Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
File:                     sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json)
Hash identifier:          hXb9R4QqNm8RsCZJ2k6+sr2fV/4KvtO0LxEysza41ZA=
Subject key identifier:   4A:A2:7D:26:D0:A2:FF:BF:C2:5F:78:81:B7:1C:81:59:D1:43:DC:67
Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
Certificate issuer:       /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Certificate serial:       0D92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
Manifest number:          0D71
Signing time:             Fri 12 Jun 2026 17:59:02 +0000
Manifest this update:     Fri 12 Jun 2026 17:59:01 +0000
Manifest next update:     Fri 19 Jun 2026 17:59:01 +0000
Files and hashes:         1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: a6XV+rF3ZICONtij6naOuvhNdRs40uUdXKS3eOWK+fw=)
                          2: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: CausEKBJvcLCY2g+bHYlOvrLzaOZNNslUPs7u8h+azo=)
                          3: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: Z+WXuAeNXEm2DshVUamhEUi82/2PD1ZlUuuRrwwUJi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl
                          rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3474 (0xd92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
        Validity
            Not Before: Jun 12 17:59:01 2026 GMT
            Not After : Jun 19 17:59:01 2026 GMT
        Subject: CN=6a2c48e6-084e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:ba:7b:19:91:0a:87:27:ee:e9:db:24:e3:
                    b4:d2:e9:2e:e3:c8:33:f5:f1:0e:83:ee:23:aa:ae:
                    0e:be:31:1e:7b:b4:fa:3a:fd:ff:8b:bf:d1:f6:e0:
                    e0:ea:22:f3:fa:bd:5e:ae:8c:f4:d6:79:43:7a:7e:
                    62:da:b7:e6:6b:30:a0:94:5c:89:11:e5:c5:9f:c5:
                    2c:88:d9:b9:fc:20:6f:83:79:95:6f:7e:d7:bf:fa:
                    82:3e:64:76:ee:3f:9a:76:e3:25:10:f7:72:73:96:
                    57:2e:c1:d6:7e:dd:a7:21:7a:7c:63:bc:e1:24:0a:
                    18:85:19:50:d1:1a:fa:8c:91:86:a2:22:d0:59:8d:
                    66:27:b1:24:bc:e3:3d:c6:43:85:ec:f6:d4:f2:9f:
                    81:f4:1a:55:cb:d3:86:b8:44:ec:ea:75:e5:6b:dd:
                    d4:ef:be:f0:ee:73:33:c3:25:d6:14:f5:e7:6f:92:
                    58:04:ce:ff:6c:ee:90:8e:0d:e8:3a:f5:54:75:d6:
                    dd:16:e0:28:28:86:04:ad:61:8a:f5:af:9d:06:1d:
                    62:08:70:1e:86:09:8d:01:d2:74:9c:60:41:c0:dd:
                    db:f1:67:22:b3:ec:1d:b7:15:73:88:fa:e9:3f:be:
                    bc:ff:a6:5d:a9:2c:f1:cf:b6:6a:10:32:ae:a4:c5:
                    9a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A2:7D:26:D0:A2:FF:BF:C2:5F:78:81:B7:1C:81:59:D1:43:DC:67
            X509v3 Authority Key Identifier:
                keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:0c:fc:de:fc:be:62:92:cd:4f:d7:da:19:51:5a:2e:e4:
         34:ab:a0:5f:4d:2a:ec:e4:5b:72:e8:74:5c:3a:fa:37:b2:8c:
         83:84:dc:d5:dc:e5:80:07:fc:28:bc:7e:33:aa:d6:d1:33:ac:
         11:4c:b9:c4:7e:d2:4e:c6:e6:1e:8c:2f:a7:9a:14:91:ff:c7:
         d3:10:2b:c5:43:5c:8a:6f:a9:38:33:df:5f:a8:06:d2:af:ac:
         51:5c:34:b9:99:a3:75:b4:6f:9f:01:1d:af:74:ba:cf:ba:9f:
         fe:30:84:bf:66:4a:0a:43:43:48:a5:3d:ec:3a:58:08:e9:f1:
         e0:24:33:b1:f1:3f:c5:4a:3e:ba:b0:8d:3f:f0:14:40:7b:bb:
         a2:92:07:00:2d:13:26:b4:8a:01:73:4a:46:a9:d6:f0:e7:aa:
         9f:fc:b0:5b:9f:eb:ea:a2:d3:61:74:52:34:96:fb:a5:d9:fa:
         8c:2d:d3:da:a4:96:8a:80:e0:78:57:75:d2:76:ab:43:71:e7:
         23:26:c3:97:e9:1a:0f:a1:99:80:1a:70:82:eb:a4:e4:e8:de:
         99:79:78:42:66:87:f4:1f:54:6a:52:3a:f0:19:0c:d8:c0:ec:
         b4:03:a7:8b:94:0d:36:13:c0:0b:aa:09:f8:2f:da:85:71:3f:
         a6:66:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:48 2026 by rpki-client