Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File:                     De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier:          ZZt1cQraaqvlC+Ao22VuGFplFr/GuqFpIVpqaGLL20c=
Subject key identifier:   E5:6E:A8:6E:08:2C:F7:B3:9A:22:30:63:66:99:41:EA:E6:30:47:AA
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer:       /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial:       1407
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number:          13EC
Signing time:             Fri 12 Jun 2026 16:54:23 +0000
Manifest this update:     Fri 12 Jun 2026 16:54:23 +0000
Manifest next update:     Fri 19 Jun 2026 16:54:23 +0000
Files and hashes:         1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: FZLcaMjxtwe7m42pQa/RaT7ZBg8HHaLBIF53TabUL10=)
                          2: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=)
                          3: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
                          rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5127 (0x1407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
        Validity
            Not Before: Jun 12 16:54:23 2026 GMT
            Not After : Jun 19 16:54:23 2026 GMT
        Subject: CN=6a2c39bf-6127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e9:2e:e0:17:e9:0d:d5:40:50:02:bb:f6:ac:
                    70:b7:2f:60:22:c6:76:ed:cb:15:d3:81:4f:df:cd:
                    04:5f:68:64:30:a4:43:70:d1:50:96:fd:62:c9:c5:
                    6e:fe:27:00:95:be:2c:61:9e:0a:27:f8:77:4b:63:
                    14:67:f6:23:ac:f5:74:85:18:5d:67:55:9e:95:dc:
                    b1:fa:3b:2b:b3:15:49:fc:0b:c4:77:56:a1:19:db:
                    dc:70:1e:04:30:9a:3b:b2:21:4a:e4:9c:72:63:06:
                    de:6b:a9:2f:9a:d2:c8:52:a6:13:22:49:12:76:96:
                    30:05:c5:29:07:ae:f7:c5:ee:b6:4d:6d:66:c8:f0:
                    6b:ad:b4:29:b1:d2:fe:8f:4c:16:64:51:0a:f6:e0:
                    b1:6c:b9:68:ec:af:0b:99:fa:7d:ef:7c:53:56:c0:
                    cb:98:a4:de:c2:68:93:13:33:c8:14:3d:2a:45:54:
                    3e:4e:43:d9:dd:76:39:4e:f2:40:15:72:fe:18:9a:
                    6e:26:b9:56:aa:20:15:fb:60:59:2f:c0:67:60:49:
                    26:bf:00:40:b9:69:3b:9d:ac:23:56:ac:51:3b:f1:
                    5c:69:bf:8e:9d:47:55:7e:82:8b:e8:ad:2a:12:1e:
                    6c:6c:cc:b4:15:cd:c2:7f:3a:2d:07:e2:40:fe:61:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6E:A8:6E:08:2C:F7:B3:9A:22:30:63:66:99:41:EA:E6:30:47:AA
            X509v3 Authority Key Identifier:
                keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:78:cd:de:22:7e:4c:26:17:eb:02:82:8a:25:1e:03:11:17:
         7d:f2:b2:84:bc:b5:98:e6:7d:21:61:55:13:d4:4a:24:3a:e8:
         29:ed:bc:29:e8:be:ef:f5:80:76:51:73:9c:72:7d:d1:b7:84:
         71:46:31:3c:4c:9e:ca:10:15:d4:c1:46:61:e8:0b:21:55:ee:
         a7:08:87:dc:48:0a:71:42:24:41:58:1d:e1:7a:be:33:11:4c:
         32:d9:5c:2d:1d:ec:06:ba:fb:10:19:c1:01:41:72:04:15:fc:
         2e:30:41:f3:93:22:ae:e3:81:86:96:d5:1c:f5:cb:c7:25:cf:
         21:b7:1d:81:9b:91:d8:d2:47:80:07:8e:4c:3d:cc:4a:cf:bf:
         5f:fb:4c:96:eb:f1:a9:34:d8:28:9b:f3:11:a2:0e:56:fd:50:
         bf:75:08:9c:d5:3e:cf:07:ed:f1:ef:11:1f:05:82:16:4c:aa:
         f0:5d:6a:db:e2:cf:cd:d7:f7:5f:26:3c:0e:ed:57:d3:36:9c:
         0d:cc:f9:dc:97:9e:20:0a:af:02:e9:1a:f4:40:5a:1f:76:b9:
         e8:9c:66:81:5b:10:3b:ed:9a:81:99:ab:0f:00:5a:36:6d:2b:
         09:12:41:a2:52:c6:ef:4c:9d:82:e7:69:29:d0:22:d5:57:01:
         10:6e:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:44 2026 by rpki-client