Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File:                     -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier:          015sQdrVjouwGSm7K2ocHXJnrMmaRKB1FWx668GOF8Q=
Subject key identifier:   0A:E9:76:1E:2C:78:55:63:3E:71:21:19:C9:C2:28:E0:FD:8D:2D:D3
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer:       /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial:       03A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number:          036D
Signing time:             Sat 13 Jun 2026 00:54:00 +0000
Manifest this update:     Sat 13 Jun 2026 00:54:00 +0000
Manifest next update:     Sat 20 Jun 2026 00:54:00 +0000
Files and hashes:         1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: kfcOkie/CyOqsfCavyZbyP3gf3oGRi78DAgB0FPmiNk=)
                          2: AA314EC8249811EF971CED52C4F9AE02.roa (hash: ahj5aJjebAtMEDGy0A6wCZmN0hH4iUo4uLH+PifJcEk=)
                          3: C79B240C249811EFABD23253C4F9AE02.roa (hash: BsjDl7+sYPrszHo5VW0F7g1UPG2+LbPhMDI5ZaWICRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
                          rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
        Validity
            Not Before: Jun 13 00:54:00 2026 GMT
            Not After : Jun 20 00:54:00 2026 GMT
        Subject: CN=6a2caa28-faa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:17:10:11:a1:5c:2a:5d:10:93:11:53:c2:
                    cb:9c:96:1f:2c:6d:ed:4d:5d:8d:0a:43:6b:89:7e:
                    a9:62:9f:70:61:0b:c8:79:d8:0c:90:65:a6:2e:c5:
                    9f:88:dc:b7:4d:f0:ba:60:44:c1:1d:76:99:78:b2:
                    18:84:5c:3e:0c:20:bb:80:65:57:39:0f:f2:a7:b8:
                    39:9c:7e:91:1f:f0:db:fd:4d:31:b8:44:f1:90:ef:
                    24:64:b8:a5:42:96:36:cd:38:cd:5a:c1:82:41:25:
                    e4:38:5c:b6:39:bb:4e:28:47:04:84:be:b7:44:0d:
                    42:54:74:d0:3f:c3:2d:77:79:2c:e6:53:53:4b:0e:
                    2d:d4:bc:01:9c:3b:7e:e4:b3:63:fe:71:dd:b6:01:
                    bb:ad:46:a7:5a:ac:e2:4d:1f:ec:85:5b:5c:be:23:
                    21:29:66:38:9a:a8:75:31:f5:41:b3:a8:55:3d:d6:
                    73:55:82:f3:9b:5e:b5:8e:10:b6:31:22:65:c7:b7:
                    87:3e:f7:00:4b:6f:fd:f7:3a:db:72:ac:3f:89:f7:
                    77:17:a1:fb:8f:2f:2f:f9:75:81:c8:a6:d2:36:51:
                    e0:25:3b:eb:6f:e1:0c:d6:45:4c:56:c5:b3:d6:da:
                    9d:f5:82:15:f7:34:68:7a:7f:6d:30:1d:6d:41:05:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E9:76:1E:2C:78:55:63:3E:71:21:19:C9:C2:28:E0:FD:8D:2D:D3
            X509v3 Authority Key Identifier:
                keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:71:36:0b:d7:31:57:da:8a:41:6d:41:1d:32:0c:8e:dc:7f:
         c9:26:49:3b:28:77:44:ff:05:80:a4:9d:47:e1:df:d7:fb:ba:
         61:e8:99:6b:87:5c:3f:ea:af:61:7f:f3:58:3b:e0:98:7f:fb:
         c7:7c:55:45:fd:b3:15:53:36:17:6e:14:96:1d:85:d5:bb:9c:
         6b:f9:e5:01:51:72:5c:aa:3a:f3:65:3d:43:76:7f:91:2b:a7:
         ad:05:4a:58:5f:1f:32:46:39:ee:eb:ef:3a:d7:71:d1:77:1c:
         ac:db:0a:53:2a:35:70:45:c2:4c:00:d8:66:75:6e:c0:f2:81:
         21:19:88:99:85:14:69:f6:44:9c:7a:6c:7b:27:11:e0:96:47:
         bd:93:16:80:0a:dd:e8:25:62:a1:eb:e8:90:9a:bb:4b:05:69:
         60:4c:40:4b:bf:2f:4b:bd:e4:0f:9f:c5:b7:0a:2e:91:6e:5d:
         3c:b7:ba:50:92:76:78:24:76:93:f0:29:c7:92:09:16:c0:b2:
         86:ad:20:c9:f6:06:ce:b1:71:62:95:19:d9:04:55:fa:4f:dc:
         e5:40:95:f8:0f:ce:e3:0a:f4:61:d6:af:af:ed:7e:80:76:06:
         e2:f8:d7:84:5a:ae:bd:b8:84:e5:5f:75:f8:2a:d1:2e:7d:d1:
         3c:47:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:56 2026 by rpki-client