Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File:                     -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier:          83o2cOfWJjI97xEDksk8wblvlRfVxsPuE1Nhh+cxTTA=
Subject key identifier:   31:7C:DF:5D:3A:0C:4C:DB:4F:68:CF:49:F8:67:C1:D8:38:92:A1:A0
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer:       /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial:       0BBE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number:          0BAD
Signing time:             Fri 12 Jun 2026 19:05:55 +0000
Manifest this update:     Fri 12 Jun 2026 19:05:54 +0000
Manifest next update:     Fri 19 Jun 2026 19:05:54 +0000
Files and hashes:         1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: Q+JjVSRfTIfjPE70lcYq0PP/fsX9Q5+Nqfij2yIjUmM=)
                          2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: eJeSjBWnfyztRwss0NRo6wVnGnHYGD5kAHWaTt/BWrE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
                          rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3006 (0xbbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
        Validity
            Not Before: Jun 12 19:05:54 2026 GMT
            Not After : Jun 19 19:05:54 2026 GMT
        Subject: CN=6a2c5893-744e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:9f:ce:68:50:59:8e:2e:79:01:64:9c:8e:
                    c5:88:77:28:58:f9:6b:14:63:4d:60:f2:b9:8d:07:
                    08:cb:5b:7d:74:cf:0d:f9:45:13:34:fe:57:5d:89:
                    9c:65:8d:1e:0b:1d:9e:61:e2:5c:56:6e:f8:f8:82:
                    3e:08:7f:dd:29:51:10:3c:47:53:49:f7:10:38:f5:
                    bf:a6:0a:d0:ac:71:3a:6d:74:57:9c:23:48:2f:c6:
                    83:ff:62:06:6b:9d:5a:33:47:33:36:77:41:4f:c8:
                    c3:3f:a9:09:0a:a7:7c:db:25:93:9d:20:eb:3d:2d:
                    a4:97:01:c8:a4:81:2c:fa:a2:8a:28:9c:da:8e:4d:
                    54:2d:b1:f5:16:6a:ad:42:6e:92:10:b9:f7:6d:ca:
                    5a:86:a8:80:12:ae:41:72:35:3d:77:c5:0a:fb:46:
                    8f:21:9b:3e:83:33:b0:e5:7a:f5:2f:5c:fc:b3:74:
                    59:c0:26:07:e6:d8:5c:22:a3:34:08:44:2e:31:44:
                    9e:72:7a:ba:b7:0c:b6:51:33:41:9f:ea:62:a7:90:
                    1b:4e:53:65:f7:05:40:dc:aa:8b:8d:0a:94:93:f4:
                    c7:f8:83:c9:61:da:89:67:31:3e:dd:66:a9:41:96:
                    22:18:90:8d:7a:5c:f5:74:58:c7:cc:41:60:80:db:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7C:DF:5D:3A:0C:4C:DB:4F:68:CF:49:F8:67:C1:D8:38:92:A1:A0
            X509v3 Authority Key Identifier:
                keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:20:fb:1c:5a:fe:ef:74:b5:06:b5:54:67:41:a4:a1:17:31:
         17:e8:83:f1:c4:63:b4:e7:20:07:76:4c:c7:15:b6:bb:76:51:
         93:18:48:6f:78:a8:08:d2:fc:d0:99:10:a1:ff:2b:0b:7c:da:
         a8:5f:51:06:76:51:5f:d2:2e:a4:fb:c6:e7:8e:5a:48:6f:00:
         da:d3:ae:69:0f:80:d2:9a:db:7a:ea:cd:73:ce:d7:de:3c:80:
         4c:7a:c0:3b:9c:d0:5e:1a:81:68:db:0d:e0:67:da:ba:6e:91:
         97:7b:23:95:83:8c:25:a9:dd:32:bb:11:1b:36:7b:73:f0:35:
         29:2d:fc:fc:62:97:d5:fb:92:e5:c8:fa:a3:2d:9c:f2:fd:df:
         45:48:87:ee:6f:5d:69:bf:99:12:53:ac:86:18:2f:50:d4:64:
         ef:3a:be:47:95:8a:a8:56:46:c1:d2:8f:07:f5:62:fd:36:e1:
         00:c2:2d:17:ac:71:73:59:5b:23:9b:0c:94:dd:2e:42:ab:a2:
         21:f6:1c:60:6d:a4:b3:23:a1:c0:39:e2:c0:ce:3c:05:f0:9a:
         fa:e3:07:3a:2b:fc:db:ae:45:35:55:13:b0:4d:4e:43:f0:35:
         e2:ec:01:7f:b8:7c:7c:4f:92:a6:ff:10:dc:28:d0:22:5d:dc:
         2b:85:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:52:22 2026 by rpki-client