Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
File:                     D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json)
Hash identifier:          AO9p6DnorVEj5/BzNNVZeyp06ec6Qa8zmzbtIo2wErw=
Subject key identifier:   3A:98:17:3B:D5:BE:C1:F8:87:A0:0F:C1:9B:45:B1:C4:7D:50:79:C0
Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
Certificate issuer:       /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
Certificate serial:       0DAE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
Manifest number:          0DA0
Signing time:             Fri 12 Jun 2026 15:31:59 +0000
Manifest this update:     Fri 12 Jun 2026 15:31:59 +0000
Manifest next update:     Fri 19 Jun 2026 15:31:59 +0000
Files and hashes:         1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: RuOR0P/hSEJ/AXLcracpGyDv8K5jC27V+/onoa4+GEM=)
                          2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: KN/qO3b9F5dp3gvVSi/2Av1F8gy5I+kWuZVNLBkzY6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl
                          rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3502 (0xdae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C33A, serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
        Validity
            Not Before: Jun 12 15:31:59 2026 GMT
            Not After : Jun 19 15:31:59 2026 GMT
        Subject: CN=6a2c266f-4091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:ea:f9:46:67:ff:fc:29:ca:4e:f0:45:07:
                    63:7d:eb:ff:8d:b3:35:3a:09:29:9e:dd:14:0b:19:
                    ea:c4:44:50:d1:f1:bd:7a:08:02:bf:07:0f:c7:4a:
                    db:2a:99:d2:0f:10:f9:f3:72:16:6a:d3:12:db:1f:
                    e6:55:c0:63:bc:45:d1:f3:5e:27:d8:52:97:76:d2:
                    07:c9:fb:9f:37:22:6c:f2:8f:a5:4a:57:e4:c2:13:
                    7d:5b:86:ad:71:c3:7b:fc:6a:c2:8a:02:f5:36:29:
                    a1:c7:9a:af:90:08:5b:2e:98:6f:26:7e:d6:4b:c0:
                    4e:92:66:50:c1:ae:c0:ed:b1:05:d2:03:1b:a1:38:
                    f6:10:4f:ef:46:dc:74:30:93:37:b6:08:8e:fd:8d:
                    35:cf:2d:72:a3:c4:ba:08:21:ab:28:0d:ce:a5:6e:
                    ae:53:3c:f3:1c:eb:02:31:54:fc:0e:9f:6d:63:0c:
                    21:fc:57:6d:67:77:be:0e:46:b4:61:f6:cf:76:8a:
                    08:b9:08:7a:43:2a:a8:2e:74:97:97:b9:82:f4:a5:
                    d6:b9:e8:0f:49:c2:ad:d2:7b:e2:1f:03:c7:57:b2:
                    1e:f9:2e:1a:a0:72:55:28:5f:a5:ac:07:1e:17:0a:
                    83:14:50:a0:c1:b0:a0:f0:82:eb:6d:84:f5:fb:ca:
                    e7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:98:17:3B:D5:BE:C1:F8:87:A0:0F:C1:9B:45:B1:C4:7D:50:79:C0
            X509v3 Authority Key Identifier:
                keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5e:e2:cb:f5:09:7d:f3:c2:d9:40:36:c5:eb:f0:03:1c:91:
         ab:aa:84:78:7e:88:f3:8d:65:bd:6d:95:82:64:1b:2d:80:31:
         7d:bc:87:8b:f1:d1:5d:ed:99:73:dd:17:74:3b:15:e9:5e:97:
         21:fa:41:0b:e4:57:44:77:d7:89:31:11:92:2b:96:2c:13:22:
         9e:f1:de:2a:2e:23:8f:d5:2d:f5:62:3e:b0:bc:80:80:36:a1:
         ab:f4:15:ec:d3:c7:d4:38:80:cd:57:fb:2e:ab:80:fa:7b:a9:
         b2:f8:b2:bb:68:26:83:fa:9a:a3:89:da:26:ae:70:a3:37:27:
         aa:7c:5c:6f:21:48:d9:0c:ab:04:f4:ed:8f:89:db:1a:cd:f1:
         b4:8b:50:f2:af:b5:1a:25:3f:73:39:18:5a:03:f6:0b:de:19:
         e6:6c:a2:c9:a8:44:6a:c6:82:cc:b3:a2:06:e5:b7:41:9a:56:
         35:33:e9:9e:a6:3c:eb:4a:01:67:ca:a1:29:c0:67:4f:f0:9c:
         c5:2f:2d:09:54:13:51:96:54:3c:70:02:4f:0c:76:c2:54:0b:
         a1:85:78:fc:af:e4:31:90:90:f4:b7:57:91:0c:b8:7a:09:99:
         1c:c1:d5:87:5a:4c:ee:ea:05:4c:13:9c:0e:be:a6:df:6b:00:
         4e:d2:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:49 2026 by rpki-client