Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
File:                     y8ZgM3D76EzM4GToT08m7b7CZ7E.mft (raw, json)
Hash identifier:          Y+JELCnzPRKLwGvVP05l3I/EE1INeNsElYLIJOB9vS4=
Subject key identifier:   4A:06:2D:55:98:0A:9B:2F:B2:75:68:7C:CB:33:A0:FA:51:4E:33:9A
Authority key identifier: CB:C6:60:33:70:FB:E8:4C:CC:E0:64:E8:4F:4F:26:ED:BE:C2:67:B1
Certificate issuer:       /CN=A91D9CA8/serialNumber=CBC6603370FBE84CCCE064E84F4F26EDBEC267B1
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
Manifest number:          010C
Signing time:             Sat 13 Jun 2026 06:18:17 +0000
Manifest this update:     Sat 13 Jun 2026 06:18:17 +0000
Manifest next update:     Sat 20 Jun 2026 06:18:17 +0000
Files and hashes:         1: y8ZgM3D76EzM4GToT08m7b7CZ7E.crl (hash: 0yRepCRAJV+9wRukq0vY3Xh/v5f5K9iRCwjzMnpqOYE=)
                          2: 459A40A0399111F0B589186BC4F9AE02.roa (hash: scPqVoYPhM9N9nt8I3yfdS2nCVlGwPE0LU2L+VLMObQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.crl
                          rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9CA8, serialNumber=CBC6603370FBE84CCCE064E84F4F26EDBEC267B1
        Validity
            Not Before: Jun 13 06:18:17 2026 GMT
            Not After : Jun 20 06:18:17 2026 GMT
        Subject: CN=6a2cf629-7aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:bc:82:f2:5c:4d:3e:46:1f:8a:64:bf:b2:
                    9e:d8:f6:d7:bc:4b:58:b1:38:2b:fc:07:7e:77:66:
                    7b:10:60:a3:ac:13:d6:39:25:11:a3:90:75:78:a7:
                    3b:70:33:55:23:92:bf:14:36:ba:8f:54:d2:52:73:
                    d6:13:86:1b:49:8e:84:b5:b6:c1:26:75:67:86:86:
                    00:f2:fa:7a:e9:c3:bb:bd:f6:20:47:5b:6b:a4:78:
                    cd:e3:67:5d:4b:40:b0:b4:ed:ff:02:f1:07:aa:68:
                    93:f6:13:d3:93:7b:1e:ab:50:d0:48:08:ee:01:a6:
                    a5:1d:b5:d3:88:9c:88:a6:d3:ac:bd:b1:9b:a6:d7:
                    6d:33:e5:bb:c9:43:67:95:52:2e:97:fe:f0:68:18:
                    ea:fd:6c:a4:14:3a:93:51:9b:81:6a:8f:b9:93:78:
                    7f:cb:1e:54:6d:b4:89:e4:48:73:a9:c5:c8:2e:6c:
                    9d:b3:73:1c:0c:b0:8a:02:7e:b1:fe:dd:f6:bd:f3:
                    37:6e:b6:87:26:07:d3:3e:60:b8:a9:6d:9c:c6:e6:
                    18:f4:d0:bd:56:12:28:33:85:aa:ca:79:c9:7f:d1:
                    a8:31:ad:8a:15:98:13:8c:a8:a9:97:23:42:37:64:
                    b5:d8:f9:3a:72:fb:7c:21:59:4b:30:7b:6b:be:bf:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:06:2D:55:98:0A:9B:2F:B2:75:68:7C:CB:33:A0:FA:51:4E:33:9A
            X509v3 Authority Key Identifier:
                keyid:CB:C6:60:33:70:FB:E8:4C:CC:E0:64:E8:4F:4F:26:ED:BE:C2:67:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:88:02:2e:f3:48:48:15:d9:cb:b1:1f:07:9a:c4:fa:a5:e7:
         7d:19:61:19:13:9d:31:d8:8b:0e:b9:9e:a7:3a:80:c1:76:ec:
         02:63:9e:81:ea:83:06:72:4f:75:17:ce:de:2a:94:ae:e5:7a:
         11:8a:69:13:da:93:46:06:2f:39:a9:17:2b:88:57:df:ea:95:
         a7:bd:22:6d:f7:02:5b:ab:3d:84:ae:0c:4b:a7:3d:43:f3:fd:
         ae:cb:aa:cc:c2:ad:d2:f8:91:01:9f:87:e4:11:60:1c:27:cc:
         d0:0c:0d:ef:37:52:58:d5:5a:5b:06:e8:15:aa:5d:de:fd:cf:
         d0:b8:48:15:23:d8:0a:89:7d:61:12:31:ec:1d:80:1b:84:7c:
         5b:42:e6:8c:d9:04:ef:4b:e1:c7:d3:59:44:04:71:f0:bd:70:
         a0:96:78:62:59:a6:f0:b0:46:21:4d:43:ff:9b:d7:ff:9f:4c:
         53:29:dd:fb:85:f7:88:c8:99:cf:9c:24:d9:3b:44:cb:c1:b8:
         31:18:11:3b:63:6b:61:0e:6e:b8:43:3b:9f:7c:d2:43:27:c5:
         6a:c1:6b:69:8f:e4:83:31:0a:a6:20:7c:ff:2c:82:17:d1:0e:
         21:18:45:d2:48:14:43:6e:81:ce:b3:1c:de:94:18:b4:8f:e1:
         5f:12:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:51 2026 by rpki-client