Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
File:                     2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json)
Hash identifier:          IbOd2EMCqssHQ90hB948k+mitdX7ft3ehiroTtZK6Ts=
Subject key identifier:   A0:9E:B6:D4:68:E7:A5:04:6E:83:FB:7B:A3:BA:FE:AC:74:9B:81:AA
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Certificate issuer:       /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial:       0482
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
Manifest number:          047A
Signing time:             Sat 13 Jun 2026 00:07:11 +0000
Manifest this update:     Sat 13 Jun 2026 00:07:10 +0000
Manifest next update:     Sat 20 Jun 2026 00:07:10 +0000
Files and hashes:         1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: HghlnHkKUUjjl8RoXO4roEYNeYjSy/yp20ojEQ602kM=)
                          2: 97D35382924311EC927C972FC4F9AE02.roa (hash: aAWOfNb/dnXkGDMyjT0RYtdEn0OfU/UmCUamSuOloZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
                          rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
        Validity
            Not Before: Jun 13 00:07:10 2026 GMT
            Not After : Jun 20 00:07:10 2026 GMT
        Subject: CN=6a2c9f2f-6d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:d2:2c:f8:90:e0:68:1a:b2:a7:80:f4:01:
                    5a:99:a4:6f:14:34:26:fa:6e:b0:02:da:81:90:ec:
                    ae:13:c9:cc:d9:a6:cc:cc:8b:d9:9d:58:db:77:d2:
                    92:b4:00:50:bc:c6:7e:bb:50:d1:e7:c6:cd:94:74:
                    3e:24:57:53:9f:3b:d9:61:e1:6f:8a:62:0e:be:0f:
                    ec:cd:f4:e8:0b:13:cf:20:c1:cf:43:39:b8:fe:dc:
                    ee:85:05:19:03:0c:a6:9e:4b:f5:80:54:36:cf:84:
                    f5:b7:69:f2:8c:e0:8f:02:ba:77:ae:9e:1a:50:1d:
                    28:66:05:5e:bc:4e:e5:dc:00:f4:7f:98:01:31:d2:
                    37:89:69:c3:7c:9e:b7:5c:4e:0b:5d:6c:6b:9a:f6:
                    db:a1:68:c3:3f:43:1b:a3:a0:aa:a7:aa:21:ab:f7:
                    6b:6e:45:76:e6:5e:17:0e:dc:73:3f:42:1b:d3:6e:
                    f1:55:1f:07:24:b1:6f:45:fa:5c:96:83:1c:c9:51:
                    dd:38:79:be:76:10:f7:dd:f8:34:bc:16:7e:d4:b8:
                    4b:c8:8a:98:3a:71:96:32:d9:16:e0:69:83:88:17:
                    04:5e:92:7b:88:70:3b:12:47:e3:fa:76:42:b0:34:
                    ab:3f:27:00:49:66:30:a7:59:47:72:cc:9d:38:08:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9E:B6:D4:68:E7:A5:04:6E:83:FB:7B:A3:BA:FE:AC:74:9B:81:AA
            X509v3 Authority Key Identifier:
                keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:66:17:55:bd:f4:02:6d:63:a5:93:c9:66:42:2c:4d:43:a4:
         81:9f:09:e3:cc:fb:7b:a4:a6:e2:34:7b:c7:e3:ee:a3:7e:58:
         87:0a:2b:e4:ab:fd:7d:8f:01:2e:88:83:9f:c8:ad:26:13:bf:
         6b:fe:2c:8e:2b:ef:23:c9:60:d9:c9:82:f4:cd:d2:78:ca:c8:
         00:46:43:02:d6:27:99:33:2c:50:de:c8:a7:78:93:39:a9:34:
         8f:82:e8:fc:4b:ca:bc:a3:c4:08:e9:4d:41:06:c1:8e:3e:25:
         2b:c7:05:a3:2c:d8:a3:0d:10:54:24:09:c6:e0:c4:16:1b:8a:
         4d:c1:61:8b:06:03:37:f5:dd:42:1e:bc:24:6a:79:d6:1d:9b:
         71:35:ae:dd:3a:2d:19:aa:63:95:0a:c1:a1:69:64:15:c0:b7:
         86:12:56:df:81:c2:4c:b7:cb:21:72:b5:6f:ef:d9:6d:ab:35:
         26:0f:c1:50:d0:6d:dc:e1:b1:f9:f0:57:5a:99:a3:d1:82:f9:
         da:03:75:02:46:c3:65:4a:ce:41:de:26:05:6e:0b:8f:da:39:
         26:1d:64:f1:e5:ae:b1:7c:9d:37:70:96:a0:2f:ac:51:31:11:
         25:76:0b:af:89:90:cd:3e:e6:30:71:ec:2f:eb:37:19:68:43:
         f7:b6:3a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:33 2026 by rpki-client