Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
File:                     aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft (raw, json)
Hash identifier:          63+QaQwGL9ovn03hdXshH7WWGB/SxT66thtGSSHQUnE=
Subject key identifier:   5E:38:D6:22:2A:5F:6B:A4:B7:31:17:DB:47:0F:25:CF:FD:A3:66:DB
Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E
Certificate issuer:       /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
Manifest number:          06CF
Signing time:             Fri 12 Jun 2026 22:49:15 +0000
Manifest this update:     Fri 12 Jun 2026 22:49:15 +0000
Manifest next update:     Fri 19 Jun 2026 22:49:15 +0000
Files and hashes:         1: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl (hash: YqWX37aPWNkJEdXTyQZhhXacrrvQwAN6H/DBFJ0/kwI=)
                          2: 8F3586B40DF511F18DE23E02043D8C67.roa (hash: ncVMvzPJ7BKlb60UcgyZrrfn0WZQ6WrxuL1LEKNyyZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
        Validity
            Not Before: Jun 12 22:49:15 2026 GMT
            Not After : Jun 19 22:49:15 2026 GMT
        Subject: CN=6a2c8ceb-880f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:ca:6f:b6:88:0e:d9:e9:c2:e0:77:d9:45:
                    93:f8:bc:3d:b4:81:2f:af:ca:cd:fa:29:47:c6:98:
                    7d:33:f2:0a:2b:74:0a:68:92:52:4f:1e:78:46:29:
                    ca:06:e5:5e:3e:95:62:b9:8a:f7:e5:54:81:1c:c6:
                    b7:6c:3d:0e:d0:4a:58:7e:a1:55:db:75:7d:a7:54:
                    fa:9c:a4:8d:15:97:1d:e0:2e:15:13:15:18:2e:7d:
                    fb:f8:ea:99:5c:87:5f:e7:b3:39:f0:70:da:f5:3d:
                    19:7e:e3:0b:63:00:e5:f8:b0:a3:1c:29:47:66:60:
                    8c:43:43:1c:19:34:25:5f:2b:c2:fc:a3:6a:73:51:
                    ea:37:4a:0b:c0:0f:e6:52:c4:56:8a:44:2e:9e:11:
                    4a:f5:49:ba:22:36:28:56:f5:1d:9a:4c:d2:c1:1f:
                    e4:7d:97:4f:e2:55:7f:a0:c3:20:10:db:a8:7c:84:
                    85:d9:21:5f:8c:48:d8:43:ba:56:6a:bc:6a:57:e2:
                    08:6d:a7:38:3d:52:03:0e:4d:86:29:36:c4:01:05:
                    11:97:f2:29:a9:7e:36:e2:da:d0:20:df:6e:8d:8a:
                    20:09:f5:6e:6b:95:89:35:a5:86:6b:04:8c:c0:5e:
                    21:7a:ab:72:33:da:6f:e2:47:7c:c4:a2:9f:92:be:
                    d5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:38:D6:22:2A:5F:6B:A4:B7:31:17:DB:47:0F:25:CF:FD:A3:66:DB
            X509v3 Authority Key Identifier:
                keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:59:7b:13:17:99:70:0d:09:a2:17:41:e2:62:f9:0b:ac:8d:
         e7:38:9e:55:d8:42:34:3f:51:09:5f:c2:e1:a5:6b:10:ab:92:
         28:45:33:4d:6a:ea:f0:eb:fa:e8:b0:d0:0f:25:12:c0:65:42:
         18:8a:7b:ed:d2:f2:6c:a8:83:f7:c2:b6:54:6f:f9:f0:a9:8b:
         87:78:c7:8a:cb:63:71:03:72:ca:4b:cc:2b:4f:73:f6:12:2a:
         5a:d5:a2:22:09:e2:18:f9:db:a9:4e:7e:07:09:74:bb:af:3b:
         16:4e:fe:79:1b:e2:f3:1b:66:9f:7b:49:85:f8:31:26:96:00:
         fc:a3:87:33:92:0b:63:6a:f5:08:b7:c2:3e:26:15:88:f3:83:
         45:fa:ee:48:4c:8e:a1:65:e7:c8:d9:b8:ef:dc:0c:5c:b3:a2:
         3e:f6:2d:95:69:0e:c2:51:44:46:b2:72:92:00:b5:94:4e:bd:
         fb:ca:e1:84:f4:8c:ca:cb:b4:6c:c1:af:ed:93:bd:e9:19:97:
         ea:08:87:8f:ee:1a:58:fa:03:ce:66:f3:05:9e:e0:46:67:c8:
         95:0e:71:b0:54:95:68:09:d2:a9:f2:96:88:23:97:81:36:35:
         59:e7:01:1a:b7:e1:f3:5e:de:fb:10:4f:38:09:6e:c6:39:65:
         b8:73:e2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:47 2026 by rpki-client