Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft
File:                     d9okgAToxYcr33K6wSIsfMtujjc.mft (raw, json)
Hash identifier:          myRJZ46iQpHSb/XcxyaUCsagFp6BeMLFj4OOQYKLjzg=
Subject key identifier:   E7:EE:36:7B:3A:B8:E2:7C:12:61:E6:20:E9:85:8B:09:3C:01:63:2D
Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37
Certificate issuer:       /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37
Certificate serial:       0A48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft
Manifest number:          0A21
Signing time:             Fri 12 Jun 2026 19:49:19 +0000
Manifest this update:     Fri 12 Jun 2026 19:49:18 +0000
Manifest next update:     Fri 19 Jun 2026 19:49:18 +0000
Files and hashes:         1: d9okgAToxYcr33K6wSIsfMtujjc.crl (hash: ynIi3ugffNF6i+Y2C99yYAo34BwnCD9STEiM4hS3Sgg=)
                          2: 3A58D9F499E611EAB3C00943C4F9AE02.roa (hash: Ix/A1HAv4E1o+T96OwAx6diCaMu8Un7l8lL1cR9lZ0I=)
                          3: 3BABBD7699E611EAB3C00943C4F9AE02.roa (hash: goeW12JBA3cKKGwjatqM92u32XRcfD8Zb78gB6ELWSk=)
                          4: 3AFD491C99E611EAB3C00943C4F9AE02.roa (hash: hAA41RG01uNOAJq/J2qFIRJdJvtjuAyTCQh8VD7YTr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl
                          rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632 (0xa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156342, serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37
        Validity
            Not Before: Jun 12 19:49:18 2026 GMT
            Not After : Jun 19 19:49:18 2026 GMT
        Subject: CN=6a2c62bf-1c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f7:c2:b4:35:6d:d0:46:61:66:2c:35:0d:87:
                    0f:4a:03:f9:f5:55:8f:8c:3a:7e:e1:ad:66:ba:47:
                    84:a4:72:12:25:4e:c0:0e:ab:bb:15:7e:8a:de:31:
                    7f:21:e0:0e:fe:87:41:82:e2:4d:9d:32:fe:9c:4e:
                    4a:2f:c6:2a:94:5b:ed:7b:8d:81:9b:82:50:e7:b4:
                    09:da:f3:fd:b2:20:67:15:77:95:9e:70:6d:85:c9:
                    ae:78:c7:33:81:6f:14:13:75:c0:e4:37:1d:2f:56:
                    4c:c1:df:74:41:3a:42:3d:25:68:b3:d0:7a:3d:7b:
                    28:d8:95:28:26:b8:43:bb:30:73:b3:a0:73:a4:53:
                    f8:2b:9e:55:33:44:ff:85:18:4e:b7:de:51:0f:28:
                    5f:fc:34:b0:29:b4:84:68:37:07:46:24:8a:12:c2:
                    ef:cc:25:3f:78:ff:fc:f4:59:c9:4e:d6:28:c1:90:
                    d5:be:cd:ac:93:31:f0:26:8f:f5:73:81:4f:df:1e:
                    e8:dd:fa:c4:20:42:b6:34:b3:e9:7a:90:96:1e:28:
                    76:09:6d:98:43:21:5f:17:f7:ed:a1:c6:f8:24:09:
                    d8:f2:62:0c:a6:59:fb:98:db:f2:45:9d:32:c6:3a:
                    a0:f1:81:61:9c:ca:79:3a:6a:eb:69:e2:55:8d:76:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EE:36:7B:3A:B8:E2:7C:12:61:E6:20:E9:85:8B:09:3C:01:63:2D
            X509v3 Authority Key Identifier:
                keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:47:c3:4b:8c:ae:06:68:9c:34:7d:e6:d1:f4:33:b0:92:70:
         05:0e:b0:b2:3f:05:bb:68:3b:a6:64:65:f2:b4:00:fd:94:15:
         d1:00:81:2b:f3:8d:24:82:35:41:c1:15:d7:f1:8d:74:99:02:
         33:44:45:a0:85:15:93:af:85:90:36:30:57:a0:98:a3:b9:5d:
         bc:26:48:47:bf:c9:31:ad:74:f1:9b:dc:15:91:73:f3:a4:73:
         83:1a:8e:3b:88:03:01:b4:09:6f:09:5f:72:4d:35:f8:82:e7:
         ae:31:82:f2:96:45:0a:a8:e4:03:71:3b:23:5e:58:36:b0:6a:
         ee:59:18:30:d6:62:a8:d6:3b:67:84:6f:a6:65:8a:fd:de:07:
         c7:b5:73:88:64:31:8c:69:c1:80:74:64:8e:85:43:3c:8c:5b:
         53:ad:29:b6:2f:8c:0d:ef:5c:87:e7:6a:e8:e0:f0:ec:dc:80:
         88:75:01:c6:22:33:cf:9c:63:47:39:24:86:b9:c4:e1:96:01:
         97:12:37:2e:a1:0f:c5:0e:53:32:6b:5b:fd:b5:13:ec:78:41:
         7b:07:27:cd:82:6a:da:22:25:01:10:fc:97:e9:ea:2c:fd:87:
         0f:12:b8:ae:16:2e:e9:54:3e:cf:b2:40:c4:8f:01:f1:a0:f2:
         63:ff:a4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:14:04 2026 by rpki-client