Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File:                     Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier:          2ccp2qFEcvWC3db45hc1NdKwCB9Ac7a4SO0qWCfPsyQ=
Subject key identifier:   AB:4E:76:F6:43:1F:F6:D7:45:3A:9C:40:08:F1:75:31:C1:2C:F1:8D
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       08A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number:          087F
Signing time:             Fri 12 Jun 2026 20:50:57 +0000
Manifest this update:     Fri 12 Jun 2026 20:50:57 +0000
Manifest next update:     Fri 19 Jun 2026 20:50:57 +0000
Files and hashes:         1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: VjWHCuUd/tfU1tE0rq7w+V5rHv4ZUxmsaMXbXPw2INM=)
                          2: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: sMAmYlXlaGfYX483zQnKNNyggh6fdl5j3X0veZpEvVk=)
                          3: 1DB0529C7CA711F0A52C5966C4F9AE02.roa (hash: Jad+xXpbo9F1Si83r3/4thdMZxhxo4YYl8MwD9607wo=)
                          4: 1F5EE982235011F1ABBAE38DAE833773.roa (hash: 4vii0PEyxfAMDDStR+CEGDgcVMprRDhlhb9Z9n20u5A=)
                          5: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: v7v6WaMiJJgHGJFslronZNjFXcWnrbiRDd5BXO1kv5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216 (0x8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Jun 12 20:50:57 2026 GMT
            Not After : Jun 19 20:50:57 2026 GMT
        Subject: CN=6a2c7131-96d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:d5:09:e8:3c:e9:d4:00:79:27:6e:51:4e:
                    03:d0:96:2c:b9:d0:c1:d6:83:64:91:90:40:6d:58:
                    86:d6:11:a0:61:55:b4:0a:bd:f6:b7:94:bd:ed:e0:
                    8b:7b:e6:ca:b0:24:4f:7a:a8:f0:2d:40:02:87:21:
                    c3:f6:62:08:fb:f8:74:20:5a:82:90:6c:f3:3f:8c:
                    f0:f5:b6:7c:5c:88:db:ee:91:fb:4d:3f:2b:f8:44:
                    34:22:55:78:28:fb:56:eb:64:2b:0f:6a:f2:3d:12:
                    1e:3d:f1:b1:93:7c:64:f4:8c:62:31:73:e7:c4:23:
                    e6:4d:7e:be:5d:bf:3d:b7:83:8e:3d:6c:ee:b4:a1:
                    d1:4e:cf:59:b9:84:7a:3c:99:93:79:96:18:c5:29:
                    23:25:ff:8e:53:70:06:9c:3c:07:2d:52:f7:38:b4:
                    76:e4:b1:60:84:ed:c4:94:16:e7:85:6b:67:c6:2e:
                    a8:4e:7e:a1:78:07:98:a1:11:9e:d7:43:04:6f:2e:
                    06:cc:60:f3:bb:e0:f3:18:22:a1:ae:f2:0a:42:78:
                    ba:30:06:0f:59:dd:c9:91:ef:6a:01:d7:64:67:c0:
                    a8:e9:05:4b:32:f6:4b:6f:53:83:1f:c0:d5:03:fb:
                    d7:59:0c:de:f6:9d:8d:4f:fd:ef:4f:79:78:fc:55:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4E:76:F6:43:1F:F6:D7:45:3A:9C:40:08:F1:75:31:C1:2C:F1:8D
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:eb:f0:16:73:97:e9:34:4d:2b:98:ec:1f:e1:50:32:12:d5:
         7e:03:22:c4:c6:c1:a2:22:ac:cb:fd:89:6e:d6:19:7f:4e:55:
         c1:c7:ff:b6:f8:92:13:5d:99:46:99:e4:a0:9b:08:bd:36:b0:
         a0:ef:33:a4:4f:76:bc:80:c5:ef:dc:58:78:ad:55:10:34:90:
         5f:bf:78:5b:8d:ec:85:ff:ca:36:6f:e2:09:93:e1:4b:db:3c:
         20:a4:f0:61:80:7b:46:8c:8a:17:a5:4b:87:bc:71:fb:e8:8b:
         f5:7a:22:5d:75:dc:66:eb:61:a7:05:90:2d:63:0d:86:d9:23:
         c0:00:de:71:ab:7f:e9:f7:0f:56:c5:ec:cc:9d:97:9f:4b:08:
         d0:b1:70:0e:89:02:42:a7:2f:8d:14:0a:0f:66:09:ea:ec:65:
         04:24:28:3a:75:d1:e7:49:ba:06:51:97:65:af:97:a4:00:62:
         37:d3:57:1f:99:93:cf:d1:8d:aa:22:4f:80:6b:b0:34:98:61:
         e2:10:83:55:17:49:a0:e3:34:d4:1a:c4:8c:47:c2:3a:1e:63:
         18:56:7c:ea:36:69:68:92:50:98:6f:42:b8:2d:3a:0c:c8:0b:
         54:d6:11:f6:43:b2:29:ba:0b:1a:73:12:0f:de:b1:ed:70:bc:
         72:51:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:19:00 2026 by rpki-client