Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
File:                     I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft (raw, json)
Hash identifier:          clKx91xzu6hQ8pLOHNmoKKV9gcIhowFvrV+5Vgaygbs=
Subject key identifier:   3A:CE:82:9F:D4:4D:91:98:E9:B5:A3:14:46:09:CE:22:5A:9B:51:23
Authority key identifier: 23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28
Certificate issuer:       /CN=A919DB08/serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
Manifest number:          44
Signing time:             Sat 13 Jun 2026 08:34:23 +0000
Manifest this update:     Sat 13 Jun 2026 08:34:23 +0000
Manifest next update:     Sat 20 Jun 2026 08:34:23 +0000
Files and hashes:         1: I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl (hash: 9WzArLTnZhR6GDtuK4rDVoSSmv6aoGAit+zGq6q0L3E=)
                          2: 3F7E724808FA11F1B69E3FD3313D8C67.roa (hash: NZDM0P5b400zVrhyd2jzSLfxw/qGeaxR3jXe0NSn67o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl
                          rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DB08, serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
        Validity
            Not Before: Jun 13 08:34:23 2026 GMT
            Not After : Jun 20 08:34:23 2026 GMT
        Subject: CN=6a2d160f-3c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:8e:8a:b8:69:9e:a7:c2:87:ae:2a:09:3d:
                    82:a6:7e:0d:99:fb:59:76:b2:c4:86:85:23:ac:a5:
                    99:d0:12:ab:f6:da:28:15:29:c4:86:93:9d:c7:65:
                    a8:83:2e:13:77:a8:d5:15:75:5a:de:90:d4:43:90:
                    5a:fc:9c:a7:b1:cc:3e:ae:a2:c4:2f:14:bc:0c:8d:
                    45:5d:89:69:74:cb:24:92:52:b6:b9:77:78:21:e2:
                    6e:60:b1:a7:9d:78:98:0b:75:fa:d3:ed:ed:75:61:
                    f4:fc:36:af:af:b5:b0:b6:cf:d9:9b:5b:e1:c5:25:
                    6e:17:4d:14:7a:23:44:8e:c5:47:ba:0b:b8:e7:43:
                    48:21:ce:bc:f1:12:3f:78:6c:35:01:ac:f3:ff:f5:
                    e0:e8:86:d7:72:c7:1f:83:9c:19:36:f1:db:33:94:
                    4c:48:50:b6:df:49:cd:d4:fe:be:99:b3:21:c1:a3:
                    41:6d:6e:9d:50:2a:9a:d0:15:5b:49:0d:a3:87:cb:
                    23:c1:d2:5b:ba:49:4e:f7:e0:31:61:ca:cc:93:eb:
                    c4:f5:d6:fa:14:71:e2:df:c3:31:26:ff:67:1a:59:
                    03:3a:45:b7:b4:6a:de:f7:57:f3:79:56:af:d8:52:
                    85:11:f2:86:be:5d:40:21:40:e7:9a:88:d2:ef:32:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CE:82:9F:D4:4D:91:98:E9:B5:A3:14:46:09:CE:22:5A:9B:51:23
            X509v3 Authority Key Identifier:
                keyid:23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:43:d6:05:dc:de:2d:04:76:9a:17:e6:20:d7:74:e2:10:10:
         3a:a6:31:89:d0:58:83:52:36:7b:50:f5:bc:d9:2f:56:5d:b5:
         4e:cc:6a:40:45:f8:23:8c:c0:6a:02:aa:da:f0:2d:44:99:58:
         24:00:06:e0:53:ba:68:6a:3b:26:74:8e:6a:0d:06:f0:57:87:
         5c:7e:d1:39:76:4f:ea:e9:45:ec:73:ee:85:90:ce:9b:c5:ab:
         1e:4b:d4:8d:56:ea:a4:b0:2b:99:98:44:11:ee:43:f9:b7:65:
         dd:64:5e:94:78:d6:c4:10:0e:d0:3c:6d:77:9a:2b:0a:9a:36:
         11:e6:8d:16:16:1b:0f:ca:60:61:a2:34:b7:3f:e6:43:b0:f9:
         19:b0:ad:7b:43:48:d1:fe:a9:e7:22:79:f7:5b:1e:55:22:07:
         aa:09:48:ca:e2:6b:ea:f2:c8:3e:dc:f5:b2:eb:c1:a0:41:34:
         7e:bc:b0:3e:21:98:3f:e9:6e:ca:85:bf:a2:48:b9:11:b4:1d:
         7b:44:cc:8b:30:f0:c6:e9:4b:73:b7:6c:a2:bf:aa:a8:d6:19:
         e1:67:a8:91:74:af:72:ec:38:b8:ca:a2:72:ce:fa:d2:29:f6:
         ea:a5:5f:7a:97:5b:75:61:7c:76:2c:a5:a9:f2:11:7c:fe:ae:
         37:a0:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:31:28 2026 by rpki-client