Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft
File:                     f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft (raw, json)
Hash identifier:          3KA5Y763Z0UALD5n0oic9trI0+2+h+l9fNVnIbMfVbo=
Subject key identifier:   B9:A4:94:AF:3F:CD:77:F9:CF:6E:00:0D:B6:B4:1C:2E:3B:70:B0:08
Authority key identifier: 7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E
Certificate issuer:       /CN=A9153F90/serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft
Manifest number:          33
Signing time:             Sat 13 Jun 2026 08:43:10 +0000
Manifest this update:     Sat 13 Jun 2026 08:43:10 +0000
Manifest next update:     Sat 20 Jun 2026 08:43:10 +0000
Files and hashes:         1: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl (hash: ePM4tEbHzAgesLAli5lzMgDmXK5SHJH3z0eDYb9xbes=)
                          2: A1369C781C3B11F1A9F167973A3D8C67.roa (hash: SY4VqkxyGoejCFuLzZISWSny3WC42+Mi6EDjqr/Szpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl
                          rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153F90, serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E
        Validity
            Not Before: Jun 13 08:43:10 2026 GMT
            Not After : Jun 20 08:43:10 2026 GMT
        Subject: CN=6a2d181e-db1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:03:6b:26:f1:20:b0:3a:72:49:fd:dd:b7:
                    e1:3b:07:5c:58:06:e9:3b:76:98:60:29:e3:17:24:
                    5a:7f:dd:14:49:a6:c6:fa:5f:0c:1b:44:16:6d:d8:
                    f4:48:91:dd:07:97:70:75:25:c0:ce:55:67:f0:f0:
                    f6:bb:eb:86:e8:92:e3:31:98:97:fa:10:08:26:4e:
                    d1:ab:ec:5c:1f:07:7c:af:ea:50:dd:a8:66:1f:cd:
                    75:74:de:5f:0f:60:00:b2:13:9a:bc:aa:e7:37:c0:
                    d2:53:05:44:08:ef:90:d4:98:a9:f9:05:93:96:b3:
                    5e:23:13:b6:82:55:0e:fb:6e:5c:57:60:28:91:db:
                    dd:ac:2f:00:24:d2:2a:2d:4a:75:f6:86:69:ec:b4:
                    81:20:fc:9d:d5:a9:cf:3a:ff:50:68:78:6f:69:ac:
                    9c:5f:ac:70:1f:35:c7:5d:06:9a:aa:01:eb:1e:39:
                    92:27:bd:4a:9b:02:a3:88:50:d0:63:6e:0f:86:43:
                    b7:29:d4:0e:3b:fd:14:1a:17:60:6a:7e:71:68:8a:
                    30:2a:65:8d:ee:b9:d5:6c:8f:da:67:cf:64:53:45:
                    3d:d0:ad:d9:ac:d3:56:a1:5a:a0:1d:36:a2:e1:b0:
                    25:68:90:d8:b5:f6:76:32:f6:f8:81:6d:47:5f:e9:
                    2f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A4:94:AF:3F:CD:77:F9:CF:6E:00:0D:B6:B4:1C:2E:3B:70:B0:08
            X509v3 Authority Key Identifier:
                keyid:7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3d:97:67:be:1f:69:86:4f:c7:55:58:ba:f7:50:17:6e:77:
         6c:06:01:2e:7a:3c:bc:c0:4c:66:a2:35:3d:13:46:77:1b:96:
         90:17:2d:3c:3e:01:bf:c5:f2:c1:bc:7d:11:33:31:d7:42:49:
         7a:b3:b5:9d:1a:8c:c3:ed:73:99:df:e2:8b:fa:f0:3c:a9:2e:
         5f:9c:0a:3a:5b:10:e6:5b:69:63:43:5a:60:f2:e9:44:6d:5b:
         7a:6f:4b:9c:56:0a:06:fd:11:ec:b2:ce:4a:43:82:ed:ab:71:
         3b:cc:19:50:08:8f:ae:ba:60:58:d4:53:a7:a7:b7:93:be:08:
         95:9f:9b:4e:8c:2c:1b:3b:37:86:e9:5d:f8:ee:d1:55:44:99:
         d0:53:bd:f0:ab:7c:5f:06:9e:20:bf:99:ad:d2:d7:11:e8:af:
         f0:91:5a:d0:c0:d5:a1:18:2f:58:f7:2f:69:27:8c:09:4b:13:
         35:e1:96:09:10:62:00:99:fd:c4:93:c6:8e:a3:85:ed:60:6c:
         9f:0c:ae:09:3f:23:c8:39:1b:4d:76:8e:a0:eb:72:f7:a0:e7:
         ec:8e:bd:bc:ea:77:3a:68:47:98:c2:70:33:53:ca:4a:ee:93:
         d1:23:91:90:92:8a:99:36:e1:d1:14:98:65:9d:89:cf:05:8d:
         99:dc:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:22:20 2026 by rpki-client