Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
File:                     sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json)
Hash identifier:          pPpqIlY+8xRDa39baCmy0Z5GcQrwxqXbLiFYvYElLcw=
Subject key identifier:   FB:B8:9B:D8:9E:3D:37:2D:25:7D:56:FE:92:B5:95:DD:EF:29:5B:11
Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
Certificate issuer:       /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
Manifest number:          EA
Signing time:             Sat 13 Jun 2026 06:34:06 +0000
Manifest this update:     Sat 13 Jun 2026 06:34:05 +0000
Manifest next update:     Sat 20 Jun 2026 06:34:05 +0000
Files and hashes:         1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: dub4b5/7wsHygspoUb3qk+XnY8BJO4mpFpqdZcvXEEE=)
                          2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: 6P2hBxUHzqjP2+oG6i740uJYxBeonxP8fzF0Md+3yP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
                          rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
        Validity
            Not Before: Jun 13 06:34:05 2026 GMT
            Not After : Jun 20 06:34:05 2026 GMT
        Subject: CN=6a2cf9dd-3736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:21:83:9b:a6:8e:69:7f:4f:3b:f3:c3:6c:1a:
                    11:ce:53:dc:fd:8a:54:40:cf:ad:ce:1e:74:f5:8e:
                    db:b1:93:84:2c:95:bf:c5:26:d2:11:91:15:7e:1b:
                    82:a4:7d:69:97:5d:a1:5d:cf:8b:cf:98:e4:71:cf:
                    8d:0f:f6:7c:5e:61:9d:69:e4:98:7f:cf:30:47:7d:
                    0d:8d:c8:67:8a:69:28:50:bc:d9:1f:40:64:1f:77:
                    e9:c1:cf:2a:9e:6e:f9:1e:16:2d:00:3c:31:7e:88:
                    90:f6:b2:25:f5:ce:a6:43:04:9e:22:78:d8:ed:0c:
                    4e:bc:d9:63:17:cf:f4:18:c1:72:b4:59:6a:f8:32:
                    9b:17:48:4c:0a:b3:e7:fb:02:8d:64:b5:06:7f:23:
                    03:c2:c1:d9:36:6e:71:58:86:e4:61:4b:1e:27:1a:
                    7e:ef:da:4f:90:32:46:8c:69:76:f0:a0:07:66:b7:
                    46:4c:1a:ff:36:5c:60:fd:66:4e:14:bc:77:5a:4a:
                    ed:8b:53:11:78:37:dd:cd:db:41:a1:bd:69:e7:f2:
                    bb:09:e1:46:97:95:11:96:1a:83:30:1d:84:a6:a0:
                    10:0c:3e:34:9e:ee:e1:ad:89:b8:5b:18:1e:67:26:
                    02:37:d7:77:46:33:58:29:3e:ac:76:c1:ad:0f:39:
                    d0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B8:9B:D8:9E:3D:37:2D:25:7D:56:FE:92:B5:95:DD:EF:29:5B:11
            X509v3 Authority Key Identifier:
                keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f4:26:e9:87:0d:3f:38:78:4b:08:65:5c:33:be:c7:1a:56:
         3f:b8:30:c8:86:3c:b6:cb:be:68:c1:04:ce:95:fb:d2:10:6e:
         72:6d:eb:e6:49:b5:8d:4d:b9:27:a2:ce:37:0e:57:77:83:2e:
         19:6c:56:09:b1:dc:62:30:9a:81:da:5c:83:cd:40:a2:11:e1:
         74:87:40:f1:51:f5:69:06:5c:06:83:8d:ad:80:ae:bd:88:0e:
         97:74:65:8d:70:64:79:07:49:11:24:cc:7b:6d:f8:99:bb:c6:
         a5:7a:d9:1d:25:19:21:f7:05:f9:5b:df:00:73:2c:df:06:b4:
         ca:f8:82:97:68:da:61:e8:78:09:77:f9:88:f0:ab:89:68:f8:
         23:b7:9c:53:87:f8:92:cd:49:e1:8a:b3:f7:5f:14:d1:9c:de:
         e8:fe:0b:27:c2:ad:2f:b3:b0:3c:99:a2:83:c0:d3:94:00:ac:
         58:6b:fc:54:a9:dc:75:15:d6:e4:9d:8a:49:6f:de:d1:e8:6b:
         e9:78:1b:cf:c7:fe:0b:e3:cd:e7:79:de:da:7d:aa:72:43:ac:
         4a:4b:24:cd:54:d0:88:4a:37:b1:6c:18:c1:36:88:56:07:52:
         c4:26:22:c1:7a:2d:99:87:cf:d7:74:4f:23:ab:fa:a8:17:9e:
         35:fe:51:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:50:27 2026 by rpki-client