Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
File:                     I2o4zV7FL3Doi4BtcV63sELNfr8.mft (raw, json)
Hash identifier:          PwCg05nnQr6hHieGx7z/kNECXJoy0Kk8mQwLmT4JE7Q=
Subject key identifier:   F9:F0:13:2A:81:26:34:F9:1F:B1:54:54:15:44:BA:F3:CB:90:8E:0C
Authority key identifier: 23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF
Certificate issuer:       /CN=A918120B/serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
Manifest number:          61
Signing time:             Sat 13 Jun 2026 08:13:16 +0000
Manifest this update:     Sat 13 Jun 2026 08:13:16 +0000
Manifest next update:     Sat 20 Jun 2026 08:13:16 +0000
Files and hashes:         1: I2o4zV7FL3Doi4BtcV63sELNfr8.crl (hash: b7qCGB/1mZFQHyVJl0A8VsYbwuLw40UXeysSanpsYj8=)
                          2: 4C5380C8E0B211F084C35B824B6F56BC.roa (hash: ReH7NwBS0TVPrmwTTmCzxQPZCsV/M0H3BbFbbRjxNaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl
                          rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918120B, serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF
        Validity
            Not Before: Jun 13 08:13:16 2026 GMT
            Not After : Jun 20 08:13:16 2026 GMT
        Subject: CN=6a2d111c-a2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:8a:a8:97:32:0f:7c:a8:4e:58:b9:48:a0:
                    c5:ef:91:73:9e:0d:fc:0a:91:ea:a9:34:fe:8d:ad:
                    6d:b8:67:d3:8c:86:f1:cd:65:f7:93:83:cc:6f:20:
                    8f:9b:90:a3:96:e2:04:63:6d:eb:29:08:f7:8f:2f:
                    b5:19:7e:82:1b:9d:1c:55:c2:e8:d9:42:d8:41:86:
                    95:86:25:94:6b:e0:36:ef:9f:08:e2:19:2c:f0:c2:
                    02:71:dc:0b:37:73:21:8e:eb:a5:dc:69:12:e9:ff:
                    ad:f6:b3:c7:2a:93:4d:27:fd:4e:9b:ad:29:21:a2:
                    52:2a:25:1b:98:f4:c0:5f:57:28:a0:89:80:95:e3:
                    25:d1:37:a1:94:e3:5a:94:68:dc:ef:f5:f7:bb:c8:
                    02:31:94:1f:cb:cf:29:e4:f9:5d:c3:c7:7a:bb:99:
                    db:56:33:f2:8a:e6:7c:64:86:8b:10:40:4e:b8:d1:
                    a4:84:3a:e7:7b:f6:d3:4f:4b:ba:6a:43:4a:c9:5e:
                    9d:b9:c6:3c:94:01:be:44:4c:77:e1:3d:93:de:73:
                    65:e5:a5:c3:8f:73:27:c2:e8:9c:18:fa:68:e5:be:
                    2b:b9:7f:60:09:79:08:1e:f9:3a:a4:a0:d6:db:ec:
                    53:da:0e:eb:2f:65:3f:a6:c6:b2:91:b8:bc:eb:04:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F0:13:2A:81:26:34:F9:1F:B1:54:54:15:44:BA:F3:CB:90:8E:0C
            X509v3 Authority Key Identifier:
                keyid:23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:54:8e:d3:33:55:f8:95:a0:d5:de:57:06:90:a8:30:26:3e:
         6a:c7:77:6a:d1:eb:36:06:a9:93:08:ab:c6:99:b9:aa:e7:7c:
         51:f0:bf:56:cd:de:32:d7:39:c2:74:21:41:f9:65:7f:be:52:
         ff:f3:c7:95:f9:22:0b:69:69:ed:32:4e:1a:a8:bc:db:47:9e:
         95:3a:9b:8f:00:6d:08:d4:06:6e:09:71:62:ee:cf:66:83:02:
         20:3d:d8:a0:0d:a8:26:5a:48:b6:56:ad:3a:ce:38:d0:f3:1b:
         16:bc:05:0f:5b:bd:85:a9:b8:53:f8:93:3d:77:4a:c8:bb:ac:
         db:ff:cc:71:73:d2:78:73:c9:b5:d0:ae:e3:51:69:cd:ef:a0:
         80:e3:da:c9:35:2a:fa:f1:ee:4e:a0:93:21:ea:20:07:7a:1c:
         3f:a5:e0:72:5c:58:38:71:d5:d7:a2:4a:80:81:09:35:88:87:
         de:61:84:2b:5c:58:a6:3f:7c:bb:3d:06:e9:49:fc:e2:eb:4d:
         6f:ce:05:be:bf:8f:9b:7f:07:a0:cc:7a:3e:fb:b8:d4:be:e4:
         3d:94:1a:48:ad:9b:14:9e:fd:f6:9c:af:92:7c:50:a6:ac:64:
         38:e1:b3:49:ab:a9:ad:cc:77:fd:15:10:2f:46:0d:e8:ee:27:
         eb:d3:1c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:22:47 2026 by rpki-client