Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
File:                     hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json)
Hash identifier:          /BiT+W6QTJB0w+WJ4mvZMX0dz+mEsaJAkr3iJeTTOzM=
Subject key identifier:   E9:2D:8A:D3:DF:66:DA:C9:D8:D3:FE:B1:B7:1D:2C:E5:73:74:0A:CC
Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
Certificate issuer:       /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Certificate serial:       0A10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
Manifest number:          09FB
Signing time:             Fri 12 Jun 2026 19:52:32 +0000
Manifest this update:     Fri 12 Jun 2026 19:52:32 +0000
Manifest next update:     Fri 19 Jun 2026 19:52:32 +0000
Files and hashes:         1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: lMp+V6G4yYYnRsFJZ/1kVkO4GWo6zryRozy+bCZ8HK0=)
                          2: 70FED13CCEF611ED9DDE0A39C4F9AE02.roa (hash: 6M5Mg9C116unCx1h9rVUgS55hFW2He6mLEZ0NRGWeB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
                          rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2576 (0xa10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
        Validity
            Not Before: Jun 12 19:52:32 2026 GMT
            Not After : Jun 19 19:52:32 2026 GMT
        Subject: CN=6a2c6380-ca84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:0c:4f:66:10:2c:24:f2:35:43:ae:e9:d9:
                    b1:bf:8c:20:c8:bd:46:ac:68:9c:14:02:f7:ac:5d:
                    27:cd:3f:55:ec:d2:91:d1:26:3a:ca:3e:49:46:d5:
                    a3:18:28:2a:bf:90:db:8c:20:34:ec:34:46:5d:8a:
                    a8:3b:73:93:10:e1:a0:66:27:fb:88:a7:80:54:4f:
                    f6:11:80:78:d1:39:36:1b:21:23:5e:03:f1:ea:15:
                    2c:15:f8:f1:5d:e9:cc:cc:ec:04:7f:2b:59:14:12:
                    36:0a:8a:b4:fa:cb:45:27:c0:dc:fc:1e:a4:ff:81:
                    45:10:ec:79:58:87:9f:31:1e:18:a1:7c:1a:1d:ee:
                    24:5f:07:7e:2e:36:42:6c:62:71:0f:f2:80:56:59:
                    7a:6d:41:d8:38:cb:ce:17:88:e4:1b:68:4a:c4:ae:
                    05:2c:4d:a5:d0:a3:73:d6:d3:0f:b5:ec:11:6f:46:
                    e3:56:8c:d3:a7:65:2a:14:bc:41:7a:b3:3c:d1:3d:
                    1c:a9:39:a7:0c:69:75:e2:8a:ed:35:8d:99:a8:d1:
                    02:40:f0:bc:14:c5:99:eb:a0:0a:42:d4:ad:44:bc:
                    27:84:cd:95:7c:9d:50:c6:30:59:d1:ee:2a:5a:86:
                    ed:2d:58:22:1c:a8:17:37:0e:c9:99:5c:59:a7:f6:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2D:8A:D3:DF:66:DA:C9:D8:D3:FE:B1:B7:1D:2C:E5:73:74:0A:CC
            X509v3 Authority Key Identifier:
                keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ef:18:ff:96:ab:24:cd:e4:cb:65:2e:88:6a:89:ab:9b:87:
         8f:de:03:17:39:82:64:98:ec:c1:60:9a:a4:4b:41:2f:07:42:
         e0:29:35:18:79:48:81:9d:06:94:02:72:0e:d3:ed:fa:df:98:
         4a:20:64:52:98:5b:d0:04:75:e0:6f:21:ff:ce:45:c2:10:ad:
         9f:c8:1f:0f:93:a8:f5:5e:c9:2d:20:e9:0b:cf:53:d9:5d:fc:
         cf:b9:84:c1:8e:92:b7:ed:d3:e6:55:0f:a8:0f:fc:c9:12:c8:
         87:4f:34:3b:d4:3d:5b:f1:a1:62:98:38:e6:d9:4f:b9:99:1e:
         66:77:a0:35:7b:cd:a1:43:64:af:8f:0a:f8:be:5b:84:28:b0:
         1d:04:c5:d2:f2:30:01:fc:4d:42:83:2c:53:5e:4c:35:26:f9:
         bc:97:b0:12:86:e6:26:85:59:73:a5:5f:24:9a:89:1f:ad:b1:
         ed:f7:53:6d:95:c9:7f:a3:a3:79:c6:56:52:53:1c:a8:a7:a1:
         72:04:f8:18:3e:45:56:61:6b:09:38:5d:e4:f9:35:3f:93:8c:
         36:55:db:8f:f4:6f:ce:0d:5a:04:af:81:be:fb:34:cd:25:ea:
         79:ab:f7:8c:2f:1d:17:d1:1b:fc:98:4d:71:18:ad:46:08:2a:
         d3:a3:e2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:40:30 2026 by rpki-client