Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
File:                     aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json)
Hash identifier:          UakRijmREvuJRsyyHWPahFcykp33TaYuqf4OJzNwENI=
Subject key identifier:   2A:28:EA:78:EE:33:B9:79:9E:3C:0C:F8:34:6D:B0:C2:DC:1D:53:68
Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
Certificate issuer:       /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
Certificate serial:       07FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
Manifest number:          07F6
Signing time:             Fri 12 Jun 2026 21:18:30 +0000
Manifest this update:     Fri 12 Jun 2026 21:18:30 +0000
Manifest next update:     Fri 19 Jun 2026 21:18:30 +0000
Files and hashes:         1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: Gv2Q6zN3jgDKHgHcY+WvewhRgsD6XamK3EtoItKJfHQ=)
                          2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: +dqj5dUwvw+xC7YK9g1ktDdByBUDI++m9TD2lt9C0Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl
                          rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047 (0x7ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
        Validity
            Not Before: Jun 12 21:18:30 2026 GMT
            Not After : Jun 19 21:18:30 2026 GMT
        Subject: CN=6a2c77a6-65c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:7c:ea:2e:5f:35:f3:08:63:55:87:e8:73:
                    bf:cc:ad:f1:b0:37:4f:57:f1:d9:93:18:0b:21:7a:
                    27:43:06:9e:5f:cd:2f:47:52:5e:66:b7:2e:4a:2b:
                    25:9e:99:2e:b9:89:51:7a:a6:78:35:39:74:d0:a7:
                    43:13:b3:e9:c0:93:e2:42:7e:66:4e:15:09:d7:e9:
                    c0:a0:fe:df:eb:bf:3e:6a:4a:79:e3:a4:35:14:76:
                    92:72:41:1e:49:69:db:6b:88:80:3b:8d:9c:c6:20:
                    3b:26:c6:9b:6f:55:39:f3:12:c2:4f:a0:d3:d4:b8:
                    65:17:41:8b:7e:88:16:c4:27:0d:90:b3:2e:33:a4:
                    ab:16:ab:d2:34:eb:9c:69:5d:f3:40:9d:61:b6:8c:
                    0e:77:ac:f1:1b:ce:b9:e6:f6:00:73:f9:0e:5c:48:
                    0c:fa:ab:44:83:ab:b5:46:33:53:11:a0:5c:14:d2:
                    bc:2c:82:77:6c:50:36:e9:66:02:b8:13:c0:28:e2:
                    8f:25:8a:1b:03:cf:50:05:bc:ae:7f:4d:ff:f4:dc:
                    9d:79:f4:05:6f:2d:b0:e4:70:f9:26:19:44:8b:ae:
                    a7:ea:21:86:de:f5:6f:95:e8:f5:ec:ea:47:81:34:
                    d6:43:b9:eb:6e:b8:20:3b:9a:de:01:c8:e5:ef:08:
                    9d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:28:EA:78:EE:33:B9:79:9E:3C:0C:F8:34:6D:B0:C2:DC:1D:53:68
            X509v3 Authority Key Identifier:
                keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:23:b5:e9:cf:3a:27:9a:a5:03:78:bf:d4:6b:2b:be:fb:63:
         9a:f2:14:a6:cb:b2:9a:ca:d9:62:d0:8e:b6:81:34:83:d2:2e:
         ec:8c:7d:da:f7:a6:13:09:5b:bc:14:57:e1:5c:58:d4:f8:5e:
         8a:7a:f0:53:df:70:0c:01:66:55:83:c5:e2:59:59:ae:1f:19:
         7c:94:32:45:86:d0:b2:f0:bd:9f:ac:79:6a:79:cb:ec:89:66:
         15:a1:ab:1b:e2:49:58:f7:a4:58:e2:b2:24:d8:46:18:a6:a5:
         e6:7d:9f:15:63:09:58:c5:80:b3:93:8e:43:90:d1:d0:41:95:
         be:4c:d6:cc:94:14:17:0a:7b:21:ce:b4:b4:ac:e9:6a:2a:89:
         2f:dd:2b:5c:fd:75:e7:fd:cd:1f:d7:8b:7c:65:41:49:1b:4d:
         c4:c0:85:58:c4:98:3c:d4:c7:b2:f4:2e:73:59:ef:97:f7:e0:
         43:5e:8d:15:c2:5c:37:0a:cb:16:28:95:67:34:61:ab:85:f6:
         27:21:13:7d:eb:82:ef:d6:09:02:b4:78:a4:f8:d5:78:c1:33:
         59:38:07:dc:f4:18:d4:90:89:27:32:d2:8d:e4:46:21:5e:4f:
         2e:71:20:43:6a:49:09:26:7d:cb:56:26:e8:4f:f9:95:38:12:
         b6:f2:bb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:47:24 2026 by rpki-client