Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
File:                     s47RYTLcuXiWdncaiwnkUJue1Pk.mft (raw, json)
Hash identifier:          qBZFJ8WL+eZfen/pDDxE34e28MoVmdGOxmZ5//6xfTY=
Subject key identifier:   EE:E7:5A:03:23:F4:E0:70:92:62:F1:B3:9F:6A:6A:C5:61:4B:43:E6
Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
Certificate issuer:       /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
Manifest number:          95
Signing time:             Sat 13 Jun 2026 07:32:38 +0000
Manifest this update:     Sat 13 Jun 2026 07:32:38 +0000
Manifest next update:     Sat 20 Jun 2026 07:32:38 +0000
Files and hashes:         1: s47RYTLcuXiWdncaiwnkUJue1Pk.crl (hash: 0qRhg+yy0bl8IvmzBRF3zcY8T31If74r00MYGWh1sQw=)
                          2: BEB06ADA944211F08A761970C4F9AE02.roa (hash: kk5sjyLutQjUsbYJim6fXXwfLma+mT+CCDWR+53e7jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl
                          rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
        Validity
            Not Before: Jun 13 07:32:38 2026 GMT
            Not After : Jun 20 07:32:38 2026 GMT
        Subject: CN=6a2d0796-9ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:a4:e0:42:60:b7:f9:8d:e7:a6:b2:47:54:
                    8d:6b:7b:3f:dd:20:c8:cd:e1:50:a7:a7:08:d2:46:
                    91:b2:96:f7:df:a9:40:f4:1b:0f:d4:14:e5:1a:5a:
                    13:80:ef:7a:50:56:08:23:72:d4:ca:ef:26:4d:7e:
                    d5:af:87:44:dc:b6:9f:c3:72:5e:3b:23:93:f6:1f:
                    b9:61:eb:37:f8:5b:5d:c9:37:e1:a7:83:af:a5:bc:
                    3f:03:bf:80:c6:6d:d9:f5:43:6e:78:0a:70:3b:b7:
                    0f:27:e0:f3:4d:2c:25:a9:b3:ff:4d:40:43:3d:18:
                    cd:0e:6e:74:eb:7b:01:bc:f2:10:3b:35:87:2d:45:
                    e7:30:a0:42:33:6a:ec:74:4d:a5:d9:ef:fc:6a:94:
                    d4:2c:68:0c:cc:31:53:0e:74:bc:1c:3c:e4:4d:39:
                    79:7a:2d:a6:fc:81:06:32:c2:05:0d:eb:52:11:92:
                    8e:8e:be:b8:a2:f9:e8:57:37:af:92:7b:1b:82:9a:
                    51:44:46:b8:b9:50:b1:c7:c6:6e:54:d3:1a:48:14:
                    5f:ed:30:de:3d:06:68:69:c4:2b:48:b2:66:28:aa:
                    94:36:38:1c:22:cf:be:68:c3:7c:e1:be:1d:59:56:
                    eb:e9:1c:1c:7c:39:13:55:d1:76:ff:42:33:ef:48:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E7:5A:03:23:F4:E0:70:92:62:F1:B3:9F:6A:6A:C5:61:4B:43:E6
            X509v3 Authority Key Identifier:
                keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6f:47:c0:e6:e3:1e:eb:63:6c:64:f3:3a:b0:32:0d:fe:d6:
         86:2a:ad:e0:24:fb:ab:ab:bd:b7:ff:e5:cd:af:e9:9d:57:6e:
         17:d4:78:11:aa:eb:87:e1:f5:9f:ef:a7:79:f6:cc:17:4c:0f:
         fa:9e:e6:a3:3b:df:06:eb:bd:2d:ce:5c:a3:9e:f2:f8:3a:53:
         f6:e5:09:5a:b5:0e:81:0a:fe:bd:97:9a:35:f2:dd:c9:b4:e5:
         78:f4:79:9e:7e:5c:05:06:f2:53:d0:e6:69:af:4b:0d:34:7f:
         07:52:de:bc:66:72:02:4c:de:94:5a:9a:7e:53:52:50:ef:a3:
         cf:13:3f:a1:f0:59:9f:e6:42:43:4b:2e:b4:94:38:e0:33:cd:
         ee:33:a5:62:e4:f6:93:9b:38:a0:14:e8:48:ac:75:e7:0a:5e:
         4d:74:41:b2:ab:5d:df:fb:39:46:58:9b:8c:83:4f:b8:17:5b:
         cd:7b:61:91:a8:49:02:49:9c:87:7f:f9:a4:3b:c3:c7:c3:b5:
         c4:cb:c2:a4:c9:56:9b:47:2d:7e:ca:00:ef:37:c6:4f:bf:5e:
         a9:62:59:8f:cc:0f:15:85:89:33:12:38:ae:7a:f3:89:33:b5:
         1e:05:c2:58:f6:26:99:47:66:7a:3b:63:94:ea:1c:47:d5:27:
         cc:bd:bc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:46:28 2026 by rpki-client