Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
File:                     4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json)
Hash identifier:          usrgVoSZ+wxFspxyvdEZbEaM3qDYDjFvpV0eEB2cTOI=
Subject key identifier:   A3:E7:F3:AB:91:A1:E6:47:22:13:20:63:4C:0C:D6:D0:DA:EC:EF:9F
Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
Certificate issuer:       /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Certificate serial:       0720
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
Manifest number:          071A
Signing time:             Fri 12 Jun 2026 14:47:25 +0000
Manifest this update:     Fri 12 Jun 2026 14:47:24 +0000
Manifest next update:     Fri 19 Jun 2026 14:47:24 +0000
Files and hashes:         1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: 0U19ONMhUTLGcogJIuDWshid/4xT8P7iB05EtTkvqU0=)
                          2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: nifz0lZY0B16BBA+MbGH96xeil4xf4rsxF/RU1Jcvug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl
                          rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824 (0x720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
        Validity
            Not Before: Jun 12 14:47:24 2026 GMT
            Not After : Jun 19 14:47:24 2026 GMT
        Subject: CN=6a2c1bfc-43b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:33:05:64:8f:39:2e:5d:fa:c4:af:11:7f:
                    4e:36:fc:22:bc:b6:7e:43:67:f3:1e:6a:dd:aa:e9:
                    ff:fe:18:e1:09:81:7a:b5:d0:77:46:ae:72:46:bf:
                    60:31:1a:a9:c6:6a:71:83:7c:13:3a:b7:66:a7:a7:
                    a7:63:84:a9:a2:ca:42:54:fe:8c:a3:d8:79:8e:70:
                    1e:2a:ac:c1:5c:6f:f2:97:aa:64:32:03:51:ef:84:
                    27:64:99:71:f4:1f:3f:22:0d:72:5f:b6:91:c3:d9:
                    11:77:0c:09:01:59:bf:74:14:7a:9f:99:da:88:f4:
                    ca:e5:90:d0:79:77:5b:8c:41:23:b9:20:d0:bd:f5:
                    d4:45:31:fa:4e:0d:f0:2a:e9:94:1a:2b:68:02:91:
                    d1:53:b2:6d:25:43:d7:2b:b8:a7:77:c9:be:6a:14:
                    62:bc:7b:5a:a4:19:0f:55:39:4a:d2:02:8c:ab:2f:
                    b9:8c:6e:fe:52:fc:ea:ba:e8:60:3f:6a:67:b1:90:
                    58:87:18:92:f1:94:30:be:54:47:14:ef:1e:73:41:
                    66:50:ea:a0:1b:7b:91:6e:cc:b5:ff:87:e2:fc:25:
                    fa:55:d1:1b:28:6f:ea:8f:aa:d8:52:46:73:cf:1f:
                    c0:37:06:4c:0d:62:1d:39:10:63:d1:3b:70:a0:ec:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E7:F3:AB:91:A1:E6:47:22:13:20:63:4C:0C:D6:D0:DA:EC:EF:9F
            X509v3 Authority Key Identifier:
                keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:29:de:8c:fd:b9:80:37:f4:23:67:91:a8:43:52:c7:96:93:
         fd:9a:6e:88:4f:14:16:26:da:14:a1:03:d4:ce:bc:bd:12:c2:
         e1:76:c2:53:47:a2:5b:4b:1b:f3:8a:3d:88:a8:1c:bc:f8:0b:
         d7:25:49:d9:ed:91:b6:b0:41:2f:4d:28:5b:b7:89:9c:af:e6:
         b0:05:23:48:75:6d:aa:67:fd:76:e9:b4:18:9f:15:f1:d7:4b:
         69:c8:cf:74:5c:83:f4:aa:12:b3:ba:9a:31:eb:37:72:12:92:
         fe:a7:ff:5f:bc:60:84:c1:2a:09:11:2c:a1:df:cb:c6:cf:ca:
         ef:55:31:d8:a9:1f:e6:67:96:7f:89:ec:22:34:02:d7:37:dc:
         85:45:bc:f8:74:c9:78:87:ba:c1:0a:d0:c4:70:b8:f5:26:8e:
         e4:f2:99:1f:c5:d3:cc:ad:61:9e:ea:89:53:80:b5:d1:24:38:
         bd:f2:36:3f:60:ae:6e:e9:7c:68:1f:ec:d4:6b:64:83:fc:62:
         38:03:ac:37:a6:1f:12:e4:53:7f:2e:f5:4a:aa:b6:69:47:5d:
         fa:f8:e0:9e:4a:20:17:a1:ec:e1:e8:92:b0:b2:d7:9f:19:db:
         a6:a2:74:50:8c:60:86:ec:45:99:34:53:d8:6e:b6:92:e4:92:
         84:0f:eb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:34:06 2026 by rpki-client