Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
File:                     mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json)
Hash identifier:          xvczHhkkcpxklmNE1+c9ZUTp8HdRks0gfy0OzyBrA5Y=
Subject key identifier:   E7:CA:BE:CC:58:D5:1A:0B:26:61:C3:D0:3A:5F:E4:30:99:FF:EE:42
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Certificate issuer:       /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial:       1284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
Manifest number:          125F
Signing time:             Fri 12 Jun 2026 17:04:16 +0000
Manifest this update:     Fri 12 Jun 2026 17:04:15 +0000
Manifest next update:     Fri 19 Jun 2026 17:04:15 +0000
Files and hashes:         1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: 8sgV5U8PlueMXZYlKb92ZHf3WUIZEoY+QXKZsxUdjT8=)
                          2: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: V0cr8aX14uWEEWz5HgA49PAr418Rwt7O1IgwtljgIiE=)
                          3: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: uw3x4cCrEOXVGSx9HLNoaCGi5i7d3mdJuRAyyNS0hCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
                          rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4740 (0x1284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
        Validity
            Not Before: Jun 12 17:04:15 2026 GMT
            Not After : Jun 19 17:04:15 2026 GMT
        Subject: CN=6a2c3c0f-45e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:ef:97:50:30:2d:80:78:3e:3c:64:c8:24:
                    23:35:cc:77:08:14:83:6b:08:f7:6d:83:5e:ae:0b:
                    89:63:4a:44:79:b3:42:2d:8e:c8:0a:13:9e:3a:48:
                    d0:13:25:da:97:99:92:44:42:ec:76:5b:58:f0:c9:
                    62:98:e4:ce:e6:92:85:3c:59:41:42:13:0a:f7:56:
                    62:d2:e6:32:6c:9c:a4:d7:d1:46:04:90:b2:9e:63:
                    b9:04:e8:49:76:87:71:a7:70:7c:1b:fd:27:fc:70:
                    ab:e8:db:81:4a:bb:ab:7b:fe:58:d8:c2:25:31:42:
                    9e:c1:44:22:23:d1:76:38:ea:d7:bc:48:a0:82:43:
                    59:e4:10:89:41:39:4c:96:28:08:be:a3:31:71:ce:
                    5e:de:a3:4a:6c:37:3f:43:f2:fb:dc:61:34:e4:1f:
                    db:ff:33:73:a3:f8:1f:10:ef:f4:4f:33:83:dd:e0:
                    95:00:f7:25:30:1b:ee:ae:87:fa:98:63:49:1b:01:
                    3d:a4:4b:8f:0a:a1:66:4a:af:5f:2e:9d:fa:b7:d8:
                    1c:84:8d:75:9c:7a:6a:fa:a2:fb:1c:b0:9a:df:11:
                    1c:c3:22:49:7e:18:ee:df:7a:43:ed:24:64:7f:e6:
                    f3:b1:5c:5b:53:23:ea:f8:fa:4e:c3:c9:5c:2f:0b:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CA:BE:CC:58:D5:1A:0B:26:61:C3:D0:3A:5F:E4:30:99:FF:EE:42
            X509v3 Authority Key Identifier:
                keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:0e:aa:3f:35:1a:0b:a2:b8:4c:c9:e8:bb:2a:c5:e7:cb:eb:
         7c:b1:e6:55:4f:b8:b3:b8:4e:5f:fb:95:12:e2:25:cd:e3:97:
         ab:3b:a5:56:0b:7c:c5:ad:67:c8:45:af:29:59:b9:2a:3c:ce:
         54:17:30:29:3d:74:0b:6f:e8:24:5a:a6:1b:0e:94:87:a1:5b:
         f3:79:31:22:7b:96:99:09:1b:a7:60:23:c8:32:e5:ca:f9:6e:
         7e:2b:bf:c5:3e:b9:8a:68:34:fc:1a:55:d9:6a:ae:de:8d:22:
         e0:f3:52:25:32:ac:f6:0e:13:fd:aa:b6:20:1a:52:26:02:13:
         1c:66:3a:b6:c3:56:f9:06:6f:ce:f1:f9:21:19:0c:72:80:7c:
         70:1d:3a:94:c4:79:55:5e:70:86:19:f7:d0:55:3e:9e:20:56:
         94:9d:61:51:fc:af:52:1e:b4:34:9c:e3:cd:76:28:71:3a:b3:
         e9:1e:ff:7e:76:33:6b:7b:9f:40:f0:22:e5:d5:3f:23:b4:f3:
         80:26:56:3a:4f:fd:65:85:93:07:a4:37:ae:47:28:c7:b3:d8:
         10:0f:41:71:cc:ec:b7:81:ae:fc:57:64:f2:5f:ae:51:f8:91:
         23:e5:7a:5b:88:d1:02:93:19:fe:9f:52:26:ef:88:14:41:ce:
         e7:1d:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:32:50 2026 by rpki-client