Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
File:                     he9PUr5sDQk3OGmpACI4YoIz6-8.mft (raw, json)
Hash identifier:          gX811nL6wtabttFXBaT1jUol5pRpZZ4aAN45JJLMhX4=
Subject key identifier:   22:DB:4F:81:C1:2D:A4:CA:D3:AD:DC:1E:8A:35:2E:A0:FF:C2:E0:B3
Authority key identifier: 85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF
Certificate issuer:       /CN=A9189218/serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF
Certificate serial:       063F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
Manifest number:          0638
Signing time:             Fri 12 Jun 2026 22:46:43 +0000
Manifest this update:     Fri 12 Jun 2026 22:46:42 +0000
Manifest next update:     Fri 19 Jun 2026 22:46:42 +0000
Files and hashes:         1: he9PUr5sDQk3OGmpACI4YoIz6-8.crl (hash: Ajpnl9SIdeiKiIUNPGGBky7hl+EhlglMEEO9HLQRIME=)
                          2: 82A9E362DEC111EB9010BE6AC4F9AE02.roa (hash: r63sbdb81aS0Y3D1jhysh8/CnvmDL9CRF/6oUTPKQNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl
                          rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1599 (0x63f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189218, serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF
        Validity
            Not Before: Jun 12 22:46:42 2026 GMT
            Not After : Jun 19 22:46:42 2026 GMT
        Subject: CN=6a2c8c52-1cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:c3:78:62:e5:5b:4e:ee:c3:af:e5:fd:a4:
                    15:dd:36:70:0c:8f:03:8f:aa:61:96:a3:54:2c:b6:
                    88:4c:53:9d:63:84:77:2d:14:d3:f8:18:2f:a7:f2:
                    ec:67:f8:e2:eb:19:c8:bf:a3:3c:12:8e:88:da:40:
                    53:5f:34:3e:f1:22:e9:c0:2b:cb:ef:7d:5b:92:69:
                    1e:6e:57:ef:3e:4e:8e:d3:64:f6:f9:c8:4a:8e:2a:
                    8e:d6:34:20:19:7f:6f:eb:78:0f:a5:f6:8a:d9:b6:
                    e8:91:56:12:58:05:20:a0:ce:d5:d9:db:f6:3d:da:
                    f8:c4:24:5d:d5:5d:4a:8a:22:59:ed:87:3d:19:b1:
                    7e:76:24:a5:3e:bb:4e:e0:4f:28:93:12:5d:1c:ae:
                    63:68:a4:f3:7f:6c:9e:2c:c1:b7:89:8b:2d:c8:f0:
                    d1:c4:1f:ff:18:de:73:43:3e:99:60:99:55:a3:7b:
                    f4:66:f3:dc:8e:93:ef:35:68:de:0d:58:bb:63:73:
                    66:6d:cf:8f:44:d0:d7:74:52:17:a5:f2:ed:7a:de:
                    bf:6c:72:78:51:14:fe:2d:9c:a3:fe:40:d2:17:4e:
                    b5:18:66:35:c4:ad:e4:66:d0:0c:09:04:c5:46:67:
                    25:83:25:31:c5:ef:f9:a5:b9:02:de:bb:f0:d5:51:
                    a9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DB:4F:81:C1:2D:A4:CA:D3:AD:DC:1E:8A:35:2E:A0:FF:C2:E0:B3
            X509v3 Authority Key Identifier:
                keyid:85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:21:3a:74:4b:56:bb:c0:ba:ae:af:bd:f9:90:6b:8b:54:fa:
         7f:16:a6:f8:8b:9d:d7:ba:25:04:d5:fd:97:39:04:d3:c8:73:
         ee:bb:75:0f:7f:58:d7:bb:65:06:e5:52:0e:24:98:05:7f:0c:
         70:a7:8e:8f:87:b4:ec:a1:0d:a8:8a:3b:69:90:62:83:04:e5:
         3e:2e:36:47:05:9d:1c:00:75:d3:83:56:e2:73:c0:33:25:9a:
         2b:52:2f:6a:dd:d5:53:7a:68:d4:9e:4a:56:64:6f:47:75:12:
         85:6d:0f:30:2e:ac:7b:b9:38:09:50:a4:ff:0b:2f:48:e2:0c:
         25:de:b8:5f:84:c5:7c:f1:aa:77:dc:0a:e0:d1:71:a9:ba:47:
         87:0e:d6:81:2b:af:21:31:99:84:f7:d6:76:f6:db:7f:ec:2d:
         35:47:61:a9:aa:25:c8:77:82:ac:9a:77:c7:65:a9:96:9e:0c:
         e7:c6:36:68:f2:3d:59:4b:59:44:66:c2:5e:6a:95:27:42:a2:
         29:4c:f0:d2:80:f5:a5:10:18:ea:ac:75:8d:73:2b:29:7c:77:
         1d:5f:c9:a8:ef:66:d6:00:bb:70:b5:e1:57:09:7e:38:22:4b:
         fb:e4:39:d7:0b:04:e4:2e:e4:d3:4f:a4:66:ce:60:41:78:b8:
         95:a2:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:56:57 2026 by rpki-client