Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
File:                     dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json)
Hash identifier:          b+Saeg/FrdYcxRlPt5KF1zon502/eXKW7Vz2F4bh7HQ=
Subject key identifier:   9D:CE:22:BC:A1:CB:34:78:A1:1F:2A:1E:3B:27:9C:D8:02:1E:08:49
Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Certificate issuer:       /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
Manifest number:          86
Signing time:             Sat 13 Jun 2026 07:39:12 +0000
Manifest this update:     Sat 13 Jun 2026 07:39:11 +0000
Manifest next update:     Sat 20 Jun 2026 07:39:11 +0000
Files and hashes:         1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: nG6iHaRs9ToKVaR91sO96TaE/cRV9amytSUCAgEody8=)
                          2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: vBEx8MN3paA8oMvLUSfioDhDYGeEtTZ7/oH2tL94g1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
                          rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
        Validity
            Not Before: Jun 13 07:39:11 2026 GMT
            Not After : Jun 20 07:39:11 2026 GMT
        Subject: CN=6a2d0920-a725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:1c:69:23:e6:2c:60:fd:70:90:9e:ae:92:
                    13:d0:3f:84:a7:f9:d3:72:1f:10:43:82:64:bc:d0:
                    05:bd:20:3a:a9:e6:9b:61:ad:1d:29:7c:f7:c4:0a:
                    54:ca:e8:51:56:12:92:0d:8e:cd:c5:4e:bb:67:4d:
                    da:22:58:50:99:18:4e:0b:75:45:08:a4:1c:5d:8f:
                    f6:bf:5f:85:bb:7e:e4:b4:fa:46:8e:20:10:24:87:
                    ba:be:b1:5d:04:8c:25:1e:23:33:d4:01:17:20:c7:
                    bb:0e:0b:3f:b8:a7:50:6f:f1:f6:b4:46:45:d2:77:
                    e0:af:64:4b:07:ec:a3:a8:cc:34:46:cf:fe:20:18:
                    55:8e:d1:60:c6:20:16:58:19:00:42:30:66:9a:94:
                    12:ec:a6:9b:56:01:33:3a:d1:83:22:d0:77:6e:54:
                    fa:ae:eb:7d:cf:c4:d6:3c:13:9b:f3:66:f5:5d:17:
                    d0:d5:5b:f8:42:fd:7a:a5:11:60:31:6f:49:5e:ac:
                    b6:49:81:da:50:94:cd:ba:9b:13:ca:7a:d4:8c:e0:
                    aa:7d:51:76:c4:db:4c:57:72:b3:5e:da:41:d9:86:
                    56:26:8e:e1:8f:c6:33:48:1b:f6:dc:9b:12:62:63:
                    49:45:21:c2:6d:af:96:d1:b1:e4:34:56:ca:ed:9b:
                    a4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CE:22:BC:A1:CB:34:78:A1:1F:2A:1E:3B:27:9C:D8:02:1E:08:49
            X509v3 Authority Key Identifier:
                keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:66:5b:fd:a9:e8:3f:0a:fc:c4:e2:29:39:aa:bb:aa:f5:07:
         ac:0e:1f:98:51:71:ed:66:ee:87:6d:f2:e9:e5:53:15:6c:78:
         2f:d3:8c:32:fe:c6:53:ef:47:dd:4e:e5:75:cd:7f:d9:f1:bb:
         bc:e7:03:3f:ee:73:00:10:72:48:de:ff:47:51:ac:0f:59:a5:
         c4:23:4c:6c:77:cc:19:f5:bf:7c:99:96:1e:44:9a:ee:b9:5e:
         41:46:21:82:22:a8:d7:65:fb:c3:0c:90:d6:22:7e:c7:bf:50:
         51:a2:04:b6:2b:67:37:84:c1:9f:f0:64:6d:11:f0:7f:d2:34:
         ce:3f:e6:f5:ff:dc:35:e8:dd:42:7a:60:c7:0a:39:1b:37:81:
         ec:88:a1:89:e4:cc:c1:86:34:56:f0:bf:1f:50:62:9a:ae:ef:
         e7:b4:70:64:df:8e:e6:6c:d7:17:d5:8d:a2:1b:05:55:fc:18:
         35:24:71:04:ac:75:ea:57:01:30:f9:de:2e:e3:60:82:46:2b:
         2c:2f:53:b0:03:86:0f:da:d4:40:d4:20:b8:63:6c:ff:2c:b5:
         d0:f8:24:fb:96:ff:a4:b6:bd:9a:ed:21:cc:f8:ee:ee:7f:f4:
         2b:5d:59:10:64:67:1a:1c:bb:e3:ec:cf:ac:f3:7a:38:12:65:
         3e:95:8f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:44:40 2026 by rpki-client