Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
File:                     8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json)
Hash identifier:          W6R6w0BPreSPDOvGo3Dg9XRhpTDzTg3GSB4hxNtep3o=
Subject key identifier:   78:B0:72:56:0F:49:54:C0:81:1C:CA:F4:C2:04:D2:69:C5:63:E2:C2
Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Certificate issuer:       /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
Manifest number:          CA
Signing time:             Sat 13 Jun 2026 06:57:07 +0000
Manifest this update:     Sat 13 Jun 2026 06:57:06 +0000
Manifest next update:     Sat 20 Jun 2026 06:57:06 +0000
Files and hashes:         1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: h5oUKmdkL/CK+TMpF9gPmowUKTZ/W/tUEGAQCmyj+aA=)
                          2: CE88C72C569911F08E21CF87C4F9AE02.roa (hash: q/nsqh9kiH+bznpNaj8r4apm6/Ae9GpQkbbiW39Shpg=)
                          3: 2EA48F06569A11F0A878F309C4F9AE02.roa (hash: TgVrDlat2+ByZMpKIQ8pI5WNmuoF/FmyVp9TGWTtSyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
        Validity
            Not Before: Jun 13 06:57:06 2026 GMT
            Not After : Jun 20 06:57:06 2026 GMT
        Subject: CN=6a2cff43-fcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:64:27:da:5f:bd:c4:64:cd:a4:e6:13:cc:
                    c4:c8:17:10:3c:fe:11:c4:5d:d0:68:18:38:ba:50:
                    21:6a:b9:93:32:ad:97:03:b0:fa:54:ed:10:45:b9:
                    af:1f:29:7f:a4:56:26:40:73:7e:02:c5:cf:9c:b1:
                    49:c6:c1:e9:89:8f:5e:0f:dd:ca:86:0a:1b:91:22:
                    42:f4:56:89:2e:7d:1d:2e:e9:3c:51:bf:7b:5e:8b:
                    06:8b:c8:1e:46:91:ae:fa:96:45:2f:7d:d9:86:ab:
                    38:35:2d:0f:37:04:1f:fc:50:1c:67:d0:cf:e3:cc:
                    96:cf:94:be:5d:1f:fd:21:19:f8:ba:ae:2d:54:c1:
                    05:14:84:de:ac:2e:c8:09:79:c9:8c:53:2f:d5:0a:
                    bc:8d:91:26:61:0e:bf:e8:fa:1e:ad:00:be:7e:da:
                    4e:a7:9b:89:d8:cc:fd:ca:f0:e9:a7:5a:93:2d:8d:
                    29:90:09:7b:a4:11:83:88:bf:fb:de:7f:c1:95:5e:
                    a5:4a:d1:2c:50:b6:6c:cf:f1:79:9e:ed:94:57:2d:
                    f1:0c:2c:30:1b:99:58:80:33:fa:14:a6:0c:94:b5:
                    b7:17:7f:2a:5c:25:44:15:07:df:0b:4b:a5:9a:6b:
                    47:0c:79:9f:04:fb:81:e7:53:a2:f7:a8:9f:d7:07:
                    00:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B0:72:56:0F:49:54:C0:81:1C:CA:F4:C2:04:D2:69:C5:63:E2:C2
            X509v3 Authority Key Identifier:
                keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:39:69:93:ed:28:48:6d:20:8d:fc:8d:0f:12:32:5a:8b:a0:
         67:fc:50:5c:db:00:7c:6c:70:0b:af:49:16:ed:1e:79:e1:13:
         99:a5:15:3c:dc:31:5c:97:24:be:83:74:7f:e3:2e:3b:0a:93:
         02:49:9a:c7:07:91:86:6a:7b:56:92:8b:1d:f9:ff:e8:d2:e0:
         39:d0:73:1f:7b:4b:71:00:bf:24:ba:a2:0c:c0:66:0b:9d:00:
         fd:73:0c:12:0b:48:5c:94:4e:7b:b1:d9:8e:5e:44:51:b6:56:
         34:a1:51:ae:d8:6f:d5:eb:12:4f:d6:71:df:b5:62:5f:20:29:
         c3:c2:5d:68:60:2e:98:73:bd:a6:f1:48:88:b4:c7:2a:2f:c5:
         db:84:a5:d7:ed:e6:4d:a3:b2:dd:ef:59:4d:d6:16:ca:dd:1c:
         c4:42:be:9a:0e:10:6c:ab:95:3c:f1:1a:c3:b3:5c:57:1d:c5:
         93:45:49:03:04:ff:1e:ad:3d:b0:f8:7b:37:ae:4b:73:45:24:
         ed:fa:b1:74:63:2d:aa:0d:89:44:aa:80:4d:06:81:fb:86:73:
         cf:c7:d1:81:f9:23:c2:65:b2:35:0a:c0:a4:b7:c9:17:09:e5:
         ce:cf:d7:9b:b9:ad:f4:68:61:f9:e1:c2:f1:25:53:71:fb:4a:
         b8:5e:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:10:30 2026 by rpki-client