Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File:                     -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier:          9rydtRps9iZvvs+UGg6AgOgYaPFThVjmL2zR28NtPY8=
Subject key identifier:   1D:07:B6:71:B6:52:64:AE:77:28:E8:30:75:8D:A8:BE:01:6E:ED:ED
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number:          014E
Signing time:             Sat 13 Jun 2026 05:12:34 +0000
Manifest this update:     Sat 13 Jun 2026 05:12:34 +0000
Manifest next update:     Sat 20 Jun 2026 05:12:34 +0000
Files and hashes:         1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: Mz86nSc7xa7shtSxZwkdzYvewy6gOFv0qyaX4n6tiQA=)
                          2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: QHT2EqJHyPujaDEriJMd/9h9fPZLETh+MJuliPGlg9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
        Validity
            Not Before: Jun 13 05:12:34 2026 GMT
            Not After : Jun 20 05:12:34 2026 GMT
        Subject: CN=6a2ce6c2-990d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:8d:76:67:d0:30:57:bc:b8:05:29:87:5a:
                    78:17:ba:bd:14:d3:af:e0:bf:85:e7:b0:fd:30:af:
                    45:4f:7f:0d:ed:17:9f:f3:0a:86:8c:ee:5f:47:42:
                    4f:de:40:17:8a:b4:3c:7e:14:4a:50:c1:94:c7:c2:
                    28:5c:19:d6:a5:66:82:87:4b:6b:8b:1a:7e:47:de:
                    b0:3b:19:00:bc:20:d7:f7:3a:34:e6:21:5c:d0:fe:
                    16:4f:ae:e6:04:b1:8f:ca:b5:49:ee:1b:a5:e0:1f:
                    91:b4:57:fa:2a:0d:53:a3:81:bf:e6:90:a4:9b:5e:
                    a9:84:e2:41:b4:12:56:12:89:de:88:e3:5b:f8:da:
                    e8:05:bf:19:fa:39:ac:35:a0:c4:7b:54:5b:35:72:
                    3f:28:b1:e3:7b:31:5c:b3:69:5f:e8:ef:77:ef:52:
                    6f:68:b6:b9:f0:53:a5:87:69:f0:01:30:c8:ec:57:
                    10:8a:55:3d:71:df:67:53:bb:52:c9:86:c0:4d:af:
                    f9:a2:85:76:61:82:21:65:25:e9:b2:65:52:fb:e9:
                    4e:02:5b:0a:48:44:5f:0d:68:0d:ab:50:dc:56:1b:
                    8a:60:0d:55:f2:2d:1b:20:5c:35:9d:a0:f2:63:4e:
                    62:1e:8a:e9:35:0d:9c:a5:57:2e:a2:2b:6e:5a:82:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:07:B6:71:B6:52:64:AE:77:28:E8:30:75:8D:A8:BE:01:6E:ED:ED
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:63:67:40:0c:67:cc:cb:ff:92:0e:3b:f3:89:30:45:af:6a:
         be:2c:3d:29:e3:8c:d4:d6:14:b0:10:1c:4b:19:ae:3f:43:32:
         bf:f0:08:e4:4f:83:e4:98:bb:2a:03:5a:af:98:41:e0:f0:af:
         8d:46:73:83:0e:b6:91:65:3e:2c:01:bf:d2:5e:54:c1:b2:8a:
         b9:05:92:ee:d7:02:dc:63:94:2f:a0:8f:42:30:52:ef:91:db:
         c0:5e:bc:45:98:d1:e7:51:e8:e3:96:64:b6:53:52:6b:ff:e5:
         8d:a1:9b:2b:cd:b9:cb:37:b1:f4:bd:50:bc:65:da:c2:fb:4e:
         4a:92:68:92:55:11:71:ec:24:a3:5a:76:a8:d6:1a:72:09:0a:
         1d:1d:5a:e2:b0:72:90:2b:f6:7c:21:a7:02:2a:dc:c6:4c:40:
         32:3c:fe:84:a7:18:6a:7d:ae:87:8f:b0:31:56:e6:c2:78:6b:
         da:82:e3:5b:be:de:d4:97:8c:55:ec:e0:bf:44:01:05:c1:c9:
         c5:70:9a:f3:c8:aa:35:18:f7:69:d0:67:26:73:a2:53:32:de:
         ed:53:0f:4a:cb:3b:60:66:7d:ca:cd:ef:29:fc:90:ed:25:fd:
         eb:3b:92:39:36:b5:7e:d3:96:31:4d:d1:0d:77:90:34:89:b5:
         0b:17:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:19 2026 by rpki-client