Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
File:                     K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft (raw, json)
Hash identifier:          +DUXLerI2UTyE6Gonu6rXUkWPuNI/wcC1Axnc7kXqp0=
Subject key identifier:   63:E8:48:E4:80:8D:EF:0C:9D:C2:63:F9:8A:06:2B:94:CB:FA:9B:C3
Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
Certificate issuer:       /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
Manifest number:          020F
Signing time:             Sat 13 Jun 2026 02:57:41 +0000
Manifest this update:     Sat 13 Jun 2026 02:57:41 +0000
Manifest next update:     Sat 20 Jun 2026 02:57:41 +0000
Files and hashes:         1: K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl (hash: jcnuxU6bQfV0E7xJ8pDq47pl1uha3dpVmZGKrUuJHGw=)
                          2: AB366D1C409611EE92C55F40C4F9AE02.roa (hash: Lf5S48RM+H6jGhhi+lkOyHY5YBcAJOA0fAYnMQrcmBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
        Validity
            Not Before: Jun 13 02:57:41 2026 GMT
            Not After : Jun 20 02:57:41 2026 GMT
        Subject: CN=6a2cc725-a7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:67:59:40:4e:ba:93:e2:5f:ec:c0:ab:4d:
                    93:50:be:bc:a6:92:6b:e0:0a:71:2d:10:f2:b1:f4:
                    12:08:9a:29:ae:d4:65:b0:ff:6c:17:81:09:f9:6f:
                    4e:51:3f:cb:6c:fb:c3:0f:e5:9a:54:2b:08:3d:8b:
                    a4:c3:c9:18:73:68:77:57:ee:e5:a0:cb:dd:bb:17:
                    e1:21:b8:6c:15:0c:42:c2:56:0b:e7:cf:d3:9b:0e:
                    b7:c0:2a:c8:98:3b:48:66:c5:0a:b1:ea:38:8f:ae:
                    31:a1:6b:5a:a7:49:ca:59:ee:a2:a0:73:aa:07:40:
                    7a:3a:a3:56:ba:6f:d5:df:19:83:0f:36:00:86:d3:
                    1c:ef:25:31:97:dd:ba:aa:4a:09:55:61:9d:7c:bf:
                    2f:04:1d:22:18:2e:52:1c:46:a6:c1:6b:33:5b:a1:
                    a8:6b:82:41:49:fa:35:76:25:6c:d7:56:7e:0d:97:
                    4a:48:43:43:8a:37:6d:15:f0:9c:7a:6d:a2:89:96:
                    ba:ec:86:9a:75:58:11:5c:c5:6e:96:4d:92:4d:d8:
                    6d:d2:30:ba:ea:b4:b6:2e:98:7b:03:68:f7:92:a4:
                    1f:a1:89:34:6b:fd:11:73:d4:ed:6c:b9:b2:09:8f:
                    49:91:e8:74:f6:b5:b6:f2:8b:b0:f4:79:85:ce:56:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E8:48:E4:80:8D:EF:0C:9D:C2:63:F9:8A:06:2B:94:CB:FA:9B:C3
            X509v3 Authority Key Identifier:
                keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:56:af:b9:cb:1a:31:ea:a3:62:b7:27:94:90:cf:24:6a:42:
         48:1a:ce:51:82:ef:59:19:aa:a6:c7:a8:6a:d0:98:f9:85:69:
         78:c7:5e:b3:49:a9:bc:3d:3c:98:ec:cb:74:f6:d4:3e:af:9f:
         2d:87:1e:8b:28:6b:66:44:7e:aa:9e:ca:27:a8:bf:8b:45:b9:
         90:53:ed:3c:f6:8a:23:ba:0d:6b:f2:5a:10:75:9d:80:5e:07:
         90:a5:d8:c3:a1:04:01:02:62:d9:d0:8f:30:66:c2:b3:9e:a8:
         82:33:0a:0e:93:20:a9:61:c7:e0:af:91:b2:7e:0a:13:71:aa:
         6a:1d:89:26:06:fc:19:7e:fe:57:68:8b:b8:28:ad:9f:2b:97:
         de:44:7c:4f:8d:cb:21:1e:ea:d1:b2:f3:57:00:92:8a:1c:c3:
         8d:6e:b2:c5:62:e6:87:86:e8:7d:db:eb:98:db:8e:8b:b6:27:
         f5:15:5c:56:ed:d9:91:a8:dc:9d:cd:65:17:ec:f6:39:c3:9e:
         a3:76:0f:cc:91:82:b2:8f:0f:b5:ee:0f:4f:be:38:e7:6c:b5:
         3c:62:26:78:c3:74:24:42:41:a6:2f:26:81:e1:f7:f4:82:5d:
         da:81:d6:c3:b3:f6:0a:97:bc:92:19:49:50:52:84:36:92:97:
         54:d9:de:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:11:12 2026 by rpki-client