Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
File:                     G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json)
Hash identifier:          rO0LI23ZCXho02Tl8WaXWVlQ1q4241brdQOMR9BYedQ=
Subject key identifier:   C3:2F:AC:F6:08:74:22:29:F1:C6:E7:93:36:5E:00:C2:56:58:EC:06
Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
Certificate issuer:       /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Certificate serial:       05CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
Manifest number:          05B9
Signing time:             Fri 12 Jun 2026 23:10:25 +0000
Manifest this update:     Fri 12 Jun 2026 23:10:25 +0000
Manifest next update:     Fri 19 Jun 2026 23:10:25 +0000
Files and hashes:         1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: GctZcpGay3qaUts5rjDrbxqGe23tRTeEogN3k3BWook=)
                          2: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: 49abEkg0KhXLphiSvkFxFB5/cBrDujbbgSy2255f/a8=)
                          3: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: 2+WcS7JB0+agxKcQ22MQ04J/yCONuIWJ6zoWcxPIlh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
                          rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
        Validity
            Not Before: Jun 12 23:10:25 2026 GMT
            Not After : Jun 19 23:10:25 2026 GMT
        Subject: CN=6a2c91e1-20d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:ce:49:57:cb:5f:70:4d:ac:e7:54:cb:c6:
                    0e:07:c3:ca:a0:cc:6c:0b:2b:f4:74:58:92:41:7a:
                    9c:53:ea:3d:07:a2:2d:ec:9a:27:69:76:c5:17:e1:
                    66:e0:4d:ab:34:64:d0:5a:c3:d9:9d:42:e9:11:58:
                    78:99:19:e7:db:d7:51:bc:a4:67:40:c7:66:60:54:
                    3a:46:2a:fa:94:bc:0c:34:1d:26:c2:9a:e7:7e:63:
                    a2:c0:c6:ee:40:9e:ff:c6:12:cc:6e:af:95:11:dc:
                    e3:34:e7:58:fd:b0:06:35:d5:53:be:11:2f:99:07:
                    8c:fd:0f:b0:ea:e6:81:f8:a1:54:be:d9:16:b1:9d:
                    08:ae:4c:66:7a:73:1d:5f:ee:b8:56:fc:a3:61:8f:
                    2a:98:c9:bf:fa:5b:00:62:2f:40:a3:25:1d:28:07:
                    dc:df:d1:ba:e8:af:ac:2e:62:f2:97:18:67:ad:4a:
                    89:3f:26:9b:b4:2b:46:04:80:1b:44:07:bc:b7:c5:
                    a2:54:d1:4c:5f:4b:9e:e9:e9:21:54:73:1f:0e:85:
                    53:ab:07:56:32:97:3e:c3:65:e6:e0:10:f2:09:0a:
                    91:89:e2:5b:07:77:b1:04:2f:cf:3c:60:28:4e:1b:
                    bf:2a:ce:94:c4:c6:40:39:e4:ff:62:2f:19:fe:bc:
                    37:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2F:AC:F6:08:74:22:29:F1:C6:E7:93:36:5E:00:C2:56:58:EC:06
            X509v3 Authority Key Identifier:
                keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:90:3e:a1:c9:14:1f:1b:21:e1:c5:66:a9:20:fc:a9:97:
         6c:e0:a0:d4:6b:af:b7:26:33:87:f4:4a:20:e0:0a:c0:09:55:
         40:db:7e:62:85:94:fd:7a:25:cc:95:54:48:73:27:1f:3f:5e:
         50:7e:66:d0:2c:79:27:5b:52:f1:64:a7:93:cc:5f:36:08:ff:
         35:51:d4:e9:c2:e5:7a:75:cf:8c:6b:45:f8:cf:09:05:0d:51:
         11:57:db:ad:24:5a:cf:b6:9a:d8:00:b9:37:4b:dd:3a:0b:f9:
         97:5a:8d:9a:3a:9c:7a:93:fa:f6:40:93:1a:eb:b9:b6:8c:d9:
         a3:5e:8f:44:4f:66:bd:dd:4e:0a:f0:9d:6c:60:3f:bf:b5:aa:
         bb:17:b7:ac:39:87:b9:2b:8a:a0:39:fd:58:41:09:dc:4b:6d:
         ed:ab:7e:54:a2:a5:bf:9c:69:1d:ac:8c:fb:f5:e8:33:7d:0e:
         99:bc:11:56:fe:9a:69:c8:09:28:54:2f:70:a2:c6:49:42:75:
         21:e7:16:92:ca:fb:a3:45:71:19:2d:d8:c7:56:97:cf:58:a4:
         b1:96:9d:64:b2:a5:65:be:dc:cc:83:ec:d3:33:b2:a6:60:30:
         e1:d2:f0:d5:99:ec:82:54:a7:9a:b5:c5:53:7b:60:84:64:f2:
         ca:ae:bc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:57 2026 by rpki-client