Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
File:                     -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json)
Hash identifier:          YbQL6/f/u7Tsv9qYLeTeEp+syokgqs11/54UF20ClpA=
Subject key identifier:   E9:54:56:FC:0C:C3:13:2F:1B:80:0C:21:CC:BC:B4:2C:FB:7D:68:31
Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
Certificate issuer:       /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Certificate serial:       06F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
Manifest number:          06E8
Signing time:             Tue 16 Jun 2026 22:16:19 +0000
Manifest this update:     Tue 16 Jun 2026 22:16:19 +0000
Manifest next update:     Tue 23 Jun 2026 22:16:19 +0000
Files and hashes:         1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: UjL0cNpUsmQknH3I3ByXjvAK8hpW54MCtZQ3SzY3HKk=)
                          2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: 5o5rYNJMY6u7IAuqR1fUcxMRSoD/mkjMM0hq6ZRpfKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
                          rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776 (0x6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
        Validity
            Not Before: Jun 16 22:16:19 2026 GMT
            Not After : Jun 23 22:16:19 2026 GMT
        Subject: CN=6a31cb33-5eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:79:95:bb:10:fc:f4:22:1d:0a:36:67:25:d4:
                    84:84:c0:5b:1a:c0:f5:ed:f3:65:ee:66:e8:77:02:
                    f2:e1:ef:cb:93:72:5b:b6:09:5f:aa:5c:35:83:bd:
                    4a:c3:c3:39:01:d8:07:de:93:23:8e:9a:28:91:d6:
                    98:05:78:af:b8:d7:73:57:ef:27:b4:88:4e:dc:fd:
                    3d:2f:40:e4:bf:3b:1c:a0:56:dd:b2:90:01:30:b2:
                    1b:e0:73:c0:5c:f0:c7:45:19:e5:da:c0:6e:d2:62:
                    2e:ab:2a:30:e1:d7:b6:d3:36:76:e9:8d:41:93:fa:
                    89:07:d1:c5:fd:5b:74:bc:a2:29:53:71:c8:a3:06:
                    37:4d:3f:01:1a:77:f1:31:0f:bf:1e:a7:ff:3f:d2:
                    e6:bd:d5:a6:8c:7c:e6:f8:c3:2d:ef:71:cd:d0:53:
                    29:a8:08:01:57:5b:e1:9f:f5:c3:fe:61:1a:1a:b1:
                    8a:82:dc:46:db:9f:31:51:5c:50:71:aa:df:dd:27:
                    50:6c:43:00:63:30:15:65:b6:af:95:04:7b:d1:b5:
                    4d:7d:bc:a0:60:1e:54:78:c7:39:20:b5:2c:06:10:
                    ea:66:97:37:f7:03:89:f2:9e:eb:3d:e7:0f:dc:d8:
                    37:06:ce:19:73:29:cc:7c:25:a6:d2:03:9a:5d:40:
                    92:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:54:56:FC:0C:C3:13:2F:1B:80:0C:21:CC:BC:B4:2C:FB:7D:68:31
            X509v3 Authority Key Identifier:
                keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:25:ff:ad:c7:ca:fa:97:50:f0:0a:dc:19:e5:ae:f6:2a:9b:
         af:84:16:95:54:ff:11:e6:8e:de:f4:e1:69:b3:ab:f2:ef:41:
         e8:37:9c:18:94:17:74:68:6e:ee:d3:a4:77:e9:b4:30:df:77:
         90:68:42:7a:ce:c0:6f:f0:45:12:f9:c7:56:65:3e:00:92:bb:
         4a:ed:52:48:b8:16:3d:3c:d7:2b:1d:85:66:34:03:69:18:e6:
         82:6d:8c:cd:00:67:6e:52:a7:4b:d4:8a:f2:12:93:36:3a:e9:
         fa:20:51:ce:2e:02:c0:1f:17:55:34:c8:a0:b1:de:07:c2:77:
         69:01:02:58:55:ab:5e:96:e8:39:ab:1c:ae:75:20:a6:56:b7:
         ab:25:54:b5:31:ef:82:d0:c2:b2:c9:b9:a1:70:32:9b:a1:62:
         58:c7:07:18:3d:21:16:8a:36:2b:26:42:c9:f8:62:45:a6:f4:
         de:98:76:d6:01:23:06:49:bd:f3:ec:be:12:1a:64:36:59:0c:
         b7:0a:44:da:7a:30:47:76:9c:c8:45:11:c0:52:9a:ad:74:c0:
         28:e7:cf:f2:93:7a:54:4c:b4:44:51:6e:bb:ba:e4:5a:4c:ee:
         44:0d:0e:6a:d4:56:30:96:a5:a1:21:19:0b:fd:80:ed:d9:d3:
         bc:8a:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:38:15 2026 by rpki-client