Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
File:                     9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json)
Hash identifier:          SYRp9PZEMABe3f2lRniNjcxRZ1FLgOQxPfqDbM5viEc=
Subject key identifier:   48:A4:65:46:8D:67:36:80:FA:D4:46:96:96:C7:F5:D1:74:3D:B2:A4
Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
Certificate issuer:       /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Certificate serial:       03C5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
Manifest number:          03BD
Signing time:             Sat 13 Jun 2026 00:21:34 +0000
Manifest this update:     Sat 13 Jun 2026 00:21:34 +0000
Manifest next update:     Sat 20 Jun 2026 00:21:34 +0000
Files and hashes:         1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: PHrezhtJ5ySYqmLvZgBzY7sJG/1pCEx8H5il9WUd6FU=)
                          2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: Jx4WgxJh5tEjQvx4+rzFSWsTEKISQMaksJ2aamf5u2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
        Validity
            Not Before: Jun 13 00:21:34 2026 GMT
            Not After : Jun 20 00:21:34 2026 GMT
        Subject: CN=6a2ca28e-62f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:e3:d3:a8:9b:20:d2:20:49:32:40:09:8f:
                    e1:f0:af:b9:cb:45:98:b0:3d:b0:44:71:27:34:61:
                    a4:3d:bf:19:6c:29:ca:de:87:ce:1b:6e:12:18:0f:
                    4e:74:52:e9:60:e2:f3:c7:91:11:81:79:c5:5e:9e:
                    c6:ea:d2:72:6a:3d:bd:b8:fe:4c:0a:96:37:38:1c:
                    f4:0b:fb:a5:e6:c9:ad:91:71:74:62:99:1d:65:1a:
                    e4:55:0c:e5:d9:5e:7b:f2:20:19:2d:e8:eb:0c:44:
                    66:ec:18:74:3d:59:ce:f7:2f:35:37:d6:e5:46:78:
                    b7:c7:4a:e9:e9:df:26:54:5c:ee:81:12:1a:e0:79:
                    33:1f:31:8b:71:34:6d:e4:d7:32:89:b3:37:fc:39:
                    de:f5:64:ac:bf:8b:0e:0b:52:4f:ee:6f:c9:64:ba:
                    bf:b3:bd:fb:09:d0:a7:b9:61:25:bd:52:4c:5b:b1:
                    53:1e:04:6a:4c:b5:2c:1f:7a:56:ed:cf:37:a8:ce:
                    ae:60:d1:66:6d:2f:00:9f:8e:ae:ad:16:3f:40:38:
                    aa:a2:c7:f7:cf:f4:b8:41:ae:08:3d:84:b4:79:cb:
                    01:61:2a:7c:93:bf:05:c0:eb:79:5c:a6:9d:c7:e2:
                    57:77:72:3a:eb:14:47:e9:23:55:f0:a4:94:50:42:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A4:65:46:8D:67:36:80:FA:D4:46:96:96:C7:F5:D1:74:3D:B2:A4
            X509v3 Authority Key Identifier:
                keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:0e:6d:eb:d3:3f:81:cc:20:4b:d5:2b:13:2b:b9:b3:69:b0:
         c2:e2:58:e8:4f:0a:e5:88:a8:11:2a:89:cc:33:6f:01:7c:0d:
         68:bb:81:a4:f3:06:2c:93:5f:0c:85:bd:24:1b:ed:5d:fd:ac:
         33:90:ba:0b:b8:9c:c0:02:64:ea:39:ff:d0:32:23:fa:b2:70:
         18:97:a2:d9:38:c5:e6:a6:63:9a:a5:c9:7e:15:cd:8f:26:90:
         91:db:88:9d:43:e2:67:44:d8:4c:02:bb:bc:29:ae:31:00:37:
         6b:99:26:78:54:4a:77:e9:b4:b1:68:21:a2:b3:8f:68:7f:0a:
         79:28:2e:b1:0f:74:ad:fa:92:81:52:5d:fb:11:67:7d:ab:ce:
         8b:88:39:ed:f7:e1:b2:e1:0c:a7:57:24:ca:71:12:db:8a:81:
         de:e1:53:17:91:bb:ca:b5:4b:9c:10:39:b2:3b:e5:a5:f5:a2:
         19:ab:02:3f:6c:5f:3c:3b:89:a4:a5:0b:8b:7b:8b:ba:f9:83:
         4b:32:3c:82:85:12:fd:c9:60:bb:6e:65:5c:6d:4a:0b:99:79:
         07:6c:0d:30:95:c0:44:8c:22:b8:0c:f8:34:d8:e5:67:2d:20:
         e5:74:a4:61:c0:7e:07:b2:b8:5a:06:fb:45:a0:5b:bb:51:eb:
         2e:79:e0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:39:16 2026 by rpki-client