Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
File:                     Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json)
Hash identifier:          8HqSd5bYcX3lt5pO9WthrFSQlFzj8HsiGyU+mmddNsE=
Subject key identifier:   04:72:77:90:15:61:AE:0A:C8:A4:D4:D2:07:73:5B:89:9B:F2:5C:7A
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Certificate issuer:       /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial:       05E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
Manifest number:          05DA
Signing time:             Fri 12 Jun 2026 23:04:55 +0000
Manifest this update:     Fri 12 Jun 2026 23:04:54 +0000
Manifest next update:     Fri 19 Jun 2026 23:04:54 +0000
Files and hashes:         1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: IRLXBMlkVBvyVF08tQpADKT00dSaEwizYYEXcTiUTIM=)
                          2: C847114C07D411ECBF875117C4F9AE02.roa (hash: RTJD+7WiiJ9osfnBTe3ZJqaDqHxNHYqplthmyXrSeGU=)
                          3: 0DA7E9A84E5E11F18A6201F7A4833773.roa (hash: RfB9xkFiIdCV5oVAdDDP61O6abiPBSL2qkBmqr65dgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
                          rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Validity
            Not Before: Jun 12 23:04:54 2026 GMT
            Not After : Jun 19 23:04:54 2026 GMT
        Subject: CN=6a2c9097-c4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:c7:a3:22:62:ea:41:14:53:5d:d9:e5:eb:
                    48:e0:eb:60:84:e5:36:9f:37:34:d9:fe:f3:cd:ce:
                    8a:11:f9:a3:38:85:51:6b:78:2f:c0:f6:9a:bc:cc:
                    1a:c5:93:be:63:c2:47:6b:34:c0:1e:00:5b:7d:b0:
                    be:06:51:cb:f8:e1:69:f1:b0:11:96:ce:86:25:e4:
                    a7:77:f2:ed:ef:a9:be:ef:7c:18:b8:b2:f9:12:e2:
                    5f:92:ef:6a:1e:e4:e2:65:5c:a3:6d:f5:af:ca:6a:
                    be:4c:78:b7:56:06:c5:98:c3:38:3a:ce:43:36:21:
                    96:41:d2:8d:f7:bd:cd:74:a8:52:0b:32:a3:69:a9:
                    2c:b9:1b:0b:87:b0:4f:c7:e7:eb:c9:9f:61:57:73:
                    95:85:4e:25:cb:6d:a3:24:79:cf:cf:29:0b:71:58:
                    2b:12:f5:36:d6:6e:4c:0d:e1:18:a0:a1:8c:1b:7a:
                    7e:6f:52:35:8c:16:b5:78:bb:5f:dd:20:37:d6:74:
                    95:4d:ad:0c:49:7f:0c:a4:6d:6a:36:b7:a1:f4:a2:
                    57:07:e7:de:bd:c2:09:84:9e:8b:00:5a:77:99:51:
                    3a:c4:ae:6f:3a:ed:a3:c3:6f:d3:7d:8d:f2:6c:67:
                    56:ca:99:13:d5:4f:db:99:22:62:06:0e:31:5e:13:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:72:77:90:15:61:AE:0A:C8:A4:D4:D2:07:73:5B:89:9B:F2:5C:7A
            X509v3 Authority Key Identifier:
                keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d2:92:35:52:bf:0c:37:c9:05:b0:04:40:e1:5b:46:d8:87:
         64:cf:1b:49:a8:6f:86:e2:37:43:29:8a:78:6c:c7:fe:94:de:
         dd:e5:08:b4:c3:af:27:5c:7f:88:4c:28:61:19:89:5c:3b:fe:
         d6:0b:c1:b7:d9:d3:33:7d:a1:0e:c0:22:38:2b:45:75:e5:ff:
         6c:58:e7:31:67:ef:1c:82:74:1a:ed:57:3d:2f:27:55:bb:5c:
         47:18:25:db:28:4f:ea:d2:29:24:9d:dc:d0:98:f0:68:65:b0:
         4d:ff:04:cf:c8:47:2c:7e:d6:06:4d:65:c5:b4:8a:d3:1b:57:
         67:3f:b5:9b:da:ec:d2:29:12:db:4e:f1:10:e9:ff:71:e8:82:
         9a:53:fd:28:c2:56:39:72:79:9b:b3:fa:cb:ff:ca:bf:11:16:
         f5:76:51:1b:5f:59:88:51:74:02:21:95:4e:c0:ce:ec:dd:8a:
         c3:48:71:27:cb:07:ab:fe:d3:99:23:d1:2e:bb:67:09:eb:d9:
         0a:27:d2:e3:a6:e4:46:60:9c:fc:68:49:2b:ca:e7:85:7d:36:
         85:86:18:5e:97:ff:d9:c8:6e:fe:84:6f:06:99:8d:7d:2b:df:
         78:d7:e5:1b:c9:66:9a:36:c4:55:76:18:e9:85:57:4d:cd:4e:
         77:59:73:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:47:41 2026 by rpki-client