Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
File:                     2n7tifhToFCqePhmgZCMmcNRBnA.mft (raw, json)
Hash identifier:          7Nxr3wjwA1YPgVxdoVXpEDx0Zwi3QE6qoll2ALr2c9I=
Subject key identifier:   E9:55:03:C0:7F:39:45:83:12:79:2E:D5:14:B3:04:BE:2E:4E:89:44
Authority key identifier: DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
Certificate issuer:       /CN=A91C8A07/serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
Manifest number:          09
Signing time:             Thu 11 Jun 2026 11:33:27 +0000
Manifest this update:     Thu 11 Jun 2026 11:33:26 +0000
Manifest next update:     Thu 18 Jun 2026 11:33:26 +0000
Files and hashes:         1: 2n7tifhToFCqePhmgZCMmcNRBnA.crl (hash: XLlcXalpnBZbXOtDY8V+JgB+cNBgnvAeJfPhVAUTGrQ=)
                          2: F3CE961064A311F1A97DC0998B47A888.roa (hash: pejeTtYSguLZu0BW6m0RkH55kNdbMRCqIXu4V/iuKnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl
                          rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8A07, serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
        Validity
            Not Before: Jun 11 11:33:26 2026 GMT
            Not After : Jun 18 11:33:26 2026 GMT
        Subject: CN=6a2a9d06-3906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:14:a6:0d:88:ff:39:2b:47:d5:0f:bc:c5:
                    9c:5a:6b:79:af:41:d8:dc:c4:88:5e:18:bb:0f:9f:
                    9b:45:5a:2b:c4:da:d1:5b:9b:4f:c3:bb:67:19:4b:
                    9e:b6:63:41:df:75:da:50:1f:22:71:3c:c2:8b:15:
                    a1:78:95:f7:02:1a:d6:1a:80:16:8c:0b:9b:5c:d5:
                    85:78:ec:98:be:8d:65:46:e0:bd:2b:54:60:22:ab:
                    b0:25:16:63:d1:0a:06:33:e8:25:ad:bc:4c:78:cd:
                    6e:cd:cb:d5:d0:db:0a:f4:5c:be:d9:11:7a:e6:95:
                    68:26:b0:69:3c:3c:e7:4e:11:f3:ce:b1:79:a5:eb:
                    ba:1c:73:f9:55:07:d9:5c:bf:a5:84:a6:4d:60:e5:
                    ac:a5:f2:32:83:26:37:5a:6d:a6:86:de:d5:b1:97:
                    36:89:d4:24:8c:97:22:aa:62:94:07:86:c0:3e:9e:
                    33:91:be:42:34:97:75:8e:f9:fc:1f:9b:c6:97:cd:
                    2c:35:a3:68:47:b0:00:7c:1a:e9:38:f7:6d:be:ca:
                    65:66:b3:e9:49:da:e5:b4:7b:5e:d3:3a:bb:44:5a:
                    fa:06:57:71:6c:5d:ac:28:3a:14:09:24:a3:db:58:
                    b8:f3:be:17:75:62:76:16:a7:cd:7a:69:7d:e8:73:
                    03:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:03:C0:7F:39:45:83:12:79:2E:D5:14:B3:04:BE:2E:4E:89:44
            X509v3 Authority Key Identifier:
                keyid:DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6c:e7:22:43:b8:02:e7:0f:d9:88:fa:fb:d0:30:09:46:11:
         10:8c:0e:5e:b8:6f:c5:6d:e9:7d:b0:5a:c1:8f:c5:c9:87:b3:
         26:4c:83:67:53:7c:86:f5:06:53:df:f4:28:16:90:e4:a8:3b:
         d4:cf:d4:6f:77:91:b7:47:e6:39:68:93:7e:4b:ff:4e:fa:56:
         3f:1c:96:1a:ee:3a:81:a0:ff:de:0c:e2:93:12:48:9d:3e:ec:
         e9:3f:67:78:4c:0b:df:e0:2f:09:66:cd:8c:b4:88:ce:a7:f5:
         93:95:ce:c5:61:9e:0d:20:5b:39:57:13:29:65:a6:d7:73:f9:
         86:40:10:e5:6a:56:71:f3:ea:98:24:5a:a3:05:b7:60:86:5f:
         37:c3:25:26:e5:0d:db:ff:32:9f:19:1b:e7:1a:66:bf:48:59:
         03:ad:23:7b:91:83:4a:62:e0:7b:42:fa:00:82:35:9b:cb:f0:
         c3:69:bd:7b:1e:a5:6e:8b:35:82:b1:da:ac:a1:4c:1d:88:5a:
         55:43:64:e9:00:21:44:7c:78:a1:a7:93:5b:7e:03:76:fd:15:
         61:69:5c:40:48:09:c1:d1:b0:ac:80:7f:71:9c:10:55:83:90:
         27:d4:37:ad:d6:eb:05:37:5d:12:ee:49:66:92:9f:9f:79:e9:
         38:de:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:36 2026 by rpki-client