Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
File:                     0l-HlucNZw6YbGwkdz5rd4w2BXc.mft (raw, json)
Hash identifier:          sBSiCmRsi0aQvGz/3IianIJOQ/b9PX3RI8b7ndZoUzM=
Subject key identifier:   66:4D:A5:92:DA:82:A1:FC:BF:E5:2C:3E:89:45:06:95:CF:98:CA:DE
Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
Certificate issuer:       /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
Manifest number:          9C
Signing time:             Sat 13 Jun 2026 07:26:28 +0000
Manifest this update:     Sat 13 Jun 2026 07:26:27 +0000
Manifest next update:     Sat 20 Jun 2026 07:26:27 +0000
Files and hashes:         1: 0l-HlucNZw6YbGwkdz5rd4w2BXc.crl (hash: 7klWfEciFYtPedvaatJkYWXTg8U9M8qCxEHUnL+CAPo=)
                          2: 442749147D6311F0BC413466C4F9AE02.roa (hash: pZzQ3wcf5NhKLhQ5y0SYHfcdZzM5PRL9cbkeNwOsguc=)
                          3: 44AA60D87D6311F0BC413466C4F9AE02.roa (hash: 0u1ZLLqCampcdXnPq/pBAes2DhVX2vLtj9KlG8BoPAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
                          rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
        Validity
            Not Before: Jun 13 07:26:27 2026 GMT
            Not After : Jun 20 07:26:27 2026 GMT
        Subject: CN=6a2d0623-7eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dd:0f:ea:5f:ed:6b:2d:b4:08:de:a4:6d:16:
                    0d:46:c0:42:e8:62:2d:2b:7d:8f:38:84:42:2b:c3:
                    8a:f7:da:81:0b:d2:e8:41:db:3d:00:77:e9:38:45:
                    3c:5a:c4:8b:7b:1a:86:fd:31:95:da:bb:23:56:42:
                    f1:55:b6:d0:da:83:9d:72:80:2f:15:56:bd:8b:9e:
                    c8:85:37:42:fc:78:e1:f4:37:df:51:21:89:65:e9:
                    48:11:6c:4e:f9:15:7a:5b:26:35:84:a2:92:3c:70:
                    c6:50:2d:20:7b:9a:ee:a4:2f:3d:cf:82:22:1b:09:
                    0b:42:4c:45:ee:70:ae:bb:b6:64:20:9d:13:c7:74:
                    1e:8b:75:a6:6e:94:9c:39:b7:07:b6:dd:08:14:0d:
                    f7:88:89:30:d6:76:e7:40:79:0f:1f:19:eb:8d:64:
                    03:b3:83:72:b2:1d:91:e6:a6:e7:65:c4:67:b4:f8:
                    20:ba:17:08:fe:32:62:0e:3d:e2:34:7a:dc:a8:a0:
                    0e:01:0c:50:8b:c2:49:b7:e7:50:35:ae:ae:e3:b1:
                    28:67:ae:b8:4b:ee:c9:75:ea:91:fb:a1:ba:0a:de:
                    db:8f:e9:17:00:e0:85:ee:14:8d:66:e9:3b:be:56:
                    a4:da:0c:55:9c:86:4d:eb:4f:25:0b:5d:29:9b:f4:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4D:A5:92:DA:82:A1:FC:BF:E5:2C:3E:89:45:06:95:CF:98:CA:DE
            X509v3 Authority Key Identifier:
                keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:89:b6:8b:23:fb:5a:24:0a:1c:8d:47:34:cb:6d:7e:1a:e8:
         70:b5:bc:d8:2f:91:12:17:89:4a:24:2a:2a:61:67:98:2e:dd:
         fa:39:37:d4:aa:90:65:93:bb:26:71:5c:c1:4f:88:3b:77:5b:
         e7:ff:61:86:93:b8:81:b7:a7:86:67:37:fc:4e:da:7a:97:53:
         a4:ce:c1:80:c1:c1:ac:df:2c:07:8d:2b:2a:ae:f0:9a:8b:57:
         84:6c:a8:35:c1:34:43:49:b5:7a:43:31:df:94:89:df:f5:84:
         ba:12:f3:b5:fa:bf:61:04:5a:9c:5d:e2:d4:b6:92:41:e4:3e:
         d8:e1:ef:cb:99:5d:23:fc:55:f3:93:62:8b:6f:00:1a:26:be:
         4c:36:46:84:93:60:05:b1:64:61:5f:7b:ed:f4:e2:4f:ea:b6:
         b8:34:ce:fb:dd:29:86:6b:b7:7d:89:a0:e3:c0:bb:51:72:25:
         96:6e:85:5f:74:f1:04:de:04:c6:7f:50:36:ca:cc:95:5a:a8:
         3d:e9:f6:b9:e2:b9:31:c0:ad:2a:da:30:34:b2:8c:8e:7f:98:
         e4:4d:4b:6e:6a:78:c7:93:ff:15:cb:ff:d0:36:26:a6:3d:14:
         3f:47:d6:11:26:ab:b9:98:fe:0c:75:e1:77:04:7b:0e:00:13:
         ec:ae:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:23:43 2026 by rpki-client