Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
File:                     lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft (raw, json)
Hash identifier:          Z/Bq4GwMnf3b/RhpjhFUBnETJEUPe9AxJmH1UYc4U1A=
Subject key identifier:   21:F4:DB:CE:E1:72:3E:40:05:D0:18:1E:A7:5B:21:AA:C4:A3:09:57
Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E
Certificate issuer:       /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
Certificate serial:       065F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
Manifest number:          0644
Signing time:             Fri 12 Jun 2026 22:47:43 +0000
Manifest this update:     Fri 12 Jun 2026 22:47:43 +0000
Manifest next update:     Fri 19 Jun 2026 22:47:43 +0000
Files and hashes:         1: lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl (hash: Mc5zdV+lmN0Kb/DvXNVPsF9HqUNKi60W62yfENliBJQ=)
                          2: 229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa (hash: 7N+kBhMTPa/IDmaHS5j88uMau/dBXAyZziXt2IYR/Jg=)
                          3: 368F5308A27311EFA8731822C4F9AE02.roa (hash: KBf8JxajMdMMi2+GI03db8VLySuC8cD1rgByqAKzBds=)
                          4: 53BCB840EA4211EB846B8757C4F9AE02.roa (hash: 8A4Wb2KJcDqzfgpVuNBZcnB+OO/NHwZAcOnGRk55RA8=)
                          5: 37F43E66A27311EFA8731822C4F9AE02.roa (hash: uvL2gNEthqGV41KwTfLQpnni0nIuRN7IKI+1/XnuE+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
        Validity
            Not Before: Jun 12 22:47:43 2026 GMT
            Not After : Jun 19 22:47:43 2026 GMT
        Subject: CN=6a2c8c8f-d38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:86:24:73:da:14:19:81:b9:f4:ff:4b:32:
                    3f:31:23:d2:16:7c:ce:88:56:43:c1:1c:51:8f:47:
                    98:e4:87:61:06:bf:d7:9b:ad:84:4f:05:d4:b0:6c:
                    1a:c9:20:77:6d:66:5b:5e:ad:e6:42:23:94:01:6b:
                    91:64:b4:5c:4e:47:83:95:05:08:36:f5:69:02:ca:
                    e0:eb:45:16:0a:c5:74:9b:36:ca:4c:e4:0e:d7:05:
                    bc:78:19:f2:79:bd:71:75:da:7a:46:bb:80:ba:02:
                    5c:94:8d:1b:ba:fb:ed:13:32:c4:15:61:22:d5:9d:
                    ca:a8:1a:6e:48:07:96:6f:57:0d:8d:1c:76:78:b9:
                    db:a4:d0:7e:18:c9:ef:7f:98:53:69:f4:30:b5:ef:
                    74:9f:72:46:a4:eb:53:eb:09:4d:99:d9:74:96:b4:
                    f7:1d:36:10:3c:30:89:5b:a1:2f:24:6c:de:0c:76:
                    a7:3c:4d:31:cb:77:52:c4:e6:3d:fa:4f:c6:e5:42:
                    59:3a:a6:35:4b:51:40:af:44:01:5d:16:a4:29:7d:
                    fd:f3:ae:1b:06:e4:cc:45:4b:fd:ce:83:ff:fc:da:
                    e0:df:16:28:64:42:cf:43:77:67:57:15:a6:4d:4a:
                    01:87:4b:83:93:96:30:2f:02:b2:cd:d2:08:53:b5:
                    77:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F4:DB:CE:E1:72:3E:40:05:D0:18:1E:A7:5B:21:AA:C4:A3:09:57
            X509v3 Authority Key Identifier:
                keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:af:b1:8f:bb:41:16:0a:88:f8:0f:9d:e7:4b:fb:42:8f:d9:
         50:06:d8:24:c6:d4:21:e0:0c:c7:41:f3:13:3b:e0:27:81:a8:
         51:bc:9e:a8:03:12:3d:af:e9:63:7b:3f:05:fe:67:94:1d:e9:
         78:97:94:29:eb:e3:f2:06:56:fb:6d:ea:c1:fd:e8:6b:dd:ec:
         bb:a3:f2:21:3c:47:5e:7e:22:8a:f6:b3:9f:b5:07:d0:93:5d:
         01:d5:57:c9:68:64:79:93:71:80:01:62:bc:d7:86:ce:32:41:
         ac:d3:e5:6b:8b:6e:83:26:9f:b5:b8:7d:1b:d6:8e:14:2c:ae:
         3d:14:71:cd:c6:c5:a8:75:5b:4c:4c:4a:93:de:a0:96:c1:4b:
         3b:ad:5b:8b:ca:80:c8:ec:ab:aa:19:e8:55:f2:0c:d8:f1:98:
         c6:6c:1d:b5:c6:97:5a:e5:18:61:8c:79:dd:f3:34:2b:2b:de:
         58:0f:97:38:e9:d1:80:09:41:b6:c5:7d:06:26:cb:4b:20:67:
         66:a2:a2:d5:a8:9b:95:ae:bd:36:44:c1:42:25:7f:7a:82:42:
         24:bf:75:7a:c7:6a:37:6a:5a:15:f4:86:4d:22:88:c1:28:f0:
         c5:7c:2d:d4:3c:4e:1b:c3:3c:d6:62:ae:26:25:6b:9b:47:f7:
         34:d5:21:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:58 2026 by rpki-client