Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
File:                     -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json)
Hash identifier:          J9W3orpFWg2zINj+24BqVF+Fpt4xOHWwxHboz0P6o9E=
Subject key identifier:   5D:14:89:28:F2:77:5E:E2:60:6A:1C:74:C3:01:D4:95:42:19:D5:5B
Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Certificate issuer:       /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Certificate serial:       0FE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
Manifest number:          0FD4
Signing time:             Fri 12 Jun 2026 17:27:51 +0000
Manifest this update:     Fri 12 Jun 2026 17:27:50 +0000
Manifest next update:     Fri 19 Jun 2026 17:27:50 +0000
Files and hashes:         1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: rCU9f0aW1Kfd5WecFQ6ULiw+SAICDRyrBXEx6zPUtao=)
                          2: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: /IS4YM9w5ydj5jQwxn3DGGKdeny8JyV0qrmFMYEg2lc=)
                          3: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: MRRSvyAs4nXdOy4NirT/FV+CCoUxnvEKIcU+qHvpGa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
                          rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4067 (0xfe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
        Validity
            Not Before: Jun 12 17:27:50 2026 GMT
            Not After : Jun 19 17:27:50 2026 GMT
        Subject: CN=6a2c4196-b974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:fd:29:5f:61:cf:73:ac:54:bb:d1:6b:36:
                    73:ce:9d:91:a0:26:2f:38:57:31:eb:20:9e:de:e6:
                    fa:b6:3f:42:a5:e2:7e:0c:63:03:bb:1a:80:87:df:
                    2f:6b:84:24:53:04:23:34:b0:39:f4:34:d2:f4:be:
                    a6:b3:26:a4:e1:83:da:d1:67:14:df:f1:87:7d:bf:
                    52:dc:04:3d:a5:86:29:da:9b:77:82:8b:24:35:48:
                    d2:82:1c:5a:33:94:3e:04:05:cb:dd:3f:c1:c8:5e:
                    5f:71:45:74:8e:5a:9e:b4:97:be:94:57:0c:31:18:
                    e1:f3:26:e5:4d:03:f4:72:36:98:dd:a4:8b:26:14:
                    61:0e:45:ce:14:83:e9:b4:03:fd:45:97:80:da:43:
                    83:43:29:48:06:d0:8e:94:71:34:16:82:4f:19:d9:
                    5f:e4:66:12:95:0d:8b:81:d7:84:98:df:53:dc:65:
                    d5:ed:81:e1:ca:3e:31:8b:0d:52:3b:ba:1b:ef:ba:
                    6a:00:16:17:59:af:41:68:40:ba:b7:48:a3:f8:7f:
                    ee:67:00:15:cc:75:87:72:1f:c7:0a:30:d1:8c:ab:
                    ae:36:51:a6:a5:55:88:aa:69:59:3e:2d:93:b2:7a:
                    d4:10:96:55:d2:25:6b:c7:18:bc:f8:e6:a6:94:f7:
                    b9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:14:89:28:F2:77:5E:E2:60:6A:1C:74:C3:01:D4:95:42:19:D5:5B
            X509v3 Authority Key Identifier:
                keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:83:ee:44:10:68:a0:4f:04:5f:4c:e6:07:01:eb:1b:9b:d6:
         1c:42:36:de:db:c9:9e:60:49:2c:d5:59:5f:e7:27:64:16:72:
         ec:37:55:51:39:56:7c:ad:0d:6e:b4:d4:a5:66:34:01:69:ce:
         2b:d6:da:9c:5f:53:b7:08:fb:d9:b7:10:e9:dd:83:d4:4c:83:
         d1:92:74:fc:31:c6:25:2c:fe:0f:af:34:02:e8:a9:aa:9d:d3:
         30:ef:30:6b:60:09:20:c1:d8:cc:15:64:81:27:d0:e6:5f:95:
         c2:49:f5:d5:ff:ed:fa:36:65:b8:58:1f:07:e9:6f:ce:f8:30:
         fb:d0:a3:0b:37:d5:bc:10:66:02:82:2b:50:2a:75:7e:7c:3b:
         b7:40:09:4a:95:4c:39:8b:7b:d9:ab:c5:38:69:b7:f2:9a:86:
         b2:a7:bf:e7:bb:c4:bc:47:b4:68:d9:c5:2a:8f:d8:0f:28:8f:
         fe:de:a6:e7:30:20:af:74:c5:0b:b6:bf:a9:bd:74:6c:5f:1b:
         37:95:b5:22:63:6f:f6:85:47:34:be:a0:fc:c4:ec:86:48:98:
         85:9e:42:5d:24:10:06:f7:6c:63:80:70:ae:d4:f8:c3:e6:61:
         48:5d:ab:01:d4:42:cc:bd:a1:36:cc:fa:7b:eb:cb:d6:7b:49:
         0f:93:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:44 2026 by rpki-client