Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
File:                     7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json)
Hash identifier:          KS1N53Y6Cuqi02LyK11DeCITilzN4+V58Or8b666cbs=
Subject key identifier:   A0:18:40:72:AC:21:9B:4A:43:E4:69:CE:AC:81:9B:8C:CF:81:9A:AA
Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Certificate issuer:       /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
Manifest number:          011F
Signing time:             Sat 13 Jun 2026 05:48:27 +0000
Manifest this update:     Sat 13 Jun 2026 05:48:26 +0000
Manifest next update:     Sat 20 Jun 2026 05:48:26 +0000
Files and hashes:         1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: mZOGXcSrZv62HRY4T0/qE9BnCAhCN/Tj2cV8sFCWpBk=)
                          2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: fbcyaAtrA1h5av9wkarvyax0xETi5abCoRaPXoCMR3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
                          rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
        Validity
            Not Before: Jun 13 05:48:26 2026 GMT
            Not After : Jun 20 05:48:26 2026 GMT
        Subject: CN=6a2cef2a-2c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:87:2e:af:53:ba:5f:61:0c:87:14:38:02:
                    b6:32:aa:f1:2d:91:1f:19:36:ba:fe:c2:d0:dd:9d:
                    36:9d:a4:c7:70:59:07:17:f1:0b:6d:6b:72:5d:ae:
                    b0:ae:cc:1a:1c:7f:8e:29:37:51:89:50:5f:65:6d:
                    09:c5:f9:a6:d9:76:08:bd:47:a8:82:24:a8:5e:f8:
                    54:20:c6:f3:0e:93:72:e4:60:a0:83:8c:2e:a3:56:
                    31:be:bb:5c:de:55:14:e0:e3:5e:a5:7f:3e:33:af:
                    22:8c:eb:cf:36:dc:b1:0f:28:f5:77:2a:40:b2:a8:
                    23:bf:f1:7b:63:f2:d9:c5:92:01:22:48:b7:50:0b:
                    b5:7f:ac:58:33:b1:f1:d2:bf:30:a4:ca:fb:94:53:
                    c0:9d:a9:07:3a:89:84:69:ab:40:45:0b:e9:0a:57:
                    61:a4:41:77:f2:38:62:b7:f4:5a:21:a9:8e:e8:bb:
                    41:ef:ba:6a:37:fd:0b:c7:c5:8a:e3:d9:12:05:ce:
                    46:07:e2:48:c6:e6:f4:a0:c4:ea:35:7d:63:af:bb:
                    3e:ca:1c:bb:82:bf:3b:79:59:c2:74:6c:a3:62:d1:
                    ae:ed:c0:de:45:7b:03:11:03:c4:5e:d8:b3:7a:1e:
                    c9:98:0b:99:6a:85:a3:8b:4e:dc:c0:05:5f:b8:87:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:18:40:72:AC:21:9B:4A:43:E4:69:CE:AC:81:9B:8C:CF:81:9A:AA
            X509v3 Authority Key Identifier:
                keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f3:c0:37:2f:5a:53:5b:d0:e8:1c:ba:70:f2:6e:d0:bc:22:
         b4:b3:2a:c4:3a:69:27:85:d6:95:70:3b:d0:88:7d:c7:4d:79:
         00:6a:37:f8:d3:58:b7:9d:e2:9b:5f:94:06:c5:31:e4:dc:2c:
         87:11:71:98:f4:ea:fc:4e:b7:9a:15:5a:12:da:b1:dc:cc:b1:
         ef:f4:a8:ce:e6:38:41:45:d8:07:18:8f:2f:28:49:62:f0:f2:
         e5:26:a2:b3:e8:a1:70:5e:7b:1b:4f:5b:6e:2f:01:2d:fa:50:
         cd:29:9d:aa:00:6e:1a:b4:eb:fc:c8:6b:3d:c4:ef:d2:46:9a:
         40:02:4e:5e:b2:58:c0:b9:06:f8:66:d1:7c:e0:ed:22:7f:49:
         3b:22:24:d7:56:76:05:3c:e2:eb:63:6f:b2:f7:b2:1a:b7:63:
         64:81:72:26:13:76:dc:1e:21:ab:6d:4b:b1:d3:16:9c:21:bd:
         11:c6:3b:08:a8:f5:15:31:6f:e5:50:6e:d6:f1:af:0b:f7:58:
         35:72:58:24:a1:b7:cb:b8:7a:74:2a:1c:57:11:29:80:e4:01:
         06:15:5f:b6:f0:dd:be:c9:98:f9:2c:30:99:40:3a:ee:96:3d:
         89:df:50:99:2f:79:54:1d:e7:dc:45:d6:59:c8:85:41:fc:7e:
         00:ab:bf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:04:29 2026 by rpki-client