Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
File:                     aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft (raw, json)
Hash identifier:          OXy5wbZyJKFJWFgC27/c/AOn2OLGsJYFlOXOfAih9fg=
Subject key identifier:   F9:C4:90:0F:E0:D2:23:A7:22:09:34:69:14:9A:C9:BE:1B:CF:32:7C
Authority key identifier: 68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79
Certificate issuer:       /CN=A91CE216/serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
Certificate serial:       0884
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
Manifest number:          0878
Signing time:             Fri 12 Jun 2026 20:44:15 +0000
Manifest this update:     Fri 12 Jun 2026 20:44:15 +0000
Manifest next update:     Fri 19 Jun 2026 20:44:15 +0000
Files and hashes:         1: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl (hash: DZ2ZKogLGtY7sAoVz3ue2DssO0W0VlcX89KKjVOkQWE=)
                          2: 7F2355F2FE2A11EA8A51B85AC4F9AE02.roa (hash: pEoVeSKvZWCj0YeLOAFbn4+nyrnm4dpfDhs+6j8mLhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl
                          rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180 (0x884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE216, serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
        Validity
            Not Before: Jun 12 20:44:15 2026 GMT
            Not After : Jun 19 20:44:15 2026 GMT
        Subject: CN=6a2c6f9f-d2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:e4:91:f9:27:e6:f4:d7:c5:b6:c6:7e:c6:
                    70:39:d6:0b:5d:e7:f7:da:25:00:5e:ee:f5:4c:d8:
                    ec:cb:8a:27:aa:bd:12:be:57:26:54:ae:7a:41:a2:
                    b4:f0:04:85:ec:75:d2:98:3f:d3:40:4e:dc:ae:90:
                    af:9e:e1:53:11:5a:73:c1:69:6c:75:ed:31:b7:4d:
                    33:3c:5c:0d:33:74:73:3c:4b:68:b1:1a:22:1e:3b:
                    2f:a0:4c:cb:cc:d1:59:7a:2a:ff:46:06:c8:ba:75:
                    42:b7:70:3f:3e:33:ab:51:68:fa:ce:84:31:e3:1b:
                    0f:08:08:e0:5f:3f:8f:fd:6a:62:c8:01:1c:56:30:
                    c2:06:a2:f1:58:37:0a:a0:7b:98:bd:0d:c9:50:90:
                    de:de:b5:a4:08:89:df:ef:76:00:a4:aa:a1:7c:81:
                    1d:7d:d0:f5:1c:4e:e4:c1:9f:ff:0e:2f:a3:49:43:
                    86:ee:3b:14:68:8a:a2:de:e5:32:78:e4:bd:b8:a5:
                    80:dd:e7:2c:fb:da:d6:37:42:77:e5:2a:8f:79:a3:
                    72:19:ad:42:51:04:a7:6c:91:ea:04:0a:bd:29:8e:
                    07:02:f8:75:eb:08:12:75:10:56:8d:9c:8d:41:9e:
                    f1:e3:4e:25:4a:02:f1:c8:e7:9a:b8:c2:fe:8c:0f:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C4:90:0F:E0:D2:23:A7:22:09:34:69:14:9A:C9:BE:1B:CF:32:7C
            X509v3 Authority Key Identifier:
                keyid:68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a6:e5:3c:51:f5:2e:74:f5:41:06:b5:58:e9:04:e7:47:94:
         ca:cf:89:2a:5a:0a:e6:d6:44:35:53:1e:bb:66:2d:03:b6:17:
         44:1c:a6:0d:5c:ba:dd:6d:99:de:14:21:85:c6:cf:73:e3:2e:
         57:46:cd:d5:01:37:18:7c:42:6d:32:51:2b:01:e9:cf:ab:77:
         63:59:4c:e2:99:ba:c6:5b:81:a2:3c:69:be:31:f7:69:24:0b:
         05:f1:0a:9d:f8:b4:96:56:bc:aa:37:99:04:f4:f1:fa:1d:07:
         92:4c:0c:84:cf:06:85:e3:e5:40:09:cf:3a:d9:53:05:ac:7a:
         30:1b:e3:a8:ba:70:7e:e7:e7:ae:64:bb:e4:8b:d5:29:84:c3:
         95:40:cc:2c:4a:e9:4f:c5:d5:a6:65:18:d3:2e:70:a6:2a:d0:
         b7:e7:fd:eb:a9:44:a2:a1:0a:da:d8:32:35:fc:77:7b:31:2f:
         96:c0:ab:15:97:eb:ce:2e:71:d1:89:0f:5c:87:19:e8:03:84:
         bf:81:d4:ca:4b:1e:8c:fd:fb:0a:5f:88:c4:7f:e8:c9:c3:41:
         2b:77:50:38:a4:4c:e6:c4:7f:94:2d:d6:b4:fa:68:e2:13:7e:
         d1:6e:ba:be:04:7b:24:77:26:12:08:22:b2:e9:ad:87:79:c9:
         5b:7d:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:05 2026 by rpki-client