Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
File:                     4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json)
Hash identifier:          6aC0FggYapC/yuW9+nIh047IrulpwOgev4iYbVWA0GE=
Subject key identifier:   56:AC:4A:39:65:06:C6:1F:D6:6A:BC:61:D3:EC:1E:B9:D6:17:BD:33
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Certificate issuer:       /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
Manifest number:          010D
Signing time:             Thu 11 Jun 2026 08:19:06 +0000
Manifest this update:     Thu 11 Jun 2026 08:19:06 +0000
Manifest next update:     Thu 18 Jun 2026 08:19:06 +0000
Files and hashes:         1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: t9JdohgNk0tsVZjbn5XJfxTuBppeyEx0EsGSY6oxY/s=)
                          2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: x4m5M8TdUipL7o6slEBASzNPQRc6mguoljJR97i4R5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
                          rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
        Validity
            Not Before: Jun 11 08:19:06 2026 GMT
            Not After : Jun 18 08:19:06 2026 GMT
        Subject: CN=6a2a6f7a-5ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:fc:51:6c:d7:1f:43:81:26:c2:30:25:43:
                    c5:b7:60:d2:b6:a5:e0:66:d0:d0:66:ce:5d:1b:10:
                    b1:4b:99:ce:80:13:3d:4a:70:74:75:67:23:fb:4e:
                    67:2f:af:22:c8:91:4c:b0:ed:92:59:15:b9:03:42:
                    5b:78:91:ba:51:40:24:6b:e1:52:16:23:9d:84:44:
                    cd:34:09:97:3b:2b:47:64:c4:11:41:b2:c5:0b:33:
                    5d:b2:bc:88:7a:f9:d5:fd:ef:f2:c3:41:5d:ee:cf:
                    1f:fb:70:f6:eb:69:d6:f6:27:01:a7:59:45:b8:d5:
                    8a:19:49:d7:bf:a5:b7:0d:1a:53:ba:99:42:53:77:
                    0d:ca:6a:31:7e:f0:c3:73:14:0f:05:c3:97:a8:f2:
                    4f:fe:01:71:be:91:bf:2a:15:80:6e:80:6f:83:cf:
                    75:c7:2f:c6:c7:50:e9:68:79:9e:a2:9f:5c:43:b6:
                    8c:4f:08:a4:e7:a4:c0:71:fd:d4:ff:7f:66:2b:a0:
                    d1:3b:63:80:70:be:45:82:25:93:7d:83:f2:fb:c3:
                    6d:f8:00:d6:45:ee:49:12:9c:4a:4e:58:c3:ec:46:
                    18:b0:06:c0:5a:0f:94:cf:53:67:6d:48:47:06:13:
                    14:c9:36:0f:37:db:ab:09:f1:0c:39:17:61:34:00:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AC:4A:39:65:06:C6:1F:D6:6A:BC:61:D3:EC:1E:B9:D6:17:BD:33
            X509v3 Authority Key Identifier:
                keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:6d:51:40:2b:36:15:41:5d:66:f3:1b:c1:6f:ac:fc:61:33:
         1b:12:33:d6:57:af:24:ed:8f:a3:ca:e5:61:30:eb:67:bf:89:
         dd:db:40:87:8a:f8:74:ac:b0:70:4a:40:06:ce:70:d4:49:0a:
         45:c9:05:13:9f:d0:d6:7a:48:e8:18:6e:b9:d3:6a:74:49:ac:
         d0:18:48:4f:08:a8:2f:e4:37:ba:fc:be:2c:3b:81:1c:95:f5:
         76:38:70:6d:10:0a:55:27:1d:d1:67:7b:5b:e8:74:17:1d:a5:
         7c:63:e4:95:03:ef:8b:26:68:59:52:45:6d:50:e3:e8:e9:f5:
         0c:fb:ab:5a:dd:15:91:2f:ad:c7:b0:0b:6d:66:9f:66:86:6c:
         59:4f:8a:90:10:17:bd:0a:3b:7d:6c:6f:b1:c6:af:08:a6:40:
         7b:a7:f0:ba:83:b5:74:ff:ab:ec:06:d6:f2:51:0c:ce:97:06:
         dc:14:35:cd:7a:c0:63:53:9d:e7:7d:3f:44:0b:01:91:18:23:
         a9:37:38:27:29:2a:23:51:72:fe:22:a1:3a:c5:18:22:47:3c:
         00:35:14:fb:8a:cd:75:a8:1f:f7:8d:57:42:0e:13:97:81:a8:
         f7:6e:64:79:88:d6:39:f4:78:e3:72:19:cb:cd:11:9d:29:94:
         1d:2a:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:38 2026 by rpki-client