Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File:                     MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier:          /CW4Zgxm7YTQ2wZwc12QAQR3fTv45R6YCGBd1NDFmQk=
Subject key identifier:   42:20:46:0F:CE:EA:4C:9E:BD:39:60:B2:87:CF:51:38:B0:D4:3B:F3
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer:       /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number:          0133
Signing time:             Sat 13 Jun 2026 04:10:16 +0000
Manifest this update:     Sat 13 Jun 2026 04:10:15 +0000
Manifest next update:     Sat 20 Jun 2026 04:10:15 +0000
Files and hashes:         1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: DkUz/D9j3SLbb3b1/6bwaMAcpk9Ru5e92brN/vDImJw=)
                          2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: FNB/Vhah+1KKF+D8+8ZX+5xp4x5bxuKgnMy6uZOCSaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
                          rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
        Validity
            Not Before: Jun 13 04:10:15 2026 GMT
            Not After : Jun 20 04:10:15 2026 GMT
        Subject: CN=6a2cd828-e6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:8b:bd:20:f6:4e:6b:61:ec:b5:96:b7:3e:
                    da:e4:37:3c:e4:24:43:98:01:3f:65:8f:f4:3a:09:
                    77:0a:e8:8f:b5:7c:85:d0:28:15:9a:bd:27:ae:80:
                    7a:77:ba:29:ce:ad:e1:5c:5e:cf:dc:e4:b8:75:b8:
                    e3:00:5b:bc:1d:fc:65:43:3b:d8:c4:02:93:9b:08:
                    49:8f:8b:d2:e6:06:27:13:e4:4d:2e:21:d8:d7:f6:
                    3c:20:2b:e7:a4:31:81:c8:51:cf:72:7f:4b:d6:12:
                    ce:ad:e3:ad:f7:79:96:3f:d1:13:fc:c2:34:33:25:
                    07:1f:7b:ff:3b:e5:ce:f6:32:9a:a5:81:39:84:90:
                    40:94:30:a1:f5:73:b1:60:b6:2d:2f:d1:df:14:b9:
                    4b:b5:dd:80:34:76:1c:88:9d:e9:f0:cf:fb:1c:a9:
                    00:8f:cc:5f:b8:11:d3:2a:bc:ba:a8:13:d1:77:4e:
                    15:4d:c6:f8:bd:3a:4c:a0:b8:88:d7:ed:0f:4b:23:
                    56:df:5c:ea:d3:d8:e9:d1:36:4e:60:33:30:b1:a8:
                    38:4c:8b:1d:74:97:4f:5d:ec:c1:08:cf:e1:78:f8:
                    66:7d:29:0d:a9:0a:59:ac:86:6a:59:85:0a:d3:93:
                    5c:b0:bf:4d:24:9d:d5:67:fb:12:6e:ef:88:9a:fd:
                    39:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:20:46:0F:CE:EA:4C:9E:BD:39:60:B2:87:CF:51:38:B0:D4:3B:F3
            X509v3 Authority Key Identifier:
                keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:c3:13:e9:13:ad:1d:e1:b6:a8:31:c8:ab:78:78:d0:7d:
         5d:6b:5c:60:44:2d:30:26:44:61:53:83:ac:99:2a:6c:02:50:
         e1:ff:ca:84:ec:b3:1c:4c:9c:33:0c:8c:94:af:c8:b7:52:5f:
         d9:b3:9a:eb:2c:82:c4:7b:3e:d2:b8:aa:40:3f:4c:7a:cb:ac:
         06:98:ca:3d:70:64:3c:28:80:7b:91:08:25:f9:bd:f4:a8:76:
         73:63:7e:e5:19:33:07:95:c8:9d:21:e8:bc:87:a6:19:b9:5c:
         1b:22:77:83:ba:68:e4:3d:d8:62:53:62:8f:cb:db:30:4d:e3:
         07:ac:de:87:3e:04:12:e5:cf:6d:fb:41:61:c1:af:bf:25:e3:
         be:ea:e8:03:49:47:e1:5e:8c:27:ea:bb:27:26:0b:10:6d:13:
         fc:ef:26:0f:46:c7:21:29:02:66:70:66:b5:a1:d5:db:ef:ed:
         36:5a:78:6c:00:1d:49:01:d0:b3:c4:4f:27:c6:7f:76:0c:40:
         01:a4:38:b7:e0:39:dc:ce:07:61:83:36:49:71:26:a5:99:cb:
         4a:65:8a:18:70:88:2e:c5:aa:52:c7:ce:0f:15:01:fa:31:e9:
         2a:8e:57:68:d3:51:a6:a6:6e:15:d7:d4:67:ea:04:e5:99:61:
         27:a7:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:52:41 2026 by rpki-client