Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
File:                     2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft (raw, json)
Hash identifier:          qATQ/0/dVlwrjwj1wZYpqdzCDM0sHkcMDG8U160VTVw=
Subject key identifier:   43:37:4F:D8:74:F3:B9:80:93:6F:B5:7B:11:87:8B:92:1A:25:82:B9
Authority key identifier: D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24
Certificate issuer:       /CN=A9159ECD/serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
Manifest number:          0170
Signing time:             Fri 12 Jun 2026 23:02:20 +0000
Manifest this update:     Fri 12 Jun 2026 23:02:20 +0000
Manifest next update:     Fri 19 Jun 2026 23:02:20 +0000
Files and hashes:         1: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl (hash: l0nSqlMrno6K+Hj2sNt5p9UXGYz0s7ERl7JDaCQySJk=)
                          2: 5A4723DA6F3C11EF8FD45F13C4F9AE02.roa (hash: 2/r4oR0iCi4LexUGtmPzKzEWeEmDyv6SAtyEMBATvFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl
                          rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159ECD, serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124
        Validity
            Not Before: Jun 12 23:02:20 2026 GMT
            Not After : Jun 19 23:02:20 2026 GMT
        Subject: CN=6a2c8ffc-4908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:73:8a:19:f2:68:9f:47:ac:d8:ac:78:63:46:
                    5c:c6:10:fd:12:d0:4c:7a:33:5e:62:33:e8:bb:f3:
                    d7:3a:b6:d5:38:1e:4c:bb:59:80:db:3f:5e:eb:b6:
                    a7:35:a9:93:f9:ca:b6:b4:93:02:3c:5b:0e:48:9e:
                    06:9f:61:cb:52:89:02:62:22:4f:e0:f4:7c:78:af:
                    3b:40:93:ce:61:23:79:58:fb:a3:fe:5b:3e:78:09:
                    f9:92:ec:94:c8:0c:a7:df:7b:40:9d:64:28:b8:af:
                    79:64:33:e1:07:31:27:9c:1c:09:8e:f4:b4:09:01:
                    1f:76:7c:90:1c:c2:9e:92:86:04:85:3f:00:fe:fe:
                    0f:68:b9:44:00:83:75:52:b3:a7:9a:3e:14:6a:60:
                    b6:ae:4d:74:41:ed:96:6b:44:e7:7d:3c:60:91:60:
                    58:25:d4:ab:35:23:10:6d:99:44:15:41:36:b8:b0:
                    aa:3a:68:d5:a3:68:e2:1e:4d:c2:5c:d2:8f:73:43:
                    c8:0f:3d:c8:6a:b0:97:6d:19:65:28:c5:63:6a:cf:
                    af:37:9b:d6:11:f1:64:84:5c:93:30:b0:50:ca:c1:
                    51:8e:99:5f:d8:1e:82:b9:b6:b5:83:7b:3d:cb:9c:
                    6e:07:a5:c5:d4:5b:a2:b1:8d:38:5f:b1:48:48:2a:
                    ab:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:37:4F:D8:74:F3:B9:80:93:6F:B5:7B:11:87:8B:92:1A:25:82:B9
            X509v3 Authority Key Identifier:
                keyid:D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:07:eb:ec:08:e3:26:6d:6c:31:a6:6a:30:40:c0:e6:45:0f:
         71:e2:77:f7:3d:ea:38:0e:50:3b:29:88:e1:d2:bd:8c:ed:2a:
         ea:9e:5b:07:8f:1e:ed:31:88:21:2f:4f:f8:f8:5e:ad:0e:c2:
         53:30:c8:f0:56:e1:5a:a7:ab:49:42:82:cc:05:73:d8:1a:11:
         42:d3:fe:ae:ab:81:0b:4f:40:b7:56:8d:f5:0e:f6:a2:17:8a:
         b8:df:d6:bd:b1:2c:84:2b:9c:d9:58:89:86:00:a2:f9:07:e0:
         fe:9c:97:9d:21:fd:de:4c:20:34:1e:bc:fa:52:86:cf:94:14:
         50:6b:c7:7f:3c:a4:24:64:f5:ba:1d:72:ea:d1:9f:60:fa:42:
         8c:6a:78:f2:05:c9:79:5a:87:57:18:1c:00:04:ab:e8:bb:32:
         56:4b:aa:76:18:c9:3b:9d:6b:3a:aa:fa:11:af:cb:35:e7:7e:
         23:a2:c3:1d:24:aa:cb:1b:9d:db:ee:db:73:38:fe:33:ca:ad:
         c7:42:fa:fb:1f:91:65:1b:6e:47:77:7a:ff:b3:d8:3d:49:19:
         21:1a:52:b9:d9:ca:18:c0:02:fd:7d:56:97:04:be:5e:dc:5a:
         2f:ce:db:c3:cd:0a:70:3d:65:88:76:4b:7e:e1:b4:a0:9d:73:
         1c:97:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:49:52 2026 by rpki-client