Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
File:                     R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json)
Hash identifier:          HjQpjdDN1qxW/xn9+e8SD1fgau8tMDitH1/KbyeYlFs=
Subject key identifier:   C1:62:0C:3C:65:AD:9F:B4:3C:4D:1F:06:42:1A:3E:B2:90:18:B2:9B
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Certificate issuer:       /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial:       073C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
Manifest number:          071A
Signing time:             Fri 12 Jun 2026 22:06:09 +0000
Manifest this update:     Fri 12 Jun 2026 22:06:08 +0000
Manifest next update:     Fri 19 Jun 2026 22:06:08 +0000
Files and hashes:         1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: aOp4gsIz6TBvzYcENEVXcPF8Ve+4MaGhPn4CGV1PPsQ=)
                          2: 0A6D07FC913D11F092E92E65C4F9AE02.roa (hash: N+hh0IsbREkCIUI5w/ClySR4LrvvV4rJ4CFoF8qj+kg=)
                          3: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: 0FJPWWCgs74V2qR0+srXlHP3r9bzqp0VjgYjnq505c8=)
                          4: DC130EBC913A11F08A1B3D3DC4F9AE02.roa (hash: bNYRWc+xdCHr6Dqm6E4JXdO5OdveJW1Evylh8xk+joU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
                          rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
        Validity
            Not Before: Jun 12 22:06:08 2026 GMT
            Not After : Jun 19 22:06:08 2026 GMT
        Subject: CN=6a2c82d0-e3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:fa:25:9f:ef:48:8f:34:6d:23:08:a6:2a:
                    f4:28:f7:30:91:f5:19:10:33:3b:63:9e:3a:b1:9d:
                    32:e2:dd:95:17:31:62:17:bf:b9:2d:f9:26:2c:e8:
                    13:c8:0e:3b:09:c9:f4:b2:4e:95:b0:04:2b:7e:ba:
                    a4:30:b7:26:c7:58:72:bd:54:4b:c7:32:18:f3:3f:
                    de:39:23:e1:f0:29:43:4f:04:4f:4f:99:22:53:50:
                    96:2f:f3:e2:0a:ec:e7:c4:c2:da:06:cd:ab:f8:de:
                    ba:6d:c0:70:53:c4:9f:69:9f:f1:16:15:8f:3a:17:
                    cd:d2:ee:34:48:6e:96:86:99:1a:bf:80:c8:58:f0:
                    04:9e:10:b7:d7:2c:18:4b:cc:64:5f:a7:96:91:36:
                    2a:4d:0b:af:1a:01:83:f1:d9:c6:23:67:71:ff:2e:
                    52:fd:1f:11:7a:2f:b8:d0:8d:a9:57:70:c0:d0:c6:
                    8f:a8:53:ba:73:ed:5c:55:cf:d0:4d:1d:0b:fa:0f:
                    86:db:99:ff:e7:eb:19:af:a7:16:1d:2b:2c:11:d4:
                    d8:f4:ee:66:bc:ed:35:28:df:23:9e:3e:6a:4c:76:
                    e7:ad:f0:02:c1:42:bf:70:05:f0:bc:97:e4:84:51:
                    be:cf:23:9e:d7:d0:42:04:93:c7:51:68:00:ba:fd:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:62:0C:3C:65:AD:9F:B4:3C:4D:1F:06:42:1A:3E:B2:90:18:B2:9B
            X509v3 Authority Key Identifier:
                keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:56:1c:43:36:0a:a1:9b:e8:f6:fa:54:f1:79:84:95:6d:
         e4:35:96:16:22:ab:ef:e8:7d:05:cb:6b:0c:c2:9c:25:29:5f:
         2f:78:15:56:45:c1:61:6a:d2:7a:d4:9d:30:01:8f:d8:65:ed:
         53:31:0f:a9:67:08:f8:44:18:02:e7:01:7c:34:60:a4:48:82:
         2b:b0:42:5e:19:64:e3:d0:80:1d:8a:e0:89:8f:43:b6:01:78:
         3c:29:d5:11:7c:fa:b9:cd:c4:f0:8d:db:14:cb:4f:b9:b4:3d:
         58:f1:0f:34:56:60:66:bb:7a:95:52:3c:b6:b2:b1:35:c8:c5:
         d7:43:b4:0f:4b:24:7c:bc:b6:7e:28:db:89:c3:a0:13:ad:6b:
         3b:40:ff:34:c5:a3:7f:93:c6:90:dc:26:89:7d:5c:40:de:27:
         bd:e2:d8:87:2b:85:2d:c6:24:c8:9e:03:aa:27:58:e0:c2:7d:
         0d:32:82:49:40:5a:77:a4:64:7c:b1:68:2f:63:97:50:0e:1d:
         60:53:cf:8c:57:f6:bd:52:f9:7e:4c:fa:7c:af:87:19:d8:05:
         35:18:e7:b1:30:29:8d:bd:e3:21:5a:b2:13:12:9a:e4:20:35:
         85:fd:f7:86:a3:90:55:6e:38:12:16:8e:b0:16:8d:69:18:ee:
         9d:4c:12:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:21:32 2026 by rpki-client