Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
File:                     d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json)
Hash identifier:          x+7YKd2oNsnwwTfQ8LWXvzaCrleKK/r25a+mRu6LqTc=
Subject key identifier:   41:FC:81:14:47:28:11:15:FE:65:93:0F:1D:59:43:93:1F:78:E8:6B
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Certificate issuer:       /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial:       10BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
Manifest number:          1024
Signing time:             Fri 12 Jun 2026 17:28:12 +0000
Manifest this update:     Fri 12 Jun 2026 17:28:12 +0000
Manifest next update:     Fri 19 Jun 2026 17:28:12 +0000
Files and hashes:         1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: Kyy/Da02U8mynFkfBUC36105Q5Rg97VYjCM5oEikJl8=)
                          2: B35E5B46334111EF9770A542C4F9AE02.roa (hash: MGyDF0SymFTGhXVC01aY5fhE89sLhtH+JybTpcTPMuU=)
                          3: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: X4ujn6m6b/UzOkSsv1BM/hAI4e2I7YefOVrCDDZ2L0g=)
                          4: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: Sd3bOmBjQUjJSEaaagRS6KbmxYRr1S/mpgHzlYj8vVc=)
                          5: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: HBSapd8EnRXWCh7KQah04ZzDJueHHz91PfvdNwADOIQ=)
                          6: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: 1hrK2Bwewpt3jrZg8tzld9vT7Z8nHw5euqbUeqhmK6U=)
                          7: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: oM2ZWP4gaa1Ec28NI0HOJLuGJz8huwbOd9sIWlD3wks=)
                          8: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: ufh38KxhdsuLy9IaI1dEAdKwH+h8MTF+UaFxLZhtCHo=)
                          9: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: HkpHyo2iHcK4D2nlMSOniFKi4H/SALi3eltvq0xZSgo=)
                          10: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: OWu1YAjMPxdpWq7sK40yFmTZBw771CrDLDYch9c7srQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
                          rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4283 (0x10bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
        Validity
            Not Before: Jun 12 17:28:12 2026 GMT
            Not After : Jun 19 17:28:12 2026 GMT
        Subject: CN=6a2c41ac-3548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:8a:3e:9f:0e:e0:c5:5d:f3:d2:4a:e1:5d:
                    32:b0:6f:aa:3c:b6:2c:47:c3:97:8e:0e:41:e1:4e:
                    51:fb:ae:66:50:db:ec:b5:39:33:bf:78:3d:e7:87:
                    9b:c4:53:a8:a6:e3:0a:29:03:a5:19:f7:c2:b1:dc:
                    33:8b:31:19:89:93:20:12:c6:dd:4a:54:3f:5d:76:
                    bb:c5:2a:a0:e1:8c:d7:0c:d7:ca:5e:99:fb:68:dd:
                    a9:c7:b5:a2:42:0c:83:47:f0:05:1b:04:ec:f5:cf:
                    6b:67:06:eb:b5:08:4f:39:65:e7:7c:66:11:0b:60:
                    fc:f0:66:36:71:1d:ab:db:de:c8:7a:b1:b2:1a:17:
                    4a:7d:62:ec:40:18:06:7d:d0:7d:97:00:79:d8:f8:
                    2f:59:96:a7:15:b6:3c:88:e5:63:c9:01:69:7b:55:
                    89:6b:7a:d9:19:30:4e:57:fe:6f:84:8e:88:2c:50:
                    9b:0a:df:ac:16:45:83:2d:10:51:d9:22:7c:53:87:
                    fc:e7:35:d3:f7:af:88:1d:04:f5:74:b2:55:65:62:
                    30:74:f0:d3:ec:cb:07:d2:9c:45:ea:cb:1e:98:ac:
                    1f:7a:ac:5b:a5:11:7c:4f:ad:0e:df:e2:6e:e9:4a:
                    47:0a:a4:0a:67:bc:b8:ef:56:12:65:dd:38:06:a1:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FC:81:14:47:28:11:15:FE:65:93:0F:1D:59:43:93:1F:78:E8:6B
            X509v3 Authority Key Identifier:
                keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:f4:2a:7e:83:f7:20:9c:f9:82:e0:b7:f5:18:7a:08:fd:57:
         35:3b:c8:c5:01:bf:bb:64:5d:47:91:a8:95:ba:58:c4:4a:9a:
         f6:92:09:26:37:31:70:7c:80:1a:9a:c4:f2:64:33:de:a0:54:
         55:2d:da:e9:8a:e3:04:ed:38:89:fb:67:31:11:51:9d:c1:ea:
         2b:7c:89:b2:cd:5a:b1:db:bb:e1:74:c4:a7:39:d0:9f:cd:ad:
         5f:b7:4f:bc:31:cc:a2:0f:25:77:5a:e6:1f:58:44:5b:32:84:
         f5:73:83:70:fc:8b:9e:c9:3e:57:74:90:fa:48:70:93:c6:dc:
         ff:fa:46:b1:c9:53:9f:23:5d:62:47:9d:43:f4:98:9e:70:a9:
         3d:28:92:85:89:f1:0f:cc:82:47:b1:7b:f7:26:48:5e:6e:6a:
         89:3a:3e:95:d5:65:c5:05:07:0f:1a:fe:b7:f7:cd:56:59:7f:
         11:35:71:7e:6f:98:c1:3a:66:f1:e1:09:d7:b0:2a:98:2b:7b:
         6b:dc:ac:a5:e7:f3:fe:fa:3b:1e:5f:77:9c:cf:e7:03:48:7b:
         88:4f:31:f2:fc:f5:be:2a:f5:2f:42:a3:35:11:c2:b3:49:70:
         e8:33:7d:17:b0:d8:d8:4d:aa:38:98:51:13:f4:4f:1f:c1:f1:
         94:3b:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:45:28 2026 by rpki-client