:35:E0:9B:80:27:DC:44:95:5E
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Certificate issuer:       /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial:       02B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
Manifest number:          02B0
Signing time:             Sat 13 Jun 2026 01:25:56 +0000
Manifest this update:     Sat 13 Jun 2026 01:25:55 +0000
Manifest next update:     Sat 20 Jun 2026 01:25:55 +0000
Files and hashes:         1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: TCFKiz6l+HAHNQNfUJfY7J3Gsxlj8sYoVHCMohN63Sk=)
                          2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: SogM+aLq7TtnKTXVbg7l5lBGj90QzbOdIzdMdOy5LlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
                          rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
        Validity
            Not Before: Jun 13 01:25:55 2026 GMT
            Not After : Jun 20 01:25:55 2026 GMT
        Subject: CN=6a2cb1a4-dab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:5e:89:b5:b6:7c:fe:0b:61:a1:be:70:00:
                    56:e4:31:00:75:d3:c8:46:2e:e9:79:ba:40:5b:91:
                    90:87:bd:bb:03:87:e9:88:1f:f1:1b:2b:f2:2e:60:
                    2d:91:44:25:08:fe:41:77:40:50:f7:c9:3f:e7:45:
                    97:c2:01:c7:ab:5e:42:c2:8c:0f:51:15:8a:36:1b:
                    87:43:6b:9a:bd:10:d1:50:75:68:67:a8:aa:83:80:
                    ff:b5:d8:08:10:ab:ae:e7:8c:f5:41:47:7d:40:0b:
                    23:d4:6f:a4:ec:3e:f3:35:66:16:a9:f5:61:15:ac:
                    09:a9:5a:a0:63:04:f0:96:69:17:c0:36:37:95:2d:
                    27:a5:73:47:26:a8:e9:04:48:c8:b4:d4:2a:93:d2:
                    87:b9:d7:91:6e:bd:a3:23:26:7a:76:82:f1:3f:50:
                    25:5d:a4:af:33:d1:98:dc:fa:62:97:5a:fa:92:4b:
                    d3:c1:43:da:c2:ca:69:ff:71:bc:8e:35:6e:93:e9:
                    95:dd:27:dc:f5:bb:2b:65:32:f3:ca:19:09:83:dc:
                    b8:9f:17:9c:97:ff:fe:f8:77:a8:65:d5:d3:f7:63:
                    4e:3e:8c:ce:03:43:be:6f:59:61:3c:e4:d6:23:03:
                    c0:09:db:25:5c:a6:e0:ef:a4:39:15:d8:a6:ba:51:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BA:20:F1:85:55:23:53:57:7D:DE:35:E0:9B:80:27:DC:44:95:5E
            X509v3 Authority Key Identifier:
                keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a4:83:5f:f4:34:77:4a:85:7e:47:67:03:a7:12:b5:20:ca:
         84:91:29:b2:cf:2b:a1:5a:ff:79:9b:14:59:56:9e:9c:bc:40:
         3b:3a:e9:fc:51:24:09:7c:66:b5:d6:81:2a:2f:5c:48:b6:d0:
         c4:9b:97:c2:15:5e:61:f1:12:6e:44:29:69:ae:d3:41:17:8b:
         4c:d9:73:3a:f1:ad:6c:80:cb:e9:bb:99:94:36:02:7e:19:b9:
         a1:2e:76:ee:ed:8c:ff:dd:51:8c:97:52:eb:ec:96:c7:7f:1a:
         fb:83:33:f9:d7:12:25:bf:e9:db:d0:e2:38:9f:84:0a:77:cd:
         b9:f7:5d:d5:a2:87:f9:03:f9:61:4b:55:cc:80:8f:ba:40:02:
         a0:81:94:27:26:3a:0b:3e:4e:e5:ab:c7:cc:b0:28:14:aa:2d:
         bb:cd:2a:04:9c:c1:7c:68:67:36:95:b4:3e:eb:b6:c0:73:f1:
         ec:c4:85:a7:bf:26:fe:99:25:2b:17:3e:6e:2f:7e:34:40:6d:
         e7:92:57:64:08:2a:4e:0c:96:cf:58:1d:a7:cb:f3:49:ce:7b:
         33:a8:d1:42:69:95:0d:1d:eb:e3:5b:60:fe:dd:cb:39:5e:b9:
         bf:b0:9d:be:3e:a3:b5:ae:6f:86:b1:73:e3:ec:f6:e7:f4:72:
         fd:04:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:26 2026 by rpki-client