Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
File:                     125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json)
Hash identifier:          zogCR/oLaD4G9sOvT64Z3sDG13caJQxBiOVsLoM7VTA=
Subject key identifier:   3E:3B:4A:05:9C:C9:A8:CC:64:FD:E4:5D:2D:C2:67:95:4B:7C:02:D9
Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC
Certificate issuer:       /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
Certificate serial:       05D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
Manifest number:          05C8
Signing time:             Fri 12 Jun 2026 23:07:49 +0000
Manifest this update:     Fri 12 Jun 2026 23:07:48 +0000
Manifest next update:     Fri 19 Jun 2026 23:07:48 +0000
Files and hashes:         1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: jZrJs4/4qT8nA0rtzjqjDoSnlj/J0laJZPlRJJmAHj4=)
                          2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: CcimU5bAMxt6xcfnTJqAhexXFkbfOFwQL0JFGN/P7Es=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl
                          rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
        Validity
            Not Before: Jun 12 23:07:48 2026 GMT
            Not After : Jun 19 23:07:48 2026 GMT
        Subject: CN=6a2c9144-3581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:48:f9:82:72:50:ab:4a:cc:38:f7:9c:49:
                    c9:b1:b7:ba:bb:ce:19:b7:d7:de:1b:29:88:21:a8:
                    3d:d7:d2:04:72:ea:29:c8:b1:0a:a5:3b:05:fa:f7:
                    0c:d0:25:e0:af:9b:ed:d3:8d:96:b9:92:ba:d7:31:
                    a9:44:9b:1c:58:a8:fc:4d:f3:2d:94:c1:39:50:de:
                    41:8f:c2:be:77:09:68:bf:f2:19:19:5c:21:d9:da:
                    cb:70:ad:1f:cc:b5:b2:df:af:ec:c4:c7:94:29:ea:
                    ce:44:6e:23:20:e3:e8:7e:21:be:af:ad:4d:d4:4a:
                    12:18:c5:5e:2d:a2:23:10:ce:1f:d3:f7:dd:40:20:
                    80:d6:de:63:81:2c:b9:96:93:e5:88:99:33:96:55:
                    83:66:fe:02:7f:bf:ec:bb:69:c7:e6:6a:09:ac:91:
                    4a:3c:a7:a6:0f:83:6f:ef:9a:c3:39:5e:5c:20:91:
                    c8:a7:3d:86:ce:29:40:2b:1a:9d:c3:7f:1f:de:35:
                    64:70:c3:6e:39:63:51:fa:6f:1b:e6:61:f8:37:a4:
                    a6:fa:f7:8a:71:98:d5:85:9b:1d:6a:8c:57:22:28:
                    92:43:c9:76:85:1a:94:ec:b0:e7:b9:93:91:b9:fa:
                    eb:9d:e3:ee:9d:6d:3f:81:78:a5:f2:84:1f:94:69:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3B:4A:05:9C:C9:A8:CC:64:FD:E4:5D:2D:C2:67:95:4B:7C:02:D9
            X509v3 Authority Key Identifier:
                keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d3:03:55:59:39:26:98:a5:53:cd:a1:8a:89:9b:d7:05:8e:
         5d:e8:77:9c:10:21:b6:e4:44:c0:8b:c6:37:32:21:98:de:1c:
         c0:ce:a1:2a:d3:0e:f0:1d:a6:7a:60:f9:76:c2:7f:71:9b:81:
         98:37:e6:0a:7d:2b:c4:6c:68:8e:34:de:37:50:51:2a:47:25:
         15:fa:06:2f:fb:10:cb:fa:fa:35:52:b1:58:2f:57:77:04:52:
         f3:b0:cd:35:24:27:d7:c7:00:91:cd:5f:58:99:58:fc:b7:c4:
         f1:e7:9e:da:ab:7a:c0:30:d0:fe:6a:5f:39:e5:87:f6:c7:97:
         16:19:9f:bb:70:b4:8e:5b:1a:6e:3d:3b:88:ab:66:0a:fa:a7:
         90:b9:9a:77:bd:be:27:66:86:31:86:33:85:d9:7f:42:73:25:
         97:4c:c7:fe:bd:a5:6a:ed:79:4b:17:2c:7e:d2:57:ea:47:ab:
         9f:8e:fd:a1:06:eb:df:18:f4:55:26:3e:14:d5:64:bd:c3:e3:
         9a:08:44:f2:3d:a7:7c:08:01:2b:fc:a8:85:87:b1:c6:e8:0c:
         c7:5c:50:fe:67:95:02:6f:2b:1f:f7:9c:c7:0b:6b:0a:b7:a5:
         8d:b4:94:35:d5:1e:63:1b:44:be:2a:03:03:c6:7d:c3:c8:63:
         19:4c:01:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:59 2026 by rpki-client