Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
File:                     ID0eLahSvltkOpm-9WTXdL3cx_Q.mft (raw, json)
Hash identifier:          Xml3RLDTyxnLP08lN2e7jrrpgCTF3g524J7i1VvcIB4=
Subject key identifier:   2D:FB:CD:5A:E9:59:75:0D:BE:D9:1F:6C:36:A8:E8:FE:8F:B0:91:2F
Authority key identifier: 20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4
Certificate issuer:       /CN=A917E832/serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
Certificate serial:       0B93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
Manifest number:          0B86
Signing time:             Fri 12 Jun 2026 19:08:51 +0000
Manifest this update:     Fri 12 Jun 2026 19:08:51 +0000
Manifest next update:     Fri 19 Jun 2026 19:08:51 +0000
Files and hashes:         1: ID0eLahSvltkOpm-9WTXdL3cx_Q.crl (hash: VoLVTsHUKr3TaC4kdv3UwYnQkj8v3gdRWAtQBplSv90=)
                          2: E869880C500511EA98307A59C4F9AE02.roa (hash: tMXWiHQDEYWjmb1rCm9pm1NKCjaTCYMsTjZBKr+rfEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963 (0xb93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E832, serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
        Validity
            Not Before: Jun 12 19:08:51 2026 GMT
            Not After : Jun 19 19:08:51 2026 GMT
        Subject: CN=6a2c5943-05a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8f:d6:9c:d3:60:61:30:a1:32:17:c5:da:da:
                    6b:53:aa:c8:8e:e0:9e:16:c1:80:27:ce:5c:75:bf:
                    ae:dc:22:bf:18:a7:d5:4b:5f:92:94:7f:f1:81:51:
                    fa:82:58:f6:42:a2:99:9b:2f:b3:a7:28:b1:58:c1:
                    2f:1c:18:f9:5c:d5:c9:34:44:bc:f4:4d:ff:f9:c9:
                    f9:02:38:16:0a:7f:58:75:0a:d1:05:5a:c6:78:1d:
                    c6:ee:cb:3f:48:4b:be:65:ff:e0:58:2a:72:d5:40:
                    a8:64:8d:00:23:eb:af:29:02:ed:f5:ba:75:a8:6e:
                    4a:be:fe:e5:c1:f5:af:f3:bf:34:e1:84:5b:c3:ac:
                    23:63:b8:9c:cf:76:e3:00:55:81:33:b4:d4:86:5c:
                    31:bf:02:2e:ac:00:59:ab:15:43:b8:d4:08:04:3b:
                    af:6c:4d:d4:55:c3:15:57:fe:23:7f:a7:df:66:25:
                    6b:e2:9b:9b:f7:ba:d4:8b:54:43:f5:06:18:b8:9c:
                    ee:06:d9:89:a0:22:f5:73:3c:b9:e5:14:dd:8f:7b:
                    c7:9f:31:19:4f:13:b4:28:65:e9:0d:b9:2f:47:c0:
                    16:88:cd:af:49:49:e6:f0:7b:32:7e:35:75:fd:25:
                    09:47:be:d6:cd:74:fb:80:f6:d2:f4:aa:86:d3:5e:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FB:CD:5A:E9:59:75:0D:BE:D9:1F:6C:36:A8:E8:FE:8F:B0:91:2F
            X509v3 Authority Key Identifier:
                keyid:20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:60:6d:03:22:10:d2:70:da:70:61:df:49:54:f4:7d:80:4a:
         78:c3:5e:58:45:ba:85:01:d1:d7:21:51:ac:92:d3:c5:8b:99:
         da:3a:e6:cb:42:a0:07:f8:4d:d3:fc:ed:a1:6b:24:29:0f:b0:
         96:5c:21:c6:b0:91:91:9c:e7:a5:54:6c:45:35:78:32:16:b4:
         9a:ed:6b:c9:e2:af:67:3b:10:e8:e4:af:8b:37:3e:d1:25:bf:
         57:f4:8b:09:c4:7a:86:58:32:fd:92:94:48:c5:18:78:51:aa:
         29:26:cd:0f:12:52:cc:5f:45:46:e3:5f:f8:64:91:8d:3c:da:
         e1:9f:ca:74:19:f0:86:33:1e:e0:b7:a8:3e:5a:5d:2e:1b:3e:
         8b:2f:5b:89:79:72:62:6e:f1:7e:f3:ab:d0:90:a5:a2:20:d0:
         8c:2f:64:1a:2f:71:0d:3d:d4:87:2a:b9:9d:be:75:8a:f5:9b:
         e7:82:ee:1a:50:f2:ea:60:95:6f:f3:ad:fb:f3:4f:fc:3f:22:
         3b:cc:d3:f9:9e:7e:4c:8c:c1:4e:a9:be:b2:ec:16:85:bf:cd:
         d1:82:f0:ed:3f:26:d8:c3:71:73:f5:f0:a8:9e:cf:e5:11:ed:
         30:78:fb:1a:5c:c0:2d:33:b3:9f:c9:a6:f8:22:36:c2:20:51:
         fd:4d:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:51:01 2026 by rpki-client