Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File:                     I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier:          7xRR6TxQp1Fp7TmSnB5q7lK+00b7P2iDvF7HZQysXss=
Subject key identifier:   A4:0B:52:98:71:31:C8:6A:7B:95:FC:59:EF:56:40:C0:62:04:89:EC
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer:       /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial:       0CEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number:          0CD3
Signing time:             Fri 12 Jun 2026 18:29:46 +0000
Manifest this update:     Fri 12 Jun 2026 18:29:45 +0000
Manifest next update:     Fri 19 Jun 2026 18:29:45 +0000
Files and hashes:         1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: oOP9Rqm6Zxe1h2RuZtIxB5j8IzSujgB/2tszk04qw1s=)
                          2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: mKkuVSeTZtVuG7BfqaqUZzcHeF9XMKmK1adCEnjlrRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
                          rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3308 (0xcec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
        Validity
            Not Before: Jun 12 18:29:45 2026 GMT
            Not After : Jun 19 18:29:45 2026 GMT
        Subject: CN=6a2c501a-14f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:0b:17:f4:c5:a8:e2:ee:53:cb:f1:96:7f:
                    72:e7:a2:00:55:72:5b:f3:fb:5e:66:07:6a:78:11:
                    49:6b:f1:25:04:21:1d:ad:3e:74:6d:24:20:6d:88:
                    5d:16:26:09:75:c0:96:34:82:90:5f:53:6c:97:44:
                    4b:d5:8a:ea:7f:44:81:9a:0a:05:ed:f7:cf:a4:07:
                    45:4d:06:b5:64:ef:4f:9b:d4:8e:1f:eb:e7:92:e3:
                    56:13:1d:14:1d:0b:c6:9b:0f:e6:2d:e5:5f:9e:2a:
                    59:86:54:97:c6:1f:07:6a:08:26:44:28:04:8e:64:
                    5c:a7:e4:10:7f:ea:49:83:8a:8d:3c:af:dd:bd:b7:
                    0b:c9:af:16:0d:54:8e:14:e0:5f:95:c3:28:15:d4:
                    3f:2d:13:89:21:5c:eb:c1:ff:39:06:bd:28:92:e9:
                    58:89:9c:f6:7d:bc:43:c2:05:5e:8c:ac:bc:a0:6a:
                    7e:80:16:2f:19:b2:3b:69:bc:5b:25:c3:4b:98:10:
                    67:de:e7:cc:b8:bb:bc:97:39:f5:79:7b:a7:89:67:
                    5e:e3:61:0f:e9:93:91:06:2b:cc:f0:76:2f:50:75:
                    d5:ba:fe:74:05:03:3d:fa:e0:08:9a:aa:5e:ed:b9:
                    36:0a:f4:7c:7c:74:2e:ba:c3:d7:4b:15:a8:24:c5:
                    6f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0B:52:98:71:31:C8:6A:7B:95:FC:59:EF:56:40:C0:62:04:89:EC
            X509v3 Authority Key Identifier:
                keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e7:88:d4:f5:97:2d:43:f1:66:38:cd:aa:be:d3:09:e7:0a:
         78:61:86:63:aa:8d:00:72:bc:58:74:c4:10:a9:51:23:9f:64:
         26:04:01:f4:23:3c:a0:8f:1a:bf:2c:b3:45:d5:0e:75:aa:18:
         68:f0:34:57:0b:a0:9f:03:24:11:19:bf:be:17:1b:5b:a5:4a:
         5c:bc:fd:0f:db:e4:d7:d5:a5:04:0e:18:59:47:a3:10:37:65:
         f7:ab:8f:4d:89:0e:4e:59:8e:7b:c2:66:56:c8:83:5a:3e:81:
         b6:a5:28:7a:1b:21:58:00:89:ce:61:89:3d:08:dc:33:81:3a:
         70:dd:ec:90:01:ad:ca:0d:47:0a:c6:a8:32:d2:ad:dc:3f:97:
         4f:ac:23:f4:dc:51:6a:9f:ed:59:32:69:19:e9:02:2d:5b:91:
         00:60:cd:23:d5:86:b1:87:be:15:c7:42:ab:4a:43:ad:bd:24:
         9e:83:e4:01:78:47:67:69:8c:97:39:29:fc:f8:62:52:96:5d:
         17:5a:1b:18:16:b9:cd:d4:e6:69:df:aa:05:85:f5:36:cd:dc:
         0b:a1:8a:df:ac:10:a2:4e:3a:fa:2b:ac:08:d9:b6:b0:a5:f9:
         a5:a1:9a:d7:7c:2e:0b:0e:be:44:14:8a:e0:d3:52:07:66:e0:
         9d:05:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:49 2026 by rpki-client