Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft
File:                     rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json)
Hash identifier:          NL7IrnQ4MGchAHCfubgQJxBNLuUQ3FwLHqrzZ/70pAU=
Subject key identifier:   9F:92:30:C3:18:DA:6D:03:E4:89:D8:BF:33:48:74:5A:34:D1:B1:6F
Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42
Certificate issuer:       /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942
Certificate serial:       0CE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft
Manifest number:          0CD4
Signing time:             Fri 12 Jun 2026 18:26:03 +0000
Manifest this update:     Fri 12 Jun 2026 18:26:03 +0000
Manifest next update:     Fri 19 Jun 2026 18:26:03 +0000
Files and hashes:         1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: a4Fi3dfzqUeFJoZAdDN4pf2krFJ7UuKVyoXfKasgaYQ=)
                          2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: P3cA4Ey/V8rl3zAePZZSJQ01VWq57x0zCe1ptcZIm4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl
                          rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3296 (0xce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942
        Validity
            Not Before: Jun 12 18:26:03 2026 GMT
            Not After : Jun 19 18:26:03 2026 GMT
        Subject: CN=6a2c4f3b-6e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:21:ef:6c:aa:f1:7e:e2:c5:7a:51:55:69:
                    2f:20:c8:58:0d:ea:58:83:c3:f8:b5:46:11:ec:61:
                    df:e0:de:cc:5b:da:ac:cf:47:62:b1:6d:c4:78:26:
                    3d:bf:b0:2d:28:31:ca:db:f5:df:20:bc:c3:50:dc:
                    34:87:5c:0b:4d:ea:ff:d7:05:c4:63:a4:5d:89:41:
                    5b:53:9e:fb:fd:c8:b2:91:87:b0:b9:9f:8f:e3:32:
                    ae:40:f8:0f:1e:78:1f:f0:50:bc:47:6c:42:73:e1:
                    95:39:cb:2b:b2:93:68:81:2b:4a:0e:54:a3:ec:63:
                    88:49:67:e0:1f:1f:b6:2d:60:99:ff:83:8f:22:d8:
                    04:f8:53:47:bb:5d:ad:bd:56:89:74:5a:cc:c1:84:
                    40:82:e5:b7:1b:8d:7b:1b:63:31:74:09:77:60:33:
                    d4:2b:2e:0e:eb:2b:dc:5f:af:c0:ba:c7:38:d6:99:
                    f2:42:6d:d9:4d:4e:64:16:f7:18:fb:1d:9a:3e:4a:
                    20:7b:af:09:44:0c:e9:2a:e1:bf:04:f5:a1:db:fe:
                    11:cf:3d:06:e9:8e:e8:a2:b0:83:05:73:4f:bc:a0:
                    f4:93:b1:42:62:27:8c:a1:2d:49:2a:9f:f5:80:79:
                    8a:7c:39:9f:c5:e2:6c:8c:c5:f4:7b:1a:62:98:0e:
                    9b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:92:30:C3:18:DA:6D:03:E4:89:D8:BF:33:48:74:5A:34:D1:B1:6F
            X509v3 Authority Key Identifier:
                keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5a:1d:b8:3e:b6:11:9c:1c:9a:08:7a:73:33:96:22:94:c0:
         9c:5e:ae:f1:30:be:11:7d:48:66:8f:c8:d8:ed:18:70:16:56:
         0d:7b:09:4c:74:89:c4:df:7b:95:9d:6b:c0:7e:12:d3:24:67:
         ce:2b:16:08:b0:ea:82:8b:45:9d:92:87:03:1c:77:12:e1:1d:
         a8:00:51:27:b2:62:b0:62:33:67:19:82:8b:ef:1b:f5:25:75:
         cb:34:5d:8f:90:eb:69:06:3c:09:36:73:62:fb:1a:f4:16:fe:
         73:7c:76:c3:7d:a1:88:76:76:39:66:68:68:b4:96:ff:3e:3f:
         60:a4:7c:e6:a0:43:bb:7e:cf:cb:ac:cf:72:67:e5:49:7a:59:
         e4:ed:c2:51:20:bf:93:48:31:a7:db:ae:f0:4c:33:e1:ed:82:
         f1:ae:75:77:df:0f:62:2c:d9:4f:1b:7f:82:5e:fd:f0:41:38:
         f4:10:32:33:b3:52:00:f6:68:3a:2d:f7:7b:a9:e6:49:2c:96:
         f2:22:5a:8e:74:41:19:09:42:30:57:03:0b:eb:ce:c6:4b:3d:
         e9:71:e1:0e:d5:53:e3:18:e0:58:d5:9a:87:c4:d7:fc:8e:24:
         f7:c1:20:0a:7c:bd:9f:1f:7a:7e:99:8a:d3:5c:06:a8:d2:e2:
         da:16:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:27:47 2026 by rpki-client