Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
File:                     -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json)
Hash identifier:          VqPvNEeJrWi0ufK6FQ/Yjtk0jBJIRt8yg8q/ETa9khY=
Subject key identifier:   85:FF:CE:6F:2B:CA:27:4E:A9:6B:85:8B:A6:83:5E:1C:EE:FA:C4:69
Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
Certificate issuer:       /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Certificate serial:       2422
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
Manifest number:          2402
Signing time:             Fri 12 Jun 2026 15:46:55 +0000
Manifest this update:     Fri 12 Jun 2026 15:46:54 +0000
Manifest next update:     Fri 19 Jun 2026 15:46:54 +0000
Files and hashes:         1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: rC6QqUCZYU4OwowdmDpysOa8AyEdJyLw0rqcv8pSPzM=)
                          2: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: X4uS0rI/nqhGkS7n3+3yxAC8v3e2kcE3Z3BQmxfknoQ=)
                          3: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: aqWngdjtRLqUSkhygiAXUU1YJGxW+DXL13gbX9vTVWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl
                          rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9250 (0x2422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
        Validity
            Not Before: Jun 12 15:46:54 2026 GMT
            Not After : Jun 19 15:46:54 2026 GMT
        Subject: CN=6a2c29ee-bce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:a8:dc:b3:34:cf:07:f6:e3:8e:d0:55:cb:
                    9b:c8:7a:09:20:65:e3:b0:2d:a4:12:cb:0c:ea:05:
                    d9:35:69:43:3c:7e:ca:b0:32:4b:b6:16:54:a1:32:
                    9a:ee:c9:6b:18:57:bd:55:8b:f4:8b:6c:3d:c9:5f:
                    a6:6e:d8:20:e6:0c:11:39:3a:35:d4:68:43:6c:7c:
                    3f:3f:35:83:9f:10:07:d6:ff:8e:7d:71:b0:48:4f:
                    2e:e6:58:4c:54:5e:91:fb:bb:10:65:ad:c3:8d:62:
                    f4:dd:72:51:e9:52:3e:34:0c:4b:57:87:e2:19:11:
                    73:05:68:62:cd:1e:5a:42:3e:4b:f2:53:12:50:85:
                    2a:b5:17:87:7e:5f:00:59:c6:a4:cc:96:29:bb:b3:
                    4c:01:c6:c5:6b:cc:07:ba:4f:bc:70:85:28:15:f1:
                    06:be:a5:de:20:a2:d5:c8:53:f0:f0:fd:4a:6b:0c:
                    cc:d2:f9:b1:27:b4:9d:9d:a2:23:85:fc:f4:dd:7c:
                    5c:15:23:5c:b2:6c:e9:11:3c:69:65:82:7d:21:99:
                    ca:83:56:7c:60:36:7b:79:cc:1f:b9:ec:75:50:2a:
                    a5:44:1d:82:e2:bd:7a:e0:3e:24:4c:6a:d0:68:df:
                    64:4b:38:04:b9:54:46:ff:13:e7:96:9c:46:ca:83:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FF:CE:6F:2B:CA:27:4E:A9:6B:85:8B:A6:83:5E:1C:EE:FA:C4:69
            X509v3 Authority Key Identifier:
                keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c4:22:ff:bc:59:d1:fd:7d:c4:9a:7c:a8:49:d2:28:3e:a6:
         7a:d4:28:3d:b4:eb:16:39:5a:78:72:c2:cd:c6:ef:7c:9f:47:
         dc:11:c2:72:25:9b:a3:a3:aa:50:4e:10:a7:d4:9b:23:cb:b6:
         07:b2:6b:5e:2c:a9:eb:1f:42:cc:7a:75:d6:c0:f0:2b:60:80:
         4e:a4:a4:cc:9c:1b:2c:38:57:57:f3:25:6a:c3:61:40:ed:59:
         87:81:f0:0f:c3:3a:56:f8:1e:cd:35:62:9a:6d:dd:a5:c9:79:
         39:82:ab:52:0a:f9:f0:de:91:8d:fd:86:a2:2b:2b:0b:cb:92:
         09:06:11:4b:fb:ba:9b:93:42:1d:04:d8:58:20:dd:62:0d:a6:
         6e:3b:ec:0b:72:55:60:77:fe:7c:f4:bc:18:5a:0e:73:1e:3e:
         28:1b:d0:14:dc:db:f2:02:ce:6a:c6:5f:a7:12:7b:a2:40:85:
         7c:d1:72:32:21:ff:7d:be:50:6e:b4:58:b2:72:76:95:50:c4:
         60:a8:56:29:e1:c7:79:50:db:00:60:22:7d:de:ea:4b:81:ce:
         fe:1c:eb:dc:83:45:1f:c5:21:36:66:08:c3:c0:e4:66:9f:99:
         1c:12:4a:66:89:b3:ea:5d:ba:82:30:90:7b:00:26:20:ad:e5:
         ca:a1:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:49:27 2026 by rpki-client