Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
File:                     M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json)
Hash identifier:          IA+yhxUC/ZvKI2VjNiJSjGZjr8U3UMXgC95SVivYCtE=
Subject key identifier:   D0:92:91:B1:6C:55:DF:38:20:BE:D5:F8:F6:83:5D:2D:4E:F4:98:DA
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Certificate issuer:       /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial:       0411
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
Manifest number:          03FD
Signing time:             Sat 13 Jun 2026 00:31:04 +0000
Manifest this update:     Sat 13 Jun 2026 00:31:04 +0000
Manifest next update:     Sat 20 Jun 2026 00:31:04 +0000
Files and hashes:         1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: keVpa54PCE7V14u+r/CQww2zfN8o6smY0U9X4LSKJp4=)
                          2: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: TWN/2cVZRi9uapuQsJLFYt79FGpaZGSlGK7OEP/EpgM=)
                          3: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: znuT/lx1cVo1Y53YyyfaSdImgaQ4zBt/+bOXogW6iF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
                          rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0
        Validity
            Not Before: Jun 13 00:31:04 2026 GMT
            Not After : Jun 20 00:31:04 2026 GMT
        Subject: CN=6a2ca4c8-904b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:7b:2f:85:e2:f8:85:bc:02:42:f2:68:53:
                    17:ec:7a:4c:e7:c2:07:35:5b:81:b0:ff:06:4c:b7:
                    3f:84:29:e3:bd:05:71:3e:9f:46:4c:18:4c:9f:01:
                    65:0c:e2:5f:a2:e7:a8:17:3d:31:50:f2:27:f0:8f:
                    3a:21:c3:46:a0:9b:b3:b3:7f:29:3a:fa:9a:7d:c1:
                    68:3b:03:bb:ea:0d:02:9b:28:c1:bf:c4:58:49:64:
                    6c:0e:3a:ac:f4:14:c5:42:99:e2:38:e0:fc:a4:e9:
                    15:85:8b:c4:49:56:9f:a3:8a:22:25:c8:0f:3f:32:
                    4b:a8:43:c3:65:8e:ae:d1:96:3b:57:d2:72:30:87:
                    cf:b4:71:37:33:41:e4:ed:08:da:6f:7c:3f:0e:a6:
                    98:f3:5d:86:af:61:72:bb:9e:fb:3c:87:8d:9d:bd:
                    69:c5:e9:8f:17:cf:68:b8:25:1e:15:3b:dc:88:03:
                    a1:5f:c3:5c:01:47:d8:61:29:91:35:ca:ff:46:99:
                    93:24:c0:59:95:9c:a3:56:1b:d8:1d:a7:f1:4b:78:
                    29:9b:ea:e9:a8:57:18:b2:89:3a:8e:27:1f:d3:b1:
                    30:98:32:68:2c:6a:18:99:1a:c5:02:a4:d4:c8:7c:
                    fe:6a:33:11:8d:76:02:04:fd:fc:27:8a:69:f0:bc:
                    64:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:92:91:B1:6C:55:DF:38:20:BE:D5:F8:F6:83:5D:2D:4E:F4:98:DA
            X509v3 Authority Key Identifier:
                keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7e:a4:ef:7c:1d:5a:75:49:2b:2d:d5:11:11:55:f4:e5:67:
         bd:53:0d:7d:e4:dc:2d:0a:4f:ab:5e:d1:ff:dd:12:a9:ca:ec:
         b7:31:7a:c1:2f:a1:95:89:be:18:cb:ce:15:6f:e4:0a:63:1b:
         43:a8:84:e5:d7:09:bd:c5:db:00:74:16:96:f2:fb:8c:32:e4:
         59:70:f8:8e:44:ed:1c:6b:8c:a3:99:ea:97:1a:09:6d:9d:9c:
         79:35:26:c4:53:70:d5:62:b4:67:34:25:be:9c:1c:bf:3e:ef:
         d4:f7:3a:f4:55:c4:2b:fa:a1:57:25:b1:af:ba:84:b8:65:02:
         52:ad:23:53:de:59:04:be:b2:cd:4a:82:6e:8e:59:28:ce:d1:
         5c:75:38:9c:5c:a2:8a:e3:64:f6:7f:d4:e0:55:31:9d:bd:66:
         6a:16:21:99:42:b2:8d:d7:58:42:94:fa:20:a6:c7:ed:c7:be:
         af:32:0d:42:33:4d:8a:cd:5e:21:50:57:c9:ca:19:14:06:d9:
         b8:3f:92:78:dc:9e:00:41:db:38:1d:dd:c5:68:3a:21:aa:e6:
         34:81:c0:06:57:9c:df:6e:b0:f7:63:93:f2:19:77:b3:6c:8f:
         52:f3:9c:03:ce:30:9e:c9:96:ca:b1:87:72:46:95:d7:38:96:
         6a:ea:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:31:16 2026 by rpki-client