Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
File:                     98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json)
Hash identifier:          53NhCMTsGgt41CcY4XytC+g9RhiFcHhanaMavrIxfjk=
Subject key identifier:   58:32:72:CF:2A:C7:2E:D4:38:9E:7E:39:F9:90:49:6E:52:82:9E:DF
Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B
Certificate issuer:       /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
Manifest number:          0140
Signing time:             Sat 13 Jun 2026 05:19:58 +0000
Manifest this update:     Sat 13 Jun 2026 05:19:58 +0000
Manifest next update:     Sat 20 Jun 2026 05:19:58 +0000
Files and hashes:         1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: /p8LQDM1mYTwCYgArlTBgbSa6gzikHmpUw5/0zL2bRM=)
                          2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: A1NTD7h2xgDeyXadTLZEojHNP4VwUiQbYlMzYMHSPLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl
                          rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
        Validity
            Not Before: Jun 13 05:19:58 2026 GMT
            Not After : Jun 20 05:19:58 2026 GMT
        Subject: CN=6a2ce87e-00ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8d:98:35:7b:9b:1d:18:ba:ff:3f:4b:28:59:
                    6c:53:96:04:bb:dc:0e:68:4f:42:ba:e7:e4:0f:38:
                    8f:0f:b7:db:1d:02:34:d3:86:b3:dc:b1:15:90:42:
                    f0:dd:17:a7:37:75:d9:84:f2:3d:26:ce:51:a9:b8:
                    da:38:2b:bf:e9:ee:c0:e8:23:b3:1e:67:7d:d3:db:
                    b9:14:4e:63:aa:3c:b2:97:80:1b:c0:37:ee:62:6a:
                    3d:ee:00:79:e5:b0:0c:3c:f1:81:af:03:91:86:7b:
                    e7:22:88:4b:10:f1:c7:19:be:e8:79:25:74:ad:5b:
                    70:ce:de:a0:82:43:9e:3d:6b:e8:50:23:96:d2:b9:
                    f9:29:b6:0e:ed:32:b6:a5:75:68:95:c1:e8:2d:4d:
                    89:74:86:e3:85:5b:9f:83:35:dd:4d:05:5f:ad:d1:
                    72:89:8e:40:95:68:17:7d:e4:8b:57:80:78:85:22:
                    d1:ba:af:2d:7d:34:84:ec:7f:e3:23:65:29:42:dc:
                    1a:16:c8:53:e0:50:2a:20:d2:c4:6c:6f:2d:d9:5c:
                    34:54:54:f2:0b:c8:1a:cc:6d:e2:35:ab:f2:fa:3b:
                    08:fb:90:78:71:89:e0:e6:b2:ca:ad:7c:42:46:f2:
                    42:0c:a2:25:b4:a8:f5:c5:da:3c:af:20:6e:3f:c7:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:32:72:CF:2A:C7:2E:D4:38:9E:7E:39:F9:90:49:6E:52:82:9E:DF
            X509v3 Authority Key Identifier:
                keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:91:4b:21:b1:39:f0:bb:a3:0d:0b:c0:f6:d9:f9:6d:34:
         56:25:d5:5e:07:7c:e1:db:b3:22:0e:7a:82:96:53:dd:5e:1c:
         8d:f7:89:fa:40:da:2e:32:f8:eb:6d:25:81:e5:c6:dc:c6:28:
         5d:3e:9e:ad:f8:2e:d4:1c:59:54:73:a0:11:be:93:1c:2c:6d:
         b6:97:e3:68:1b:f0:f3:e4:49:21:41:56:7f:d0:b5:17:04:af:
         af:20:34:4f:29:e3:11:89:51:45:0a:95:78:80:83:ea:2d:c2:
         01:b8:6d:1a:64:7e:45:59:22:5f:89:f8:8e:24:bb:f6:84:f3:
         53:f9:a8:b0:c1:cb:33:af:2d:34:cf:08:bb:db:3d:be:39:8e:
         aa:e2:ff:a8:70:16:75:a3:12:7b:ef:89:0f:42:54:c7:13:0d:
         0e:c2:35:43:5b:42:6f:85:38:9b:2a:3f:dc:69:c4:75:fb:e3:
         bb:f7:b2:91:85:2e:45:01:11:30:46:22:91:22:40:d1:76:a7:
         f5:4d:d5:5d:69:08:aa:c3:f6:1a:18:04:89:a5:bd:e3:c8:cd:
         ff:b3:e2:85:89:50:d1:d9:02:33:f9:9e:f5:b1:20:f8:6a:7b:
         61:54:57:4a:e7:3c:34:33:76:1a:41:ce:7c:2b:7a:34:fe:78:
         0f:ad:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:14:07 2026 by rpki-client