Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
File:                     8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft (raw, json)
Hash identifier:          RHJrXuNNgvtnImnflQ+r5UFROGJSsONQ3dQPGNUXA90=
Subject key identifier:   83:7F:CC:3F:14:74:D2:08:2A:42:30:6A:D8:0D:42:C5:9D:DC:70:3F
Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22
Certificate issuer:       /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
Manifest number:          AA
Signing time:             Wed 17 Jun 2026 07:26:58 +0000
Manifest this update:     Wed 17 Jun 2026 07:26:57 +0000
Manifest next update:     Wed 24 Jun 2026 07:26:57 +0000
Files and hashes:         1: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl (hash: 6W9EHAl1szqTR6llQjHnoFAekOJWehlrvYhyn/qKfyQ=)
                          2: 9F9EE58C783011F0B097E07BC4F9AE02.roa (hash: fSYltpxk2u14lPvWhCXB9QKuMuDj8l4c6pcDEmZNiXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl
                          rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
        Validity
            Not Before: Jun 17 07:26:57 2026 GMT
            Not After : Jun 24 07:26:57 2026 GMT
        Subject: CN=6a324c42-23e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:3e:53:8c:f8:03:15:5e:4e:c2:19:d6:b0:
                    0a:fb:3b:5f:2b:a6:4d:53:ec:a2:8e:0e:74:9e:ce:
                    d8:3a:f8:b1:02:14:48:8a:44:e7:68:52:86:c0:ab:
                    0d:2e:f9:66:39:23:27:7f:6e:e8:04:11:c0:c2:f3:
                    1e:75:32:83:14:85:16:a8:cb:48:0d:bd:d9:b9:99:
                    3f:3d:c6:7a:bf:b7:dd:60:bd:4d:6c:20:f6:81:2c:
                    c7:52:e1:d3:2b:d1:a5:59:42:2b:08:1a:66:eb:bf:
                    7a:8b:db:8b:a7:29:7a:21:08:bb:42:cf:27:3e:0a:
                    bc:e3:c2:94:06:f2:d4:57:94:ca:4d:bc:ee:91:ba:
                    b9:bc:50:36:11:ec:98:bb:2c:7c:4a:be:ce:72:18:
                    14:00:58:56:55:51:6e:52:07:7d:da:33:83:96:39:
                    eb:31:95:ff:cc:e7:33:8b:80:59:5e:74:46:37:42:
                    8b:9b:06:0a:f4:a7:0e:3c:c2:d0:5a:f4:bc:ab:ee:
                    52:de:1e:09:2c:9b:7f:48:ce:bb:22:41:98:75:06:
                    1a:83:79:a6:82:8e:4d:3a:58:2e:6c:00:1a:20:e2:
                    28:c6:d0:48:28:9a:2b:1d:44:a6:1a:27:50:d1:1f:
                    f2:68:c2:3d:7e:b1:42:f1:82:53:b1:65:3e:b8:f5:
                    59:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7F:CC:3F:14:74:D2:08:2A:42:30:6A:D8:0D:42:C5:9D:DC:70:3F
            X509v3 Authority Key Identifier:
                keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:30:02:93:98:27:62:23:92:78:39:b6:fb:4a:07:88:81:bf:
         ad:f9:1d:34:e4:26:84:8e:6a:9e:91:a8:f3:d8:9a:17:08:5e:
         dd:78:95:7a:ce:da:91:28:fd:33:42:1f:41:6b:93:ff:e2:70:
         db:03:85:c7:cd:41:b2:3a:4b:5b:cd:2d:ed:7d:3d:3b:e0:e5:
         a5:5c:33:44:87:22:07:d0:b3:86:0c:61:8a:3c:c5:1f:f9:ab:
         20:d4:bc:7f:bd:96:33:19:c6:a6:ed:28:08:65:11:b1:b4:8a:
         e9:ab:6a:01:a4:90:4e:48:af:cc:62:92:f0:ce:6f:4d:ab:26:
         91:10:1d:00:9f:a3:bd:06:3c:9f:1f:a3:4b:bb:07:b5:82:d4:
         22:b1:68:31:ab:4f:7e:15:3a:1f:62:23:56:89:0d:cf:aa:5a:
         23:2d:12:be:42:7b:48:7a:fe:28:bb:a7:42:3b:b9:74:f7:31:
         1f:05:d1:1d:f5:61:19:da:e7:cd:65:13:0a:c5:48:75:61:93:
         e6:4a:f5:5c:cb:5e:48:71:b5:6f:52:ef:1e:1f:c0:9b:f6:6f:
         d8:30:3f:09:7b:45:e9:7d:9b:17:e0:92:ab:80:7a:9c:f4:70:
         e1:e4:e6:66:32:c2:b5:3d:bd:01:fe:4f:ce:50:60:08:c7:2d:
         09:99:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:08:30 2026 by rpki-client