Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File:                     tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier:          GjwDNE1c46xVFWrP6leRtPpm2qyq5rj5xyYWpF6Ocbg=
Subject key identifier:   33:16:75:ED:ED:7B:24:1E:1D:4D:56:57:5B:0D:CE:77:7C:24:89:D7
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer:       /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial:       0BDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number:          0BD2
Signing time:             Fri 12 Jun 2026 18:59:38 +0000
Manifest this update:     Fri 12 Jun 2026 18:59:37 +0000
Manifest next update:     Fri 19 Jun 2026 18:59:37 +0000
Files and hashes:         1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: tu8QH6lBJQv1BFdDKi+7YTnZM3QHkP2GJswHwQ59wBE=)
                          2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: IuciT/jDYsEHuZMLoxbp4gzhohFWomxgcVWfQKh8vS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
                          rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3036 (0xbdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
        Validity
            Not Before: Jun 12 18:59:37 2026 GMT
            Not After : Jun 19 18:59:37 2026 GMT
        Subject: CN=6a2c571a-65f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1a:9f:8a:c0:25:55:e1:44:ae:96:74:5a:d8:
                    d9:ca:3c:3a:cf:64:f1:67:85:df:f9:13:0d:8e:bd:
                    a2:3b:13:89:41:e8:61:0c:9a:b8:32:c6:32:11:2b:
                    74:f1:c6:d1:ab:eb:9e:d9:3a:e2:6f:ff:2b:7c:b7:
                    b2:8c:89:1d:70:e6:d1:99:aa:51:f6:93:47:f5:70:
                    17:f8:2c:97:d8:fa:58:dc:56:6d:e5:05:3f:6e:a2:
                    3d:90:5c:c5:6b:c1:ce:31:66:47:c3:42:ef:d7:84:
                    9d:8f:56:ad:fb:5d:2c:ea:c2:53:bb:8e:31:bc:72:
                    4c:96:bd:36:d3:13:93:d4:2d:35:bd:91:77:27:7e:
                    67:b1:8f:39:29:f0:5d:ec:b0:fa:15:60:76:50:57:
                    2a:69:b0:25:bd:12:31:d7:e6:ff:93:ea:74:58:50:
                    b6:79:25:c9:a4:f2:1d:78:1a:da:b3:a3:99:ee:8a:
                    8d:c4:58:10:97:21:31:93:b0:1c:11:2b:4b:ea:74:
                    a7:c8:27:6d:8e:c5:e6:c5:73:b6:3f:78:80:28:e7:
                    ac:75:14:83:f5:87:95:f9:ca:2f:6d:28:12:26:75:
                    9b:d6:1a:b3:42:ea:e2:e7:a5:87:3b:94:68:48:36:
                    f6:6f:d0:77:36:fd:8d:9c:2d:15:a2:48:6f:59:66:
                    90:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:16:75:ED:ED:7B:24:1E:1D:4D:56:57:5B:0D:CE:77:7C:24:89:D7
            X509v3 Authority Key Identifier:
                keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:fb:6c:17:d3:05:31:03:05:07:2c:92:1a:51:99:99:3d:
         23:44:36:32:57:2b:4a:bb:42:d2:47:d3:bd:e5:13:3b:cf:01:
         9a:39:e6:fe:47:11:38:56:e5:19:8a:ea:b6:06:23:f2:12:c0:
         ec:e4:db:0a:21:79:90:9f:20:1c:47:c4:8a:f1:c1:cd:76:97:
         75:e5:5c:d1:73:46:d6:6f:8b:a8:bb:33:97:89:42:35:c0:67:
         8d:dd:86:8d:e3:e6:03:33:19:8d:e6:d7:01:83:ec:6e:21:b4:
         11:6d:8a:8d:9c:70:ae:4e:73:20:3c:45:fb:d9:8b:db:3b:d1:
         81:bb:31:62:ce:7b:d3:75:93:de:3b:f7:95:94:dd:09:fc:b2:
         f0:72:b3:3f:58:4c:fc:2e:c4:88:d9:a7:d8:ac:1c:27:da:2c:
         84:6c:59:fe:2f:81:1f:97:d3:45:d3:e6:e6:44:00:02:b4:50:
         13:e5:b8:74:8e:8d:1d:5c:0c:c7:3a:8c:c8:47:8b:e9:f3:af:
         58:44:ef:b0:32:89:4f:35:78:3a:7c:82:fb:8a:58:48:17:3a:
         cd:4b:68:bd:96:b5:33:07:10:70:1f:55:bf:2f:d8:c3:fa:80:
         5a:8b:f2:0d:b5:1d:8f:7f:bd:bb:b0:16:42:dd:cc:41:e1:3c:
         c3:ac:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:59 2026 by rpki-client