Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File:                     siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier:          B4d5b3ym0CB3wFqdHxsP3yBAEdIhcko7sUSQnbAILJM=
Subject key identifier:   65:7A:81:D7:F1:7A:D0:D9:B1:BF:43:FE:F6:0A:8C:08:D2:E9:3E:EA
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number:          01DF
Signing time:             Sat 13 Jun 2026 03:57:30 +0000
Manifest this update:     Sat 13 Jun 2026 03:57:29 +0000
Manifest next update:     Sat 20 Jun 2026 03:57:29 +0000
Files and hashes:         1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: 8MeZIoQ7/X2bGFLvrQzjOD1GKtZlS3q+EsIfhvJbvzk=)
                          2: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: vve+SNs5Y00q7s7j0iECqDMKhK39FhN+snt799G9ovQ=)
                          3: ABCE17E0E15511F0A05B89F1756F56BC.roa (hash: u8tryEt8wfaKIyYRGhYJY4HgZ/+NDx5NswoCB2TbM44=)
                          4: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: JW1ClKNrVsnlpg/5abZXtZdRfLQRkQCfIYnNrzyJDlk=)
                          5: BB17221E211611F08D31C34DC4F9AE02.roa (hash: zi4/aUqGR718bniuf1jQK9sOH3knTVcJf3T+VbBiSok=)
                          6: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 9WvOYEKrWLRFlgDH3zQFRXn/DZmOYwHZaJMDQfO7n/g=)
                          7: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: SBh7/ucfyQHiZDQqOYlLERzU0mOVNQDSYZbvPKFmV+k=)
                          8: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: w5rmWZZVBxC2/bAO599UhQgXvs8hWsiDzRokDXUEGU4=)
                          9: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: 5lDSpzmwVyIgUi4h17dQR5e2pFC4svpJ9hXm3aYNHDw=)
                          10: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: sVGpNa8k/xVKsIanvda8jGJL2nHzx0rMDFKMvF7hssA=)
                          11: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VvZ1QMS2eLQmDgXa34u3h0OjHEC9RVEvgUYgcW//Cxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Jun 13 03:57:29 2026 GMT
            Not After : Jun 20 03:57:29 2026 GMT
        Subject: CN=6a2cd52a-ff87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dc:08:5a:9e:83:b3:d7:52:5e:08:01:b7:57:
                    f8:d5:ce:a2:15:85:26:33:c4:23:66:8f:9b:b0:6c:
                    49:59:fd:64:63:52:99:ca:3a:99:5c:6e:9d:7c:57:
                    5a:74:58:7d:cf:56:f0:a3:19:50:3a:db:1d:8d:84:
                    60:02:65:6d:19:eb:39:ea:6b:cc:96:f3:73:1d:d1:
                    ed:6b:3d:68:bd:f6:39:7c:45:7f:b0:09:6e:21:ce:
                    af:62:ab:7b:3f:ec:80:9f:57:dd:37:a7:5b:0b:77:
                    60:c7:f6:3c:64:49:a1:00:0e:cd:c2:dd:b0:3c:46:
                    87:0c:1c:f7:f4:b1:ce:e0:54:7a:90:7c:a1:78:14:
                    29:53:cd:f2:53:fd:67:8a:15:da:e4:42:6a:a3:ba:
                    87:23:45:e3:2b:dc:8a:07:32:85:e4:74:d2:39:e0:
                    e5:d1:d8:1d:f3:22:96:fd:53:af:43:52:d1:88:6c:
                    e9:e8:6f:d7:3e:30:ed:7e:c4:3e:74:71:0b:0c:f9:
                    7a:94:13:17:57:21:ab:7e:de:d4:df:d5:49:67:f9:
                    30:c8:0f:dc:b9:4c:2b:58:fd:46:5d:1a:f4:a1:93:
                    a3:ca:42:9d:30:29:a3:ba:6f:94:42:c2:8b:f0:a4:
                    a0:bf:1e:75:99:cb:7f:ec:bf:34:82:fa:40:64:66:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7A:81:D7:F1:7A:D0:D9:B1:BF:43:FE:F6:0A:8C:08:D2:E9:3E:EA
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7a:58:f5:39:54:f6:b2:10:38:e4:77:f4:20:bd:dd:3c:ee:
         33:ae:19:18:9c:37:30:d1:bd:b7:00:f2:27:af:5b:38:ed:8f:
         90:d4:bc:e9:e9:70:bf:95:27:88:dd:e0:7f:5e:c9:c5:c4:ba:
         ce:95:23:bf:d8:cb:e6:2f:23:08:b0:8c:a7:0f:79:aa:05:34:
         59:ef:39:f1:b4:93:2d:58:37:ff:aa:76:1e:d0:60:eb:17:a1:
         6d:68:86:5d:aa:ab:7c:57:bc:81:94:9e:91:f8:54:6a:02:10:
         7b:77:11:91:f9:25:4e:7d:67:cf:e5:d1:7f:72:ba:4e:a3:a8:
         97:f7:ea:3c:e8:15:77:4e:90:97:cd:a6:70:a4:92:3f:e2:11:
         f6:16:f8:8e:55:cc:cf:7d:aa:dc:6f:42:b3:0d:e8:f0:64:8d:
         37:a4:8e:9b:62:27:67:37:24:67:35:b2:d2:b8:8f:5b:8a:9c:
         9a:ce:b4:99:ff:c0:9b:7f:b3:fb:a0:fe:05:fc:2c:18:b8:38:
         c7:20:17:fc:84:11:8f:4c:c4:e1:bf:33:49:78:fa:f6:95:17:
         63:80:86:16:0e:5f:f2:7c:6a:d9:cc:d9:2b:1e:bc:e1:ae:1e:
         5b:c0:69:c5:48:b9:7d:b2:75:2a:c5:e6:5b:f3:7e:73:fc:56:
         0d:38:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:40:36 2026 by rpki-client