Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
File:                     AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json)
Hash identifier:          rvYXiWem6K3DXfxoJMsS/uBoIx8JN7lt5sqOpuVZe+w=
Subject key identifier:   72:86:44:6C:D0:19:75:AA:69:72:2C:C1:14:25:7C:0F:87:D3:DF:84
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Certificate issuer:       /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial:       0809
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
Manifest number:          07E8
Signing time:             Fri 12 Jun 2026 21:23:38 +0000
Manifest this update:     Fri 12 Jun 2026 21:23:38 +0000
Manifest next update:     Fri 19 Jun 2026 21:23:38 +0000
Files and hashes:         1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: NoMSmJNJKJQtKSTyzB642tRQoyw1iPaAuPcH6xcE0zE=)
                          2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: EIHT9tw+jJfDxYwJoN6Zou+1GSdOeWVDmrSdgdYC9zo=)
                          3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: AQsEjkfXYE8iJW37NiBShvRrsZAk/FjyC4xd+5A2hgs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
                          rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
        Validity
            Not Before: Jun 12 21:23:38 2026 GMT
            Not After : Jun 19 21:23:38 2026 GMT
        Subject: CN=6a2c78da-a4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:dd:a8:b0:86:45:3b:1d:5e:3c:0a:b4:af:
                    09:3e:a8:08:3d:ef:a9:8d:03:fa:4a:fa:2e:9c:b9:
                    8d:4f:c2:55:f9:01:b4:83:a0:62:e6:87:fe:00:7c:
                    72:14:5a:b0:76:f6:e0:28:2e:d6:35:fa:f7:2e:34:
                    05:a8:5a:42:66:7d:80:6f:3c:09:0d:61:10:7d:92:
                    e9:f1:97:0c:6b:f7:25:25:ca:8f:07:c6:ce:09:a4:
                    b9:6b:b5:aa:35:7b:55:d1:f8:9f:db:9f:12:43:18:
                    d5:f6:5a:e2:0f:d3:ce:52:17:a6:c7:4a:2e:db:ab:
                    1d:66:db:ab:4c:bd:b9:a9:52:6c:09:cb:fb:f8:b2:
                    79:85:c7:b9:d6:c4:27:ed:59:35:41:49:66:a1:d3:
                    73:fe:3f:1b:ed:34:b7:15:d8:fb:18:40:00:d3:27:
                    5b:3b:e6:ce:82:4e:10:e7:5d:18:da:09:4c:7c:c4:
                    50:da:6a:25:33:14:7a:83:1e:2a:c4:bb:81:69:48:
                    90:ce:8e:f8:f1:85:3b:51:1a:67:dc:9e:c1:81:0e:
                    01:c9:f2:95:fe:ec:b0:29:71:5c:59:88:c7:23:e8:
                    b8:f6:52:7e:c0:d6:50:c2:54:9e:5f:00:fc:08:5a:
                    f1:e0:ad:7e:7d:ca:0a:9e:c4:64:35:ad:3a:54:76:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:86:44:6C:D0:19:75:AA:69:72:2C:C1:14:25:7C:0F:87:D3:DF:84
            X509v3 Authority Key Identifier:
                keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:cd:c6:6e:57:41:c7:51:b0:39:a5:ab:e7:50:a0:35:5c:69:
         62:55:41:1f:21:84:28:cb:c6:ca:90:1d:05:89:0b:0f:e2:a1:
         02:24:00:a4:71:4d:d8:5c:9e:70:59:2d:74:21:6e:c9:87:92:
         8b:75:e9:cc:bc:0e:06:61:fb:c9:e8:ed:83:47:16:d6:e4:d9:
         60:78:cc:83:e3:5b:d6:fa:91:16:89:98:1f:fc:88:17:4b:e5:
         92:c5:f5:ea:33:57:f8:a8:26:1f:f0:ee:78:b1:e4:bc:0b:cc:
         7c:c6:5c:bc:e6:13:3a:c3:0b:73:17:63:8f:4a:ca:0f:8e:a8:
         17:9f:ef:cf:c1:d8:59:3a:f3:28:df:64:39:b7:a2:0b:2b:99:
         12:1d:e7:46:7f:e4:8b:56:af:e9:78:2d:48:bf:c8:0d:1f:e8:
         aa:ba:ed:aa:07:3b:1f:43:88:d6:ed:2f:bb:5e:b9:c3:5c:1b:
         61:2d:dc:3b:1f:c3:b8:18:64:3f:9c:a8:e2:b2:2e:df:50:03:
         13:4f:93:c4:72:04:a4:e3:5e:59:7e:e2:ad:18:6e:ad:f5:29:
         32:57:de:56:c6:26:81:a5:3b:bb:eb:67:f3:18:59:58:29:ce:
         de:d4:c0:b7:e2:af:fe:5e:f8:d6:f7:10:60:ca:19:b8:de:7a:
         6d:8a:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:08:08 2026 by rpki-client