Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
File:                     leqvwkta9LFytYuwGnAc_hltoZk.mft (raw, json)
Hash identifier:          KdbzO8emRx31V4yXIadZrquw16dKB96S1GFsgTG3EL0=
Subject key identifier:   D5:30:98:A9:4C:C5:0C:AD:6D:89:8E:20:97:62:DC:10:AC:62:F5:0A
Authority key identifier: 95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99
Certificate issuer:       /CN=A91972B6/serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
Certificate serial:       11E1
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
Manifest number:          11D4
Signing time:             Fri 12 Jun 2026 17:07:58 +0000
Manifest this update:     Fri 12 Jun 2026 17:07:58 +0000
Manifest next update:     Fri 19 Jun 2026 17:07:58 +0000
Files and hashes:         1: leqvwkta9LFytYuwGnAc_hltoZk.crl (hash: hKcgF8Y5hOIaDUGeh3JBwtBz5uMwojqAVRQH9UExDIo=)
                          2: 2837843AA3E811EAB397F675C4F9AE02.roa (hash: mX70QQ2yE9wPh1hnIXZOciGYYAe5yUlr20YktwOYe68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl
                          rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4577 (0x11e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91972B6, serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
        Validity
            Not Before: Jun 12 17:07:58 2026 GMT
            Not After : Jun 19 17:07:58 2026 GMT
        Subject: CN=6a2c3cee-a990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:8d:1d:8d:d0:31:e8:12:77:e0:99:29:62:
                    c1:f2:75:26:fd:5a:be:32:d2:a6:df:93:a9:cf:30:
                    3f:ba:62:7d:ac:d3:57:4f:3c:8a:0c:ea:25:bd:91:
                    17:c5:d7:81:89:62:33:d5:d9:9b:7a:1a:7e:6d:77:
                    f2:ca:b7:83:88:2d:a6:c5:1d:f0:87:8c:49:da:75:
                    54:96:6d:23:2e:12:51:4a:6b:fa:2f:55:61:21:26:
                    e4:d5:66:91:d6:97:84:9e:e6:20:93:b0:0e:f6:1f:
                    0b:39:f0:93:96:d8:36:e3:1c:ca:42:82:33:09:db:
                    f1:ee:20:f9:8d:fb:24:aa:25:a4:cc:82:94:d1:6e:
                    37:be:4a:e0:34:69:9e:f5:3e:07:fb:f2:7a:8c:fc:
                    16:e1:12:cb:e3:99:d6:ab:fa:a0:34:5f:7f:12:2b:
                    03:1f:a9:93:41:45:d5:e1:e7:e3:f7:57:e3:0c:d9:
                    c9:d2:29:ed:30:53:f5:64:68:1b:76:a1:43:80:2a:
                    99:c3:ec:e1:98:9c:34:a9:70:8f:72:2c:06:ea:0c:
                    10:4c:1c:94:33:61:ca:39:13:ca:89:31:96:8c:f1:
                    cd:ab:35:98:88:da:e6:28:24:67:01:f0:42:99:e5:
                    87:47:2d:3f:a9:ec:d7:6d:71:6b:50:55:22:e4:e4:
                    f8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:30:98:A9:4C:C5:0C:AD:6D:89:8E:20:97:62:DC:10:AC:62:F5:0A
            X509v3 Authority Key Identifier:
                keyid:95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e5:c3:9a:31:9a:e4:4a:b6:f4:ab:de:2f:9d:6a:a9:d9:9a:
         0a:c4:2e:5f:4d:0f:53:9c:2d:9d:c0:b1:bf:bc:27:c5:46:95:
         b2:3c:ca:ab:23:5c:23:ca:24:29:1d:7c:fe:2e:fa:14:57:19:
         9b:72:f1:29:d0:1f:1c:56:a4:3f:78:6b:c9:e9:03:57:18:f9:
         ca:18:09:39:45:08:6a:82:7e:21:6f:67:be:37:91:14:b8:0c:
         62:41:b3:14:f4:dd:99:39:f6:6e:e0:6a:23:9b:28:a0:93:cc:
         4d:a9:7d:00:20:a1:62:61:45:5d:90:a8:e3:f0:bf:37:ec:c0:
         9e:80:83:2e:03:ca:6b:1a:e2:9d:b1:f0:6c:36:35:20:7e:f6:
         f0:46:55:af:df:dc:c6:b2:fe:d4:9f:19:9d:67:f5:1f:62:95:
         97:e7:f8:64:34:ef:7d:24:68:17:9e:6e:dc:d1:32:56:de:f1:
         6c:1b:0d:87:0f:c6:38:d3:89:9d:5f:b2:77:ba:b0:c5:5b:b7:
         19:c7:49:da:60:1b:f6:96:74:48:b0:61:af:70:da:05:f7:e1:
         ba:e4:b7:6b:8c:4b:a8:c9:d7:fd:4b:37:44:68:7a:1f:e2:b9:
         1e:cc:1b:82:7a:e1:2d:aa:39:52:2a:6b:ff:32:7f:28:2d:d9:
         cc:a0:7a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:11:23 2026 by rpki-client