Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
File:                     8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json)
Hash identifier:          Z58nqFdBW7RwsGF9vqWYsyOaU0oeHcxduhABCFb2hus=
Subject key identifier:   EA:6D:F4:7D:05:3C:DE:7A:27:2B:7D:B4:EA:B4:F8:8D:38:DF:F3:F9
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Certificate issuer:       /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
Manifest number:          02A4
Signing time:             Sat 13 Jun 2026 01:39:39 +0000
Manifest this update:     Sat 13 Jun 2026 01:39:38 +0000
Manifest next update:     Sat 20 Jun 2026 01:39:38 +0000
Files and hashes:         1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: 0fdQ0hlqGhzHkbof2wokwZP2L/cSYhMhP+Qla+WlgRM=)
                          2: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=)
                          3: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=)
                          4: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
        Validity
            Not Before: Jun 13 01:39:38 2026 GMT
            Not After : Jun 20 01:39:38 2026 GMT
        Subject: CN=6a2cb4db-05a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:eb:2e:26:1e:00:d9:c3:3a:ba:07:27:0b:
                    5f:33:1e:99:2c:f6:38:d9:77:67:1a:be:77:e0:45:
                    9b:2a:16:ca:9b:5a:af:66:ff:0e:05:52:eb:39:d2:
                    40:6e:ad:a9:fb:8c:e9:56:bf:cf:1d:d2:c7:71:12:
                    39:ea:b8:61:02:50:3e:3a:4c:23:fe:8b:dd:f3:22:
                    55:91:09:cb:6a:b9:a0:59:15:54:7c:a4:db:32:3e:
                    d2:50:50:5c:38:54:0d:24:d0:a1:6d:57:d7:dc:ab:
                    05:fb:9e:b2:19:74:e0:af:05:71:17:74:c1:a8:d3:
                    d5:92:ad:28:2a:47:2c:dd:78:f8:a3:6b:b2:1a:05:
                    73:89:83:16:9a:76:fb:ed:45:77:a3:8d:0d:60:13:
                    0b:0c:d7:33:29:f1:3c:c5:86:c4:f7:72:b8:b8:2f:
                    9e:90:be:63:fd:dd:11:b1:e0:81:96:fa:55:09:5e:
                    c8:34:bc:2f:71:65:2b:04:49:71:02:5f:09:11:68:
                    bb:cb:c4:84:6b:c6:bb:b2:33:a8:03:2b:c5:c6:ae:
                    c0:a0:37:ce:14:87:a0:1c:a7:92:53:d0:74:ca:bd:
                    fd:12:d6:42:25:17:b1:58:25:a1:48:f7:a2:e4:1d:
                    bb:9b:54:27:1c:2a:75:28:2b:50:b1:ab:96:20:9b:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6D:F4:7D:05:3C:DE:7A:27:2B:7D:B4:EA:B4:F8:8D:38:DF:F3:F9
            X509v3 Authority Key Identifier:
                keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:47:44:a9:25:d8:92:70:23:f0:b9:69:db:7d:f2:85:b2:ab:
         fd:5e:74:6a:4e:5b:55:a6:37:f7:f1:2f:92:cc:e9:fa:0c:85:
         32:fb:46:5d:88:d9:fb:f5:25:90:88:0e:b5:13:eb:02:9f:58:
         b0:51:f4:3a:93:34:53:89:35:72:c8:6b:57:30:82:cf:8b:f9:
         15:26:69:70:b4:ec:e5:f1:c7:81:a1:e2:3d:6b:d4:3d:cf:bc:
         67:76:9d:f3:07:98:ba:bb:4f:29:f5:55:c9:b9:5e:02:91:67:
         7f:e4:ec:da:5e:9b:39:74:0a:05:3b:8d:85:44:b0:c6:67:3c:
         1d:ff:81:04:f7:fe:21:be:51:ee:aa:d3:11:c5:7c:9f:8d:50:
         20:8c:35:fd:3d:e9:dc:42:5e:0a:88:22:d4:84:3a:9f:90:73:
         43:c8:34:37:61:f3:49:cc:e6:17:62:7e:ce:f0:67:f7:16:69:
         3b:b1:59:9c:14:db:e7:d9:d5:3c:45:33:53:21:b7:b0:4f:da:
         5f:00:3a:6e:ce:71:fc:5c:bb:48:9b:d6:97:48:53:c0:8f:0a:
         53:5e:17:9e:bd:52:41:be:ca:c9:06:a9:7a:b1:c9:0f:3f:30:
         5a:fe:b4:36:45:d5:e7:3f:f8:73:fd:bf:0a:94:38:ce:4b:21:
         ab:2a:23:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:48 2026 by rpki-client