Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
File:                     Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json)
Hash identifier:          n+MCfxUQPr911r204I6/b3zGJm+h/bgD2Z8TX9ALY+o=
Subject key identifier:   E8:D0:8B:58:A0:B5:A2:55:93:38:00:B0:B1:7E:AD:78:58:13:97:DD
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Certificate issuer:       /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial:       069B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
Manifest number:          0688
Signing time:             Fri 12 Jun 2026 22:36:15 +0000
Manifest this update:     Fri 12 Jun 2026 22:36:14 +0000
Manifest next update:     Fri 19 Jun 2026 22:36:14 +0000
Files and hashes:         1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: VU7cm8LCLEoFxJfRhbLsFZYCmrBVSzN52AVtjpsjjCk=)
                          2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: nnDH6rvORkwCmJUa2SHMfnPNgo7zw9YFjWX6Zaktv3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
        Validity
            Not Before: Jun 12 22:36:14 2026 GMT
            Not After : Jun 19 22:36:14 2026 GMT
        Subject: CN=6a2c89df-bfc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8f:ce:b3:b2:f0:d2:59:68:7b:d3:0e:4d:2c:
                    4a:ba:d7:37:75:54:9c:4c:12:2d:19:6a:6b:e9:07:
                    3f:f2:8e:a6:0f:5a:3b:38:8a:cc:23:d6:3b:97:b3:
                    e3:ed:6e:13:62:34:35:29:86:d2:e6:cf:2a:63:5b:
                    4e:90:ea:4d:a5:9e:79:ab:75:0e:8d:78:d8:67:52:
                    58:46:31:17:e3:03:42:21:6d:9f:85:a9:c2:17:93:
                    39:15:14:65:b8:e9:89:16:5c:30:d1:4a:d0:fe:68:
                    78:5b:ac:90:db:19:cd:50:31:ea:a9:e5:89:b8:61:
                    4a:89:d9:fd:fa:74:1c:0f:85:10:c5:1d:24:de:5a:
                    21:6f:f9:8f:73:c5:47:de:b6:b6:6d:61:c4:d4:fa:
                    09:a9:38:a4:80:74:6b:a6:1b:28:47:eb:cd:b7:53:
                    a3:47:96:f6:ba:04:2f:d3:53:2b:82:2d:c0:79:4d:
                    54:c3:2e:02:e7:a0:ed:90:35:04:8f:51:16:c5:60:
                    3a:86:8f:47:4c:86:57:e0:c1:35:5c:a5:19:83:88:
                    24:85:fb:56:c4:ae:49:83:24:d5:0f:ee:dc:c1:f3:
                    b2:97:69:3e:1d:5f:3d:bd:35:e8:ff:f9:9f:67:be:
                    d0:39:70:55:e5:cd:82:a2:d7:9e:51:dc:fb:1b:8a:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D0:8B:58:A0:B5:A2:55:93:38:00:B0:B1:7E:AD:78:58:13:97:DD
            X509v3 Authority Key Identifier:
                keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f0:85:cf:8d:98:e8:bc:06:1d:80:13:a6:ab:53:62:13:2c:
         59:55:91:e0:15:ca:a9:13:10:23:97:96:20:9f:7f:71:fc:40:
         6c:55:33:f4:57:3e:e8:57:51:d0:3d:96:e1:58:b4:d3:04:62:
         9d:90:e0:52:06:47:fd:35:e9:4c:64:0b:ee:5b:3c:1e:27:db:
         20:54:6f:d1:2a:e6:68:c9:fd:18:64:21:3f:1b:95:88:df:3f:
         82:a2:6c:73:7e:12:db:01:80:b7:44:58:55:49:95:b7:4c:58:
         ce:7e:d3:cd:9f:70:3c:a6:81:0e:a2:e2:e4:ee:d5:86:d6:19:
         80:48:fa:9a:d1:89:91:f2:ef:96:51:69:eb:8f:76:a7:d7:67:
         e2:0f:0d:65:6f:54:9f:26:df:35:bc:75:c1:e9:3f:bc:75:b2:
         99:f1:f8:b1:e8:61:5c:37:92:33:56:ad:b5:4d:4a:0e:bb:00:
         07:68:81:a6:52:ce:bb:fa:17:5d:99:64:9c:cf:a9:48:4b:02:
         fa:aa:1c:aa:e6:e7:3a:23:ea:2c:d4:96:aa:22:e5:56:2e:8c:
         75:e9:77:e4:d0:59:1f:0c:ee:46:34:d0:30:a1:9b:15:de:e8:
         dc:d3:d9:90:9d:0a:35:2f:e8:65:71:b4:22:6e:08:17:eb:d1:
         d6:48:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:51:16 2026 by rpki-client