Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
File:                     aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft (raw, json)
Hash identifier:          NijyENULQMwjZggIMl102SXC1eQF1fgC+3rBpJRBOy8=
Subject key identifier:   69:9B:0A:9D:6F:10:99:D0:D1:70:43:C8:38:9E:B4:8A:8A:21:E0:92
Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
Certificate issuer:       /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
Manifest number:          48
Signing time:             Sat 13 Jun 2026 08:32:39 +0000
Manifest this update:     Sat 13 Jun 2026 08:32:39 +0000
Manifest next update:     Sat 20 Jun 2026 08:32:39 +0000
Files and hashes:         1: aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl (hash: umkr6sDk2PjOnVO9QF8dwBcdM6+Z2wkzVHys6hJi6QY=)
                          2: 131D50EC03B511F1B33AD351023D8C67.roa (hash: xqonfLO8pGFGJqrL6Ubam0r8pA6SA2doL9TBCfFtqWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
                          rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
        Validity
            Not Before: Jun 13 08:32:39 2026 GMT
            Not After : Jun 20 08:32:39 2026 GMT
        Subject: CN=6a2d15a7-4339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:03:2b:75:7b:c9:b8:65:53:40:f9:e9:20:
                    84:88:c7:fa:56:82:ad:e9:61:b5:c5:c1:89:2c:68:
                    5b:79:64:03:98:3e:8e:d3:0c:bf:4b:86:cf:f8:d3:
                    08:90:2c:d5:a2:c3:53:e9:72:ab:e4:fe:21:d4:dd:
                    3c:e2:5f:14:61:ed:75:06:91:9c:ed:f6:ae:e7:07:
                    2b:d3:03:71:91:ae:57:7d:46:ae:2f:65:98:fb:cd:
                    48:70:33:c1:cf:3b:05:82:10:4f:83:4d:0c:2f:94:
                    2e:8b:8f:c1:d6:44:e6:2b:1c:ac:08:1e:30:9e:0d:
                    28:6f:32:48:47:75:0f:8f:99:f5:13:21:35:b7:c4:
                    6b:76:40:64:cf:60:6d:92:75:05:e6:2d:aa:5e:58:
                    7b:46:da:a3:1a:d0:3c:18:ff:18:66:b8:e7:e2:9f:
                    f1:e3:6a:d0:57:dc:3d:7a:aa:e8:84:34:c9:99:09:
                    54:d9:f5:a9:37:c1:4b:e9:c4:6f:7d:0a:e7:d8:ac:
                    f2:a0:13:9d:6d:6d:a4:52:eb:b0:90:df:6a:0d:32:
                    70:cd:02:57:a3:97:34:fa:60:e7:1f:01:19:9a:00:
                    3e:35:f4:54:6b:aa:af:e4:fd:b4:d7:17:57:8a:32:
                    37:d9:07:5d:66:7b:f6:54:27:b2:c6:42:6c:cd:88:
                    cc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9B:0A:9D:6F:10:99:D0:D1:70:43:C8:38:9E:B4:8A:8A:21:E0:92
            X509v3 Authority Key Identifier:
                keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c4:c0:06:17:69:83:c1:24:53:3d:d9:4f:1d:46:f1:49:89:
         98:9f:0a:0f:9e:b5:f3:af:73:b9:82:07:65:1a:ec:4a:dd:39:
         0d:1e:17:df:51:1b:c6:39:03:d0:08:c0:ee:8b:a7:9d:e7:24:
         4f:b9:09:4d:83:0a:05:0a:ad:07:fd:f0:bd:d8:ba:8c:81:b4:
         4d:c7:cc:35:97:29:f4:4c:ab:b9:db:cd:5d:0c:61:67:62:34:
         c2:0d:88:72:4a:06:fc:90:e4:42:c8:14:c6:8a:59:46:70:e1:
         b5:d1:e5:12:0f:21:cb:69:63:8d:38:a5:eb:40:f7:ce:23:e2:
         ee:58:3e:f0:aa:6c:d1:b8:93:cd:24:0d:05:ff:a6:a1:0f:84:
         33:f3:4c:74:8f:eb:3c:41:85:44:65:6a:be:4e:c9:95:eb:53:
         2e:f5:ff:43:72:42:60:53:b4:25:89:d8:e4:cd:5d:e0:c7:89:
         a5:12:7d:7e:01:4d:aa:43:30:54:e5:6b:8d:28:1b:e8:e0:7e:
         94:91:ad:38:a2:1b:57:27:b2:8f:0f:05:1f:d4:36:b6:a4:a4:
         6e:28:bc:1d:db:90:c0:66:07:53:ab:1d:85:7e:a9:cb:cb:03:
         f5:28:1e:47:ed:19:81:f1:3e:78:e8:4b:c1:f2:50:14:72:95:
         ef:9e:76:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:29 2026 by rpki-client