Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
File:                     ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json)
Hash identifier:          tpp2oM3FFJtVUWWAWtGv10aEbv9fh9bBml4SlF4IqLc=
Subject key identifier:   A2:DF:B7:15:B5:D0:A1:9D:DC:EA:8E:F5:86:CC:86:4E:6F:2B:79:A8
Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
Certificate issuer:       /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Certificate serial:       0E02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
Manifest number:          0DEF
Signing time:             Fri 12 Jun 2026 17:50:40 +0000
Manifest this update:     Fri 12 Jun 2026 17:50:39 +0000
Manifest next update:     Fri 19 Jun 2026 17:50:39 +0000
Files and hashes:         1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: m/UFiyQIH9x0q7xsXuE/OrVRiOcKg9SoH53/pCUk4GM=)
                          2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: h8Yq1El+9tmCY/aSU/vFeXJAQYEI+HLkPqW4KvJG1Ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
                          rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3586 (0xe02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1857, serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
        Validity
            Not Before: Jun 12 17:50:39 2026 GMT
            Not After : Jun 19 17:50:39 2026 GMT
        Subject: CN=6a2c46f0-24f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bd:ee:64:03:a9:9c:af:b2:c3:01:83:08:2d:
                    36:a0:4e:56:4b:ba:d4:0b:eb:0c:ed:24:18:a4:96:
                    cf:74:06:4c:6a:a0:58:0f:01:1f:59:41:49:71:06:
                    0e:df:6b:d7:1e:ad:91:10:9a:49:fe:57:53:71:51:
                    80:f0:29:0f:cf:93:c5:58:71:05:17:ee:e5:6a:ee:
                    63:29:de:01:82:4d:b4:90:8f:13:8d:06:94:87:1f:
                    1f:a7:03:c5:01:9c:75:6e:3c:5f:74:cf:c0:23:9a:
                    bd:2c:52:a5:8f:b0:d7:25:99:70:78:dd:e2:6a:2a:
                    5c:fa:1f:d0:2e:06:8a:de:61:af:74:fe:bb:5e:ec:
                    b9:9c:a6:5b:9f:5d:4b:1d:9d:f8:9f:a3:ed:2e:ec:
                    be:dc:d0:67:ad:96:98:0c:e4:c4:c1:d1:5c:85:0c:
                    cf:cc:9b:bc:96:fb:e0:76:05:21:8f:0f:f2:fb:1b:
                    74:6d:b9:17:f4:8b:fb:28:51:82:19:f0:06:46:97:
                    ea:24:72:d3:ce:65:d6:64:ef:8c:40:2b:af:28:6a:
                    e2:e8:1f:97:8f:f4:ae:27:76:04:73:c1:ab:ce:5e:
                    09:a8:3f:48:7f:0a:04:c7:18:bd:91:24:a3:ae:f3:
                    93:5c:83:1b:91:8b:8f:a3:a6:1e:bf:2f:60:53:a3:
                    cc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DF:B7:15:B5:D0:A1:9D:DC:EA:8E:F5:86:CC:86:4E:6F:2B:79:A8
            X509v3 Authority Key Identifier:
                keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ad:4f:2e:86:0e:23:96:0f:02:58:89:a3:92:13:e4:4b:77:
         ce:91:fc:de:f2:02:e3:a4:13:da:a0:16:c0:29:25:f5:08:cb:
         2e:2f:45:6c:75:2d:df:9d:1b:7c:1d:6e:ea:69:c5:75:7f:6b:
         99:ee:59:e9:cf:54:17:78:20:20:62:fe:60:7c:1c:f5:30:22:
         53:44:62:41:68:4f:c6:da:85:51:74:25:dc:67:df:06:4d:30:
         05:c6:c8:6a:58:f2:05:93:60:0b:4e:63:b4:56:28:de:5f:02:
         e9:5b:f2:99:2f:d3:10:a4:5c:b2:e5:e1:89:96:83:01:ff:49:
         8a:db:47:5d:c6:ce:6b:6e:19:b8:ae:96:fc:24:57:94:12:12:
         1b:8b:ea:fd:33:ab:75:8b:6f:0e:97:e0:1f:1e:29:4a:be:da:
         39:08:6c:3f:72:2f:38:77:84:63:6d:ad:ee:f3:41:e3:79:48:
         24:d1:77:7f:0d:fb:99:24:ff:f6:88:dd:16:c2:65:0e:f8:1e:
         ed:96:8c:cc:0a:dd:a1:f5:95:e0:59:dd:4f:8d:12:cc:23:d0:
         9e:ae:69:47:3d:44:57:4d:ca:65:f2:f9:33:a0:d8:92:3e:b3:
         99:e6:e6:e9:62:cb:55:9b:70:e0:6f:0a:59:3c:b0:b9:94:78:
         fb:5b:ed:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:52:38 2026 by rpki-client