Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
File:                     8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json)
Hash identifier:          e4ILfHff6O7xFGrpjw+E2y/Un40Hib6a0GXRndQfJvg=
Subject key identifier:   9D:0C:F5:9A:C6:29:6E:86:40:E4:10:81:B1:A8:EA:21:B2:44:74:AE
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Certificate issuer:       /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
Manifest number:          0145
Signing time:             Sat 13 Jun 2026 05:18:49 +0000
Manifest this update:     Sat 13 Jun 2026 05:18:48 +0000
Manifest next update:     Sat 20 Jun 2026 05:18:48 +0000
Files and hashes:         1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: Lv4waMe1JQQptJUKE/WyxJ7gs6ZkYCJOy08TV2xTKp4=)
                          2: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: oAjj91kJNdl6x4fcpwdxCt9rZpIKF2EG4dXbvx2fHlA=)
                          3: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: RdQ8Kg8V0X5jAt/5w0/SSXdPPMNEPgNn/sfLhen4wYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
                          rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
        Validity
            Not Before: Jun 13 05:18:48 2026 GMT
            Not After : Jun 20 05:18:48 2026 GMT
        Subject: CN=6a2ce839-a033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c4:08:75:ba:b9:64:e9:2b:12:7b:f3:65:d2:
                    e5:ba:aa:9e:f5:6a:fb:67:59:bf:67:e2:50:06:36:
                    2c:07:2e:25:7b:c1:7f:dc:7e:f4:12:3a:7a:db:08:
                    6a:9f:19:5e:54:d6:15:14:4c:31:a0:8c:94:4b:37:
                    6e:f7:ea:b6:45:e8:d9:e4:ee:7b:16:fb:05:3f:55:
                    fc:33:81:7d:08:81:62:ac:34:d9:9c:95:07:54:33:
                    f2:92:99:e3:93:21:ed:0a:65:df:a1:4c:db:2c:a9:
                    34:8a:ed:93:d4:ea:2b:e8:3b:42:e4:dd:76:6e:48:
                    26:08:d6:27:d9:53:8d:bf:ab:2f:e3:4c:55:98:df:
                    15:63:14:55:60:5d:3b:fe:54:08:b3:c9:44:ef:99:
                    d2:a4:6f:0b:8f:2f:4a:42:dc:ed:63:a3:0a:f9:8a:
                    e7:41:ad:e8:ca:06:09:c5:0f:1b:37:a3:7e:71:06:
                    96:f3:77:03:c7:42:8f:31:e1:58:76:09:49:f5:a7:
                    6a:3b:99:83:b9:f2:df:bb:dc:6e:d8:07:73:99:50:
                    04:33:b3:e8:1b:00:81:9a:9f:1b:7b:97:d1:73:30:
                    2e:0c:c8:61:88:80:6b:6a:37:eb:b1:a9:79:56:bf:
                    f7:c2:53:7e:a9:3f:0a:4e:c8:5c:1b:46:8c:d4:fb:
                    bf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0C:F5:9A:C6:29:6E:86:40:E4:10:81:B1:A8:EA:21:B2:44:74:AE
            X509v3 Authority Key Identifier:
                keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:14:ba:d2:63:92:9a:b0:a8:60:79:44:0b:8b:d7:29:dc:5a:
         b5:29:73:34:5c:d3:87:4e:8b:ef:35:79:6e:42:f9:f1:72:41:
         55:43:0c:68:21:68:5f:6b:11:02:e5:a4:9a:fb:a2:95:33:f3:
         f0:d0:9b:af:54:47:55:52:0b:df:8e:60:c0:0e:e5:18:3d:f6:
         15:1d:f5:28:d5:c1:61:9e:af:9c:1b:71:8f:9b:fa:f5:21:e2:
         f6:9a:f4:61:8f:87:5e:96:b9:37:ca:67:0d:8a:6b:20:6a:ef:
         46:8d:4a:5b:46:0b:5d:7d:62:04:df:f9:eb:c7:fe:64:4e:b8:
         34:5e:07:e1:3b:13:c1:54:ff:24:55:e6:16:8b:b7:95:cc:99:
         e7:55:ec:c7:2c:dc:b3:09:ec:2b:c2:7e:ac:2b:8d:fd:61:a8:
         41:f7:fd:9f:d3:08:bc:4c:71:f9:9d:41:04:cd:de:4d:44:ac:
         ca:58:e0:55:88:0b:1d:c1:92:1a:8e:dc:a4:ff:de:5f:c7:b0:
         25:91:fa:ad:da:e1:2a:2d:94:75:5c:20:be:85:fc:4a:c2:ee:
         25:67:da:0b:6a:43:9a:3f:9b:ad:b8:b8:46:e0:ce:23:27:f9:
         0b:26:d3:36:b4:7f:0c:4d:aa:80:c2:ab:cd:2f:e5:0b:a6:4b:
         cd:f2:df:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:32:17 2026 by rpki-client