Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
File:                     0xLuUOZR-vA5aO306gARSeWV_A4.mft (raw, json)
Hash identifier:          +hFseN4zGUpPoQNfjubNOqyaljklxiveBnkwXWwTuVA=
Subject key identifier:   64:CD:17:40:3A:AF:BB:E2:CE:44:E1:AD:D9:0F:CC:A5:09:94:12:C7
Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
Certificate issuer:       /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
Manifest number:          40
Signing time:             Sat 13 Jun 2026 08:36:31 +0000
Manifest this update:     Sat 13 Jun 2026 08:36:31 +0000
Manifest next update:     Sat 20 Jun 2026 08:36:31 +0000
Files and hashes:         1: 0xLuUOZR-vA5aO306gARSeWV_A4.crl (hash: b9c/sINLuv5gpaUZ0npctrdB4gTj/3zr7r4QCOq/FzY=)
                          2: 69E5BC382CD811F1ACDE793A9A833773.roa (hash: smF654Hi+ihZBGyEmAdAxIkMQXLLQzXqzXf/0N/B6sI=)
                          3: 8C5B4E020E3F11F18FED49E9183D8C67.roa (hash: Hz/ArrYvezX4EXJ8DDY9ijBLJGuFrjsekFb24N7uhk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
        Validity
            Not Before: Jun 13 08:36:31 2026 GMT
            Not After : Jun 20 08:36:31 2026 GMT
        Subject: CN=6a2d168f-16ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:b3:e2:17:d0:47:c3:1d:47:4d:a7:32:b6:
                    e1:eb:d7:99:39:01:6f:2f:18:30:ef:f0:40:ac:59:
                    5c:ab:91:a3:eb:91:dd:b1:35:d7:de:43:ce:69:43:
                    29:16:10:79:f2:6a:31:f8:41:1e:84:cf:f2:43:ea:
                    03:ad:35:82:02:61:36:26:e2:30:3b:82:96:ed:4b:
                    7d:14:99:54:37:c1:ff:73:ec:00:1e:05:7a:02:ec:
                    16:62:32:6f:81:c5:ff:6c:85:18:47:a3:dc:85:01:
                    72:d1:79:e6:6c:ba:9e:ee:88:7b:66:44:c1:20:1e:
                    fe:1b:23:e3:b5:a5:81:af:fc:4d:c6:84:e3:4c:ea:
                    f8:0c:d8:e9:17:82:a2:bf:79:90:d7:29:6e:ef:67:
                    f7:d0:5f:64:17:f3:91:06:ce:fe:94:b4:7a:da:83:
                    28:4b:43:e2:52:fa:8b:40:bd:17:25:3f:d1:76:e0:
                    eb:7c:d4:c3:2b:c5:c0:fe:0b:ca:52:25:25:b7:68:
                    d6:c3:a4:5f:2e:98:1a:3f:06:08:6f:8f:64:7b:80:
                    6c:eb:25:41:8e:27:9e:3a:84:92:f7:d4:99:37:0a:
                    59:cb:76:53:07:5e:de:93:64:3e:96:23:4a:fc:48:
                    72:23:1f:aa:d4:0d:79:82:49:ee:9a:fe:5a:31:a1:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CD:17:40:3A:AF:BB:E2:CE:44:E1:AD:D9:0F:CC:A5:09:94:12:C7
            X509v3 Authority Key Identifier:
                keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:39:10:c8:c6:67:d3:fc:b7:5c:a8:f6:9c:45:95:c0:61:
         42:b4:e5:07:30:c2:ba:f7:3f:d9:6c:d7:fc:f3:90:a2:60:38:
         37:dc:f4:11:5c:d3:76:4b:b2:48:3c:d3:a4:52:4f:c6:c4:c1:
         a3:52:63:41:fc:96:bb:6f:78:01:5c:2a:53:25:c5:db:89:d7:
         c8:57:67:5a:50:db:2d:33:2f:eb:33:6f:3d:cc:4b:aa:57:7b:
         5f:90:2c:39:cc:c7:e5:9b:2a:e9:21:0a:76:84:3d:11:dc:e7:
         22:7c:d8:97:dd:23:e5:70:74:ee:16:74:88:cc:cb:a4:52:ff:
         9d:37:4e:39:54:93:5b:0f:80:48:51:80:98:bd:9d:ab:6b:66:
         26:38:59:28:72:23:e7:17:19:fb:c2:2d:6e:b4:e8:ad:24:a8:
         68:e1:ac:a8:e0:3f:c2:c8:df:ce:59:27:2b:85:85:d3:01:e5:
         9c:99:7a:ca:55:8d:13:84:b0:48:1c:47:86:00:49:a5:cc:61:
         90:85:3c:fb:90:6a:09:9b:86:12:68:50:7a:3a:24:b9:dc:39:
         51:d3:f9:5b:7c:80:73:8e:e3:8d:7b:a4:09:46:24:1b:b7:8c:
         b2:66:45:10:4f:02:b4:28:69:2c:e3:ed:7f:fc:ff:3f:e5:b3:
         2c:95:d1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:45:18 2026 by rpki-client