Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
File:                     cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json)
Hash identifier:          mwnMaCUIchp70U7PV1maszC9qViVVIiu1etv4v4N638=
Subject key identifier:   3A:35:23:38:26:B2:3C:15:6B:BE:EB:6D:E9:AD:A4:0D:BD:4E:2D:77
Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
Certificate issuer:       /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Certificate serial:       026D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
Manifest number:          0267
Signing time:             Sat 13 Jun 2026 02:16:14 +0000
Manifest this update:     Sat 13 Jun 2026 02:16:13 +0000
Manifest next update:     Sat 20 Jun 2026 02:16:13 +0000
Files and hashes:         1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: 4d0ZOGvHJaMKllT1DfOEvrRGq+BLKdMIlt1RObt1ucY=)
                          2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: UUPPLcKEvUEhkpvRtioLB7LEWMQls2sTWKjKgUgudGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
                          rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
        Validity
            Not Before: Jun 13 02:16:13 2026 GMT
            Not After : Jun 20 02:16:13 2026 GMT
        Subject: CN=6a2cbd6e-b517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:c6:da:18:05:33:c5:9c:e7:04:34:71:d1:
                    fa:8c:12:e6:6e:b0:68:a9:2d:dc:a7:40:37:b4:f5:
                    6f:da:da:4f:c4:36:b8:7f:c5:ee:a7:f5:30:7d:da:
                    0a:96:c3:71:7c:5a:38:42:c1:f6:09:03:cf:77:9c:
                    34:8b:e1:25:dc:76:1a:6e:6d:72:80:1f:50:1f:14:
                    a2:8a:e0:a7:55:0c:51:1f:0d:67:4e:d7:46:5b:c6:
                    65:2d:d0:2f:80:9a:c0:8e:12:40:ef:b8:0e:77:5a:
                    e9:e9:b6:93:ae:31:a1:33:4e:aa:ad:f7:c7:e5:57:
                    e7:47:bd:e8:9d:3c:78:90:ca:5c:03:39:c9:ea:b1:
                    54:dc:a8:f5:b6:dc:b4:ff:74:db:a1:cf:7a:38:2b:
                    ff:bc:00:49:95:7a:6f:fa:71:23:fd:24:75:42:cb:
                    c9:57:3d:e0:e2:5b:24:27:ae:b4:84:f2:2c:fc:c5:
                    7e:53:3d:14:54:79:ec:8c:26:79:fa:21:3b:80:16:
                    fa:b6:fb:04:21:01:30:ba:49:8b:a9:2f:01:f2:83:
                    0c:4e:20:92:d8:f0:1c:ff:7c:90:16:2d:fb:3b:05:
                    6c:17:3e:f3:92:66:7d:eb:93:64:ef:24:aa:08:19:
                    4d:89:aa:1e:0b:21:17:a4:18:09:f6:2c:5f:cd:ec:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:35:23:38:26:B2:3C:15:6B:BE:EB:6D:E9:AD:A4:0D:BD:4E:2D:77
            X509v3 Authority Key Identifier:
                keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1a:23:84:d5:1a:35:8f:c0:2d:b2:db:2e:02:d4:8b:7d:47:
         ce:ae:96:c8:1c:cf:0d:92:c3:39:e2:15:fb:d2:b1:c3:dc:d8:
         37:0d:5b:fa:78:0a:83:0d:b4:30:62:7f:f0:36:eb:df:26:be:
         6a:fc:76:e3:98:df:6b:8e:93:9f:fa:53:b6:4a:ca:17:a1:b1:
         b1:69:93:d7:fa:d2:b1:17:1e:e9:de:2d:49:fd:b1:07:39:c4:
         2c:db:e4:f6:98:10:a8:22:2c:57:77:18:d6:41:11:4c:92:dc:
         65:1b:e6:c7:cc:a2:52:3f:8e:52:59:d0:6a:4c:c9:9f:8f:66:
         d5:0b:8e:ec:bb:56:cc:09:73:35:41:1d:ec:65:43:d4:cb:95:
         cb:8d:0d:46:5e:cc:39:a5:84:07:a0:c5:f3:4c:15:30:fb:82:
         b2:99:2f:ef:8e:5d:2a:c6:4e:9e:5e:4d:36:67:3d:ab:14:e4:
         e5:cf:1b:8e:a0:68:7e:64:65:ef:d4:29:7f:f2:3e:3c:52:91:
         5d:85:03:a9:21:ed:96:76:5f:c8:40:a5:b8:1b:ee:f2:1f:ab:
         2c:61:e4:20:2b:83:3e:f5:1e:71:15:3f:56:78:4f:de:02:32:
         24:a8:6b:57:ac:c0:9e:d4:a1:2a:9b:89:4c:0f:19:cb:96:b6:
         bd:39:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:35:50 2026 by rpki-client