Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
File:                     9kmjoLYxxWnKvzPjzkXIqllY3AU.mft (raw, json)
Hash identifier:          DnOSbmMNMbqGJ0BMyYTPGKJJ415aaXLgcnRnh7LfoqI=
Subject key identifier:   86:D8:2B:3D:5E:85:CE:CD:70:8C:A7:AA:30:0F:10:36:9B:7C:07:1B
Authority key identifier: F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05
Certificate issuer:       /CN=A9166D02/serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
Manifest number:          4D
Signing time:             Sat 13 Jun 2026 08:30:42 +0000
Manifest this update:     Sat 13 Jun 2026 08:30:42 +0000
Manifest next update:     Sat 20 Jun 2026 08:30:42 +0000
Files and hashes:         1: 9kmjoLYxxWnKvzPjzkXIqllY3AU.crl (hash: pQhRByTPIeFd4yFBw4Ot0OvAsj5tQMzkMAh+JaMwlJs=)
                          2: A5E69774485411F1907D205D9E833773.roa (hash: Hf8RVmiLD+Lgc8VE9E8an2tv+ZmF6P6heQtkZtWGmpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl
                          rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166D02, serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05
        Validity
            Not Before: Jun 13 08:30:42 2026 GMT
            Not After : Jun 20 08:30:42 2026 GMT
        Subject: CN=6a2d1532-e6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:10:4d:fb:3f:34:82:2d:76:73:56:24:3a:
                    b1:6e:f4:81:63:cb:ad:4d:c2:52:bb:2e:35:81:d7:
                    4b:42:f7:38:40:22:26:8c:dd:5f:46:d7:e9:34:74:
                    b6:85:ea:65:f2:b3:44:09:75:d5:d9:a3:fe:01:6b:
                    64:94:bf:8b:a0:ae:9c:cd:6d:7f:f8:96:56:e6:9c:
                    4f:bc:57:9a:1d:77:6d:1e:ce:77:1a:b2:cd:0b:e2:
                    48:73:4c:1b:b7:95:44:0d:a3:5d:65:8e:9c:d2:6c:
                    ae:14:a7:b9:d6:30:b9:19:3d:1d:14:15:67:c7:e2:
                    29:84:71:3c:7b:4d:da:0d:2b:c8:21:30:fc:7c:7a:
                    bd:49:4e:30:f3:c2:e6:e0:50:de:53:13:9d:56:1b:
                    80:32:37:72:df:e8:e4:9f:3b:c7:b1:5a:83:50:52:
                    14:6e:f3:64:d3:e3:4a:ef:dc:f0:cf:5a:ae:69:ad:
                    44:b0:15:fa:4a:f8:0d:95:9d:79:35:c2:33:fc:f5:
                    19:5d:4e:70:22:1b:b6:32:bf:ee:95:9c:6c:d0:a7:
                    ee:e3:40:93:c4:0a:61:e2:ba:dd:ea:6e:15:ae:31:
                    f5:05:dc:6f:21:45:8d:3e:ab:8e:22:a6:08:06:98:
                    cc:9a:c3:d6:2b:05:f1:13:21:23:7a:91:db:9e:44:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D8:2B:3D:5E:85:CE:CD:70:8C:A7:AA:30:0F:10:36:9B:7C:07:1B
            X509v3 Authority Key Identifier:
                keyid:F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:84:3d:61:9f:fd:33:77:b6:f3:2e:3f:67:17:70:28:96:86:
         77:02:91:7a:a5:a2:23:d6:04:16:81:3b:63:9c:eb:49:5c:ae:
         1e:80:aa:67:4e:2d:87:6c:9c:5d:3b:4b:1e:90:fc:0b:b3:5a:
         95:16:a3:2e:0e:b7:dc:9e:e1:52:aa:53:b1:2d:b5:17:84:75:
         ef:4c:d8:99:bd:f3:29:04:d8:d3:9d:65:88:1a:a4:8d:39:08:
         04:85:5d:a2:6e:06:4d:d8:43:f7:5c:ad:bd:5e:c4:d4:c9:c3:
         b6:34:f7:57:5b:de:c4:41:69:2b:bd:b0:04:9a:46:1c:a8:10:
         fc:5f:04:91:36:3c:0e:d9:22:21:3a:d8:d3:53:56:34:a3:a9:
         95:c6:82:8a:8e:c8:c6:e6:fd:7f:ed:e9:ec:23:20:71:cc:48:
         25:13:11:b3:1e:d5:5d:37:5a:ed:41:a0:c0:be:19:b1:84:1f:
         f4:63:27:e1:41:4c:83:f4:e0:78:13:28:1f:ac:7b:ed:51:4b:
         e9:f8:fd:c7:bf:ee:6a:31:23:e4:7e:f4:23:66:64:b6:f7:84:
         f2:cb:cf:e0:42:40:65:2f:dc:f5:cc:4d:60:e2:66:76:3d:d1:
         64:d9:53:5c:41:f5:91:90:77:2b:f9:3d:f0:b3:09:b1:04:66:
         dc:3f:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:54:35 2026 by rpki-client