Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
File:                     r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json)
Hash identifier:          q64mYv7bGN+ePBl8em1xqMU0kKqq76iXurOAzo/pnXI=
Subject key identifier:   C0:CE:93:01:26:7A:A2:08:B5:19:D1:D3:0A:51:FE:92:D4:31:95:BD
Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
Certificate issuer:       /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Certificate serial:       08DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
Manifest number:          08CB
Signing time:             Fri 12 Jun 2026 20:28:49 +0000
Manifest this update:     Fri 12 Jun 2026 20:28:48 +0000
Manifest next update:     Fri 19 Jun 2026 20:28:48 +0000
Files and hashes:         1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: ZlImxhOSiWNx6WWu2GKzaxTgsGj/Tpul9JaLBa/j9+A=)
                          2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: LTCbHauhqctukaxsBI7is9dw2rGH9a0l7IrT+OZtZLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
                          rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267 (0x8db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
        Validity
            Not Before: Jun 12 20:28:48 2026 GMT
            Not After : Jun 19 20:28:48 2026 GMT
        Subject: CN=6a2c6c01-82a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:8f:34:cb:5b:4f:60:1c:b1:d0:a4:0e:45:
                    56:ec:bf:92:2f:46:a6:91:93:b1:30:a3:46:e4:81:
                    8c:fa:b0:f1:85:66:37:05:a8:b1:95:3d:fb:f1:1d:
                    10:f7:b9:2e:72:47:3e:44:64:be:21:3f:f5:a6:62:
                    d0:6d:ba:5c:b9:d3:72:cc:9b:dc:13:62:4f:fe:cf:
                    41:fa:03:2b:e9:99:94:a9:b6:be:34:a7:b7:30:dd:
                    36:b1:d2:21:19:2d:7f:ae:45:07:cc:9b:47:08:45:
                    09:92:4c:8f:a4:9d:53:b3:f0:a3:71:4e:36:57:a6:
                    49:81:c1:55:f1:21:30:e1:08:f4:c1:b8:d5:ff:91:
                    9a:48:e6:a1:ac:64:7d:74:9a:0c:9c:35:b0:42:d6:
                    e0:14:5f:91:0d:49:60:cf:8c:8d:01:bf:c5:b7:9a:
                    91:3e:4d:3b:54:fa:ea:df:4d:b2:3e:49:e5:3f:c7:
                    8b:33:0d:63:00:f3:9e:b3:ae:4f:9c:e5:23:bf:9a:
                    0e:32:3a:f5:7e:f3:2d:44:0c:d9:1d:70:53:e0:9f:
                    fe:39:49:ee:43:62:e6:0d:e4:90:75:3b:09:99:7c:
                    8d:99:42:7a:94:3a:98:73:50:d8:ed:96:82:3b:ba:
                    fe:33:ee:dc:16:dd:20:2c:2e:11:2e:45:46:b7:be:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CE:93:01:26:7A:A2:08:B5:19:D1:D3:0A:51:FE:92:D4:31:95:BD
            X509v3 Authority Key Identifier:
                keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:f4:14:f6:f3:d9:c0:3b:b5:8b:00:7b:c3:c0:67:c1:a3:ed:
         fb:e2:b2:a7:08:0f:49:db:be:21:75:74:06:f3:6e:ff:46:be:
         9f:1a:37:ff:1c:61:bd:7c:14:37:be:a8:aa:99:bb:bf:a8:26:
         e0:1f:dc:43:83:33:a2:7a:14:21:9b:f4:be:4c:df:2c:7f:5d:
         93:f7:fb:a4:ce:93:e6:21:ca:88:e2:5d:f0:cc:b8:ea:ce:a3:
         d9:10:46:9c:33:4c:2f:87:cf:b7:12:99:7a:c2:c4:61:75:ad:
         83:af:e5:43:a4:71:25:c4:27:83:28:c8:54:97:7e:f8:97:7d:
         e1:60:25:d7:d6:c0:c9:77:3f:43:cb:15:cb:2d:e5:27:36:33:
         84:d1:88:ad:83:24:77:3a:e2:a5:24:b8:5c:54:e3:98:17:fe:
         59:71:1c:0d:47:64:f5:d6:1f:a7:dd:7f:03:d6:a8:26:b2:b7:
         70:84:e3:26:ab:b9:53:df:09:41:fb:a0:18:be:44:70:9e:1b:
         74:f2:84:98:44:29:8a:46:d9:2b:a7:c0:f3:61:32:6b:70:5a:
         88:2e:b8:2f:b1:36:93:74:63:07:0d:e4:ab:42:ea:51:2a:65:
         08:2d:12:97:2a:9a:43:b7:b2:a9:3d:77:be:fe:51:3a:7c:6f:
         af:f7:4e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:14:23 2026 by rpki-client