Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
File:                     -NaTomlkzTxaGZ0sJu0iZHog534.mft (raw, json)
Hash identifier:          KOQ4fN1oVwCXAluqadTOS3/ibdnaa115PNIHB1gs0+0=
Subject key identifier:   97:82:79:9A:A6:72:4A:9F:BB:67:E1:FD:85:86:38:3A:70:FB:22:12
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Certificate issuer:       /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial:       02DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
Manifest number:          02C9
Signing time:             Sat 13 Jun 2026 01:27:43 +0000
Manifest this update:     Sat 13 Jun 2026 01:27:42 +0000
Manifest next update:     Sat 20 Jun 2026 01:27:42 +0000
Files and hashes:         1: -NaTomlkzTxaGZ0sJu0iZHog534.crl (hash: ne+bhc4R9E3VNyeRFk5QxXAluKWvS+64h/chNOhL7fE=)
                          2: 256273EE355011EEBCB7D945C4F9AE02.roa (hash: d181Z1DYLcItp5l9IsZ1mcEBRFCLJxml8DnOv1hi/n0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
                          rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF67, serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
        Validity
            Not Before: Jun 13 01:27:42 2026 GMT
            Not After : Jun 20 01:27:42 2026 GMT
        Subject: CN=6a2cb20f-d099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:68:16:20:d9:37:f6:04:d3:ec:24:e0:43:
                    12:77:51:14:26:8e:ae:8a:ac:1f:7a:b2:b4:d5:3b:
                    7b:0d:df:a6:e2:dc:4c:90:89:54:44:78:87:d0:a4:
                    05:79:db:b7:41:06:6e:11:fc:46:5c:6f:fb:a9:78:
                    04:0a:e1:fe:14:2b:56:21:a2:1c:12:55:41:89:ef:
                    ca:68:be:15:80:f2:77:e0:0e:5c:0f:27:2f:f0:b4:
                    d6:46:01:0c:d2:03:5a:81:e8:89:84:9f:18:72:79:
                    88:f5:c2:dc:49:f7:da:52:39:fe:2b:5e:54:22:86:
                    71:c1:ca:05:02:22:74:00:b1:9f:40:c9:f7:bc:72:
                    9a:7c:3e:12:68:62:35:43:03:95:ab:9b:55:42:61:
                    83:dc:04:4e:40:a5:79:d4:d6:36:5a:6d:51:32:e5:
                    b9:91:ff:7d:16:e0:bb:a8:14:ed:4f:41:73:8d:54:
                    71:ad:1f:a6:a4:7e:5e:3a:e5:5c:83:4d:db:76:57:
                    ac:bc:a1:44:0e:85:e0:5d:9b:a2:75:26:ea:32:e5:
                    cf:bf:97:e2:f3:84:55:bc:1d:32:a9:ef:a3:35:03:
                    04:c7:11:40:92:7f:2a:4d:79:90:e3:41:d2:98:57:
                    90:72:b2:cc:d8:f5:80:9a:7c:5e:4e:56:cb:f4:3c:
                    29:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:82:79:9A:A6:72:4A:9F:BB:67:E1:FD:85:86:38:3A:70:FB:22:12
            X509v3 Authority Key Identifier:
                keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:47:dd:7b:71:5c:6a:c0:dd:d0:13:4e:bd:51:da:88:d5:99:
         b1:46:a6:5a:e8:ad:1b:6b:99:78:6b:c2:96:38:b2:0c:27:16:
         4f:66:a2:cb:37:76:95:31:03:2d:44:4c:b7:18:7b:2c:6a:90:
         c5:f7:79:60:01:15:8a:6a:69:16:2a:d2:33:dd:60:73:0b:54:
         3a:94:7f:5f:3d:02:4b:db:8b:8b:de:db:da:dd:26:94:1e:0d:
         de:dd:2c:07:4e:d6:96:bb:6c:74:f0:c5:20:b2:0b:cc:4c:25:
         26:3b:80:dd:a1:04:5d:08:9d:d6:84:ac:c2:93:4d:10:32:ec:
         2a:74:f5:e1:ed:72:d1:73:19:c4:7d:4f:a4:3c:62:c1:4f:d0:
         78:44:6c:02:49:65:b5:5a:0d:ce:4a:33:35:4b:72:a5:c1:b9:
         06:f1:ae:ed:d7:f8:73:38:89:bf:c6:b2:40:95:22:36:de:c1:
         f6:f6:8b:dd:e4:6f:61:5c:de:df:72:49:da:1d:cf:57:5f:d8:
         88:1b:f2:1c:8c:8f:00:d7:65:9a:a4:b2:f2:f0:17:20:31:91:
         ff:2b:4c:ae:ee:ce:ed:0a:a5:80:1f:08:bc:67:1d:dc:83:0f:
         08:dd:eb:6f:d1:a0:b4:0e:25:ad:38:ce:fb:e4:a9:71:03:27:
         7a:99:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:25:12 2026 by rpki-client