Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File:                     hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier:          0UIA16FWyLQiQmqr4MmT6lVP6AHl3ZcJz1H+yEdLT9w=
Subject key identifier:   8D:51:D1:7C:DB:A8:86:0D:3A:8D:B0:FF:80:34:21:48:90:9C:75:2C
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer:       /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number:          90
Signing time:             Sat 13 Jun 2026 07:33:56 +0000
Manifest this update:     Sat 13 Jun 2026 07:33:56 +0000
Manifest next update:     Sat 20 Jun 2026 07:33:56 +0000
Files and hashes:         1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: t5Ppw9Sbw3YcOSnm/Dky/F5PfchijmGvCnaijLZPagk=)
                          2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: pV6RrpL0HFiSkSQ3Egen1lL8OO4gLgRAAJv9sHZbodQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
        Validity
            Not Before: Jun 13 07:33:56 2026 GMT
            Not After : Jun 20 07:33:56 2026 GMT
        Subject: CN=6a2d07e4-da2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:b0:28:88:48:bf:69:55:a9:da:e1:e5:58:
                    b2:a7:07:e6:6b:57:40:fc:3b:47:4e:02:f3:9b:a1:
                    c1:47:ca:96:20:1e:3a:06:02:11:85:7c:2a:f3:7c:
                    bc:f7:4e:2a:53:9a:ea:a6:45:55:ee:66:be:01:bc:
                    69:90:dd:da:ca:4b:2e:cf:72:1b:c9:73:b1:a3:6b:
                    2b:28:68:31:34:dc:c5:0f:b9:d5:92:f4:29:a5:94:
                    e2:81:cb:36:26:ad:30:e9:fc:41:95:ad:f2:26:4d:
                    3b:bb:05:1c:4a:d9:d9:24:8f:fc:c4:22:f4:b5:38:
                    dd:7e:00:56:d4:76:54:85:22:5a:eb:c3:52:a6:5e:
                    64:8d:32:e5:70:4a:ef:e3:a9:b6:f0:be:1d:f3:dc:
                    d3:1c:74:62:a5:20:24:c8:5e:dd:10:7f:dd:c3:82:
                    38:9a:d4:db:79:89:2d:c0:ec:97:da:73:3b:7f:df:
                    69:e9:8c:0b:28:4f:51:70:cc:6d:f0:d8:52:2f:c8:
                    f6:57:4d:80:50:f8:b2:4b:e3:26:36:d6:5c:3b:5d:
                    17:b7:3e:d1:95:c4:d7:82:50:2e:5d:ef:eb:e6:62:
                    21:7c:cb:19:c0:32:3b:8b:3d:1f:87:87:70:d7:75:
                    0c:44:e0:2b:a4:04:d8:db:d6:d2:43:ed:1a:5d:1f:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:51:D1:7C:DB:A8:86:0D:3A:8D:B0:FF:80:34:21:48:90:9C:75:2C
            X509v3 Authority Key Identifier:
                keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e4:38:cf:1e:75:fd:8b:62:78:78:16:36:39:d3:18:6b:2b:
         ec:ba:20:bc:17:f4:de:66:2e:1b:08:67:f2:ed:12:39:1b:eb:
         59:48:6a:90:7f:03:6b:9f:1e:2e:62:5b:61:fc:c3:ee:a9:74:
         ff:5c:01:5a:05:0f:de:06:70:da:22:6d:3c:09:ec:a0:ed:0a:
         fb:a6:2f:5f:40:9b:09:4b:8f:3a:ab:70:77:a8:06:f6:b4:f2:
         65:1b:42:72:98:55:e9:4a:7f:18:b7:34:20:c4:ae:b7:03:2e:
         3b:23:80:12:df:34:53:e1:d8:09:53:b5:1c:be:fb:e6:93:d8:
         3a:61:bf:35:39:f9:d7:78:09:fc:f0:6c:ec:71:96:1b:fa:cb:
         d1:62:a8:1b:1d:bd:01:2c:e2:ab:a5:40:82:34:7f:e3:e4:e7:
         e1:fc:0d:91:5b:3d:01:a5:72:58:12:ee:1f:c6:8e:e5:d4:b4:
         43:ce:7b:25:c7:3e:08:9d:06:29:af:f4:dc:b1:e9:b7:02:b2:
         22:40:8f:9d:72:9f:5f:d6:38:ac:23:0b:20:7c:e7:a0:c0:55:
         83:00:7c:ef:25:c3:14:74:6e:34:70:c0:25:7b:fc:99:6f:2f:
         9f:d5:c0:c6:e7:47:52:ba:3f:ae:e9:29:0e:0a:41:14:6a:93:
         f3:37:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:11 2026 by rpki-client