Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
File:                     2K83cS1WsbaT720D40bADPPwST4.mft (raw, json)
Hash identifier:          DNL6G+Nqoxc3Ot4IfJFm/jHazgNqzwg6eCcP6Vv7UT8=
Subject key identifier:   89:C9:FF:7F:EF:80:FB:BC:0F:DB:51:E9:80:DC:0B:68:72:95:7D:32
Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
Certificate issuer:       /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Certificate serial:       1037
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
Manifest number:          1019
Signing time:             Fri 12 Jun 2026 17:25:31 +0000
Manifest this update:     Fri 12 Jun 2026 17:25:31 +0000
Manifest next update:     Fri 19 Jun 2026 17:25:31 +0000
Files and hashes:         1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: 8G0NKDzc00EH8jtiRmtQSRi/9YLzaVSSJAuVUeIctpo=)
                          2: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: 1K8MV4sIj8T9zYYuz63dsbeo/qY6X7HrLn7VydAG5JM=)
                          3: F0F0DEC2C43411F0836DBC7DC4F9AE02.roa (hash: LMzi/nUop3Zg3Ri+ttMW1AIJQZt36oNcqeMlHwO8Bco=)
                          4: AFCF76ECC43411F0982E427DC4F9AE02.roa (hash: jArh+Kx+M9ITkZfnTl8gN4nLiWXlDhetGK8juVgx8K0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
                          rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4151 (0x1037)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
        Validity
            Not Before: Jun 12 17:25:31 2026 GMT
            Not After : Jun 19 17:25:31 2026 GMT
        Subject: CN=6a2c410b-8185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:ac:9e:3f:3a:92:c6:ea:91:46:84:18:cb:
                    3e:ca:2a:f4:bf:11:1e:da:a9:aa:0d:70:bb:28:b0:
                    e1:09:8c:f8:bf:d9:45:fb:61:4f:4d:56:11:fb:af:
                    6b:47:e2:a6:61:83:85:d3:f2:4f:46:9a:58:83:66:
                    8d:85:01:50:b0:4d:36:af:e7:10:5b:a3:0f:76:e8:
                    2f:e9:f1:3e:1e:ea:47:f6:19:74:8e:92:ae:5f:1b:
                    ce:bd:44:ab:ae:30:3c:d4:90:f2:e0:59:37:49:f1:
                    5d:80:2f:c1:7b:49:bc:17:12:de:f5:2d:9a:f6:a9:
                    f1:12:46:ae:fa:c6:d4:9a:78:9a:53:24:a3:22:8d:
                    4e:f0:8e:2d:4d:a3:8e:aa:55:41:dd:ce:55:49:c9:
                    39:54:7b:b9:74:f4:6c:7d:b2:b9:fc:b4:7b:9e:7c:
                    c2:ae:03:23:50:de:b6:1e:78:0f:e9:1d:4b:e0:6d:
                    d6:94:9f:0a:3c:cb:53:b3:9d:bd:75:46:ab:f0:53:
                    5b:5f:07:9f:42:d3:97:21:50:af:c5:c9:9d:2c:eb:
                    39:00:cb:7c:8f:02:d0:e2:be:91:8f:19:5e:47:11:
                    87:a4:7b:25:5b:b9:c5:98:3e:1b:ba:89:8a:e7:f7:
                    af:78:b2:15:31:a2:7b:7e:74:52:f4:9a:ea:87:23:
                    87:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C9:FF:7F:EF:80:FB:BC:0F:DB:51:E9:80:DC:0B:68:72:95:7D:32
            X509v3 Authority Key Identifier:
                keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:dc:11:ef:e8:94:20:78:26:62:d6:2c:03:00:0f:b3:76:13:
         7d:27:37:81:8d:aa:4c:e1:80:40:f5:d9:7a:a4:fd:7a:08:7a:
         a5:a1:c6:08:bc:a6:cb:f1:fc:08:35:b6:96:4c:72:11:fd:2e:
         0d:3e:59:7d:15:d5:3a:96:d6:91:96:7d:2b:ff:9b:af:f5:9c:
         21:2c:a5:ce:19:81:26:47:14:5a:c9:06:a0:0b:ba:96:49:89:
         75:29:fe:6f:18:c0:a2:b1:1e:89:86:0b:1d:78:ba:a4:f1:b0:
         03:4a:b9:c8:f0:e6:1c:67:16:88:d0:63:78:b6:24:4d:4e:46:
         d3:bd:58:09:f6:d2:c8:5e:c8:55:91:c6:fe:cc:91:e8:76:99:
         64:7b:2f:3a:64:c1:63:1e:b1:c6:a2:62:c7:e5:85:ec:c0:e3:
         43:31:5e:0b:de:05:33:25:02:47:84:af:6a:fd:00:f2:18:b4:
         ab:ef:d2:91:df:e8:eb:8e:ff:8a:03:32:b0:bc:7a:2e:3a:b7:
         62:84:be:da:70:44:70:ee:f2:d4:c5:87:a4:a3:bd:4f:4b:7b:
         70:54:45:e9:db:66:4d:ab:2d:b2:58:71:ff:36:1e:a2:58:f6:
         c8:c4:91:df:88:1a:a6:18:98:5d:d2:5e:70:85:ac:90:4f:1b:
         82:6f:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:53:24 2026 by rpki-client