Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
File:                     cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json)
Hash identifier:          vlHadeyG/vEtUJ+MI4nThRcorGTPlJ5rvaDRbWc4/iY=
Subject key identifier:   BF:F7:83:F7:C9:D5:87:F6:4C:81:E3:1D:30:70:49:5B:AE:FF:1C:27
Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A
Certificate issuer:       /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
Manifest number:          0255
Signing time:             Sat 13 Jun 2026 02:21:30 +0000
Manifest this update:     Sat 13 Jun 2026 02:21:30 +0000
Manifest next update:     Sat 20 Jun 2026 02:21:30 +0000
Files and hashes:         1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: qxWdckNIO4jQRYFN4rLn/zkWoPtjSgW/LHZO2LwlEis=)
                          2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: 59GaugIUboIgNlDlRnXyjQ4DeYaCEIFAJ1XQPKcxrCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
        Validity
            Not Before: Jun 13 02:21:30 2026 GMT
            Not After : Jun 20 02:21:30 2026 GMT
        Subject: CN=6a2cbeaa-2939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d8:02:0e:7a:34:96:b3:44:01:7a:2d:dd:ff:
                    6a:b7:cd:35:83:73:4f:79:8a:25:a5:3c:99:1b:d8:
                    bb:1a:de:22:52:4d:c6:cd:0e:d7:b4:aa:aa:19:d9:
                    b2:bf:45:c9:de:2e:80:cb:54:cb:70:4b:6c:2e:2c:
                    4e:cc:5d:1d:8f:96:de:dc:60:61:99:ca:15:31:e3:
                    18:8f:97:0c:89:df:38:38:09:0b:10:ab:ce:98:22:
                    a6:15:63:d1:03:90:fc:41:49:7b:d2:f5:b6:08:3e:
                    32:86:14:a9:6b:59:a2:fc:03:d3:09:b2:ed:6e:85:
                    95:f0:44:3c:af:1e:0a:15:c5:c2:16:23:60:0a:47:
                    0b:5e:1c:3e:5b:35:1a:79:ea:f5:cd:55:a6:3a:94:
                    f8:51:3b:6a:43:f7:97:9a:46:e1:ef:c1:3d:09:39:
                    39:c3:40:ba:a2:00:e0:2e:74:03:0c:2d:30:0d:e7:
                    09:fe:d5:66:8b:c6:71:ef:a0:71:07:45:69:41:dc:
                    c9:6d:1a:73:b0:89:1d:f7:c3:9a:8b:22:c8:1b:13:
                    74:a5:90:eb:ea:a4:2c:a1:48:6b:58:e7:79:51:88:
                    e6:f0:c0:2d:01:90:0d:00:46:ee:fc:ad:28:aa:47:
                    83:b9:e7:d6:1d:37:06:fc:52:e4:7a:d7:d4:44:f3:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F7:83:F7:C9:D5:87:F6:4C:81:E3:1D:30:70:49:5B:AE:FF:1C:27
            X509v3 Authority Key Identifier:
                keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:aa:d5:2f:29:23:9f:05:d6:e1:a1:eb:4a:df:7b:ed:e9:4d:
         de:5e:b6:1c:9b:84:d7:25:d3:7b:0f:8f:82:28:e1:10:c2:2f:
         27:12:9a:f3:6f:55:72:ea:80:38:bb:b4:0a:dc:e3:9c:cb:03:
         db:bd:33:71:69:e3:67:b2:66:17:17:81:87:b5:e1:1e:82:59:
         b5:d1:39:93:d1:5a:a9:ad:eb:12:05:a2:36:2e:ca:fa:8a:ce:
         4c:c2:b5:f7:3f:a0:92:9a:98:84:d5:b2:13:5d:b2:bd:69:3a:
         b8:07:f5:d1:98:d0:7c:e2:c4:e1:23:8d:9c:84:0f:6b:bb:43:
         59:9e:1b:69:49:56:05:96:ea:d1:33:ec:0e:2f:ab:da:3a:b2:
         7a:6c:67:9c:49:86:76:5f:03:9d:17:db:dd:0c:5b:90:f0:95:
         42:30:71:80:06:61:32:e9:f0:3d:c0:b7:59:bb:24:80:06:da:
         81:3b:56:8c:82:f4:cb:a7:0e:c1:7a:a8:d5:68:80:be:16:87:
         84:c7:38:3c:08:3e:f1:93:05:00:c8:53:d2:8f:11:2b:9e:1f:
         e8:db:f9:4e:f4:b3:e2:af:69:41:07:63:f7:de:c8:c6:9a:51:
         12:b2:14:68:b6:ac:34:4c:0c:36:28:a9:a3:f4:b5:91:62:5e:
         07:d7:2e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:19 2026 by rpki-client