Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
File:                     aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json)
Hash identifier:          Z0T+A5xmYAFSL77CpjR027M5paFjw6HKqIvREZMZYgU=
Subject key identifier:   8F:4F:C7:B7:70:5A:82:5D:3D:C3:27:2D:6C:28:37:69:4E:9A:D3:6F
Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91
Certificate issuer:       /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
Certificate serial:       08B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
Manifest number:          08A4
Signing time:             Fri 12 Jun 2026 20:37:33 +0000
Manifest this update:     Fri 12 Jun 2026 20:37:32 +0000
Manifest next update:     Fri 19 Jun 2026 20:37:32 +0000
Files and hashes:         1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: pKQkOgYl/Q9qtsYDuu6TwKLW4VEirKA92vrm4q5+LHw=)
                          2: FC73A04E22D611F184630225C8833773.roa (hash: lirFwSfFP2XyhuyherlCKtjHYjqBn+tnL1KG1MSa/FQ=)
                          3: F43185921DF211F18E2EA673173D8C67.roa (hash: 7NFN5oMtgNPaVhWbz0nsBbRwBO/bYjYwDJggWSxO5PE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl
                          rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2230 (0x8b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
        Validity
            Not Before: Jun 12 20:37:32 2026 GMT
            Not After : Jun 19 20:37:32 2026 GMT
        Subject: CN=6a2c6e0d-a9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:16:ec:4f:db:10:66:59:c9:33:ee:50:87:
                    ab:4e:21:bc:7e:2a:ad:b4:9c:cb:bf:e1:d1:0a:96:
                    17:53:09:fd:7b:bd:38:17:05:36:3f:7c:40:37:d2:
                    a5:a9:42:c6:49:b3:d8:cf:17:ee:25:18:b1:24:8c:
                    cc:51:88:be:e6:c5:b7:00:b7:36:26:b9:dc:1f:51:
                    27:01:2b:d8:94:2a:f3:fd:a4:6c:e3:61:fb:70:e3:
                    3e:54:86:df:45:5d:dd:62:41:e8:c7:01:27:b8:fa:
                    3e:22:b1:43:61:97:db:a1:60:fe:c7:d6:3c:91:fa:
                    92:92:9c:99:6a:c9:e7:8f:f6:d8:84:f0:37:d0:af:
                    cd:40:e1:44:54:8d:2a:4a:a4:57:88:45:86:d1:71:
                    da:1a:00:8f:be:44:3a:f6:f3:b0:20:4c:61:77:1a:
                    a4:9b:f0:02:21:dc:5f:73:ca:68:13:77:fb:28:69:
                    a2:59:42:70:f9:4a:1d:22:56:7f:97:77:94:03:21:
                    e0:2a:8f:30:c8:02:c7:a8:70:79:c2:d9:63:31:3c:
                    7f:2b:c2:9f:49:3d:e1:28:bf:88:12:04:40:c7:b6:
                    75:1a:ad:bd:22:49:b0:95:0f:24:14:a2:87:6a:be:
                    b3:91:94:75:c4:0d:ca:5d:82:da:6d:9b:ab:19:2d:
                    89:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4F:C7:B7:70:5A:82:5D:3D:C3:27:2D:6C:28:37:69:4E:9A:D3:6F
            X509v3 Authority Key Identifier:
                keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a9:f4:a1:54:7f:43:38:f5:ee:05:78:53:bd:27:a8:0f:ae:
         40:10:11:cc:b9:e8:94:29:ab:fc:9a:f0:d4:7a:a9:43:57:1a:
         ca:26:87:9b:a8:db:66:f1:e3:91:84:89:a3:af:e2:d3:20:ee:
         15:60:84:03:01:77:51:f3:b7:a6:e9:9f:6c:da:0e:74:bd:de:
         a9:14:d4:29:a9:e9:a4:f1:c0:b2:07:ad:6d:a1:e6:17:0e:07:
         27:10:c9:8b:8e:ee:65:86:26:55:7c:d9:f5:3c:4b:b0:ae:a7:
         d3:d1:65:c5:8e:53:ef:8a:47:62:83:7d:f3:9d:fc:bc:4b:f5:
         24:19:be:8e:cc:f8:f7:5d:e1:0f:bc:e3:7a:37:de:36:5b:fd:
         96:84:0d:e1:3c:ae:9e:af:60:7f:28:57:a0:8d:9b:7a:7d:7e:
         42:43:f3:0a:08:94:64:99:4f:a1:48:af:65:bf:55:8f:12:e6:
         d1:01:1c:ed:ec:79:81:01:c9:52:ed:aa:ee:b9:6d:1f:6e:aa:
         09:e3:7d:04:63:8c:c7:a7:b7:fb:54:24:95:40:ba:46:a0:3c:
         59:93:b5:97:60:d0:e5:5f:a3:64:51:34:30:70:ca:aa:b0:e1:
         03:0e:ba:5d:10:9f:ad:d1:64:c6:2b:a3:7e:99:fb:40:e4:87:
         63:e6:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:49 2026 by rpki-client