Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
File:                     S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json)
Hash identifier:          pdREHJd+T7hSulssLsnRl1xBVEHK26iHko/5Psi5sJI=
Subject key identifier:   48:48:8C:0C:04:9B:90:0C:45:D0:89:D9:42:B7:0E:45:C5:EA:E4:75
Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78
Certificate issuer:       /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
Certificate serial:       0ABA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
Manifest number:          0AAB
Signing time:             Tue 16 Jun 2026 19:33:54 +0000
Manifest this update:     Tue 16 Jun 2026 19:33:54 +0000
Manifest next update:     Tue 23 Jun 2026 19:33:54 +0000
Files and hashes:         1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: epXrQ21w/GsxrQPwh2gYfKrxJJQ0vtzV0cWm4S9GFkQ=)
                          2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: vPWknUKvmhzNYKbXzeUeTtIU2gsg4u0/mGjZtAQaw4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl
                          rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746 (0xaba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
        Validity
            Not Before: Jun 16 19:33:54 2026 GMT
            Not After : Jun 23 19:33:54 2026 GMT
        Subject: CN=6a31a522-83e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:78:ec:7d:56:7c:88:c6:c8:26:5f:18:73:
                    52:7c:a8:f5:27:c2:0c:4c:51:3b:fa:ed:03:5e:e8:
                    54:9f:e5:6b:f5:42:95:c1:b6:28:b0:a0:62:9d:b3:
                    7f:88:15:be:f1:c2:a4:61:7f:fc:6b:49:92:7d:9b:
                    18:fe:73:db:e3:30:8a:84:13:8c:ca:56:f1:d3:5d:
                    80:1a:6d:72:48:f0:14:5c:75:b0:d1:3e:bf:a9:61:
                    b5:0f:8d:e1:96:81:31:5d:dc:1f:39:32:9a:58:6b:
                    2c:1b:50:50:74:f7:40:58:6c:f6:b5:a8:87:c0:04:
                    bd:dc:3f:73:e5:a6:de:09:f1:95:cf:38:b3:1d:81:
                    8d:6e:30:25:5c:d9:f1:f7:43:c7:60:2c:a2:2b:8a:
                    f6:98:ce:41:7c:d0:d3:87:e8:4f:67:04:0a:43:d0:
                    5b:35:31:c4:df:41:c0:7a:ee:9f:67:e7:fe:f0:04:
                    81:66:f4:67:61:c7:ca:17:13:df:2e:5f:40:2b:31:
                    1b:94:17:ec:c0:2c:e6:b7:b1:12:87:8d:b8:33:f9:
                    b5:e2:45:f0:08:6e:9f:f1:24:8d:7d:8d:60:37:f6:
                    2f:a3:7d:d5:ad:4d:d8:b3:be:b2:4f:7f:f8:21:6c:
                    da:0f:74:e1:58:a4:09:24:c3:b8:50:85:ca:88:2e:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:48:8C:0C:04:9B:90:0C:45:D0:89:D9:42:B7:0E:45:C5:EA:E4:75
            X509v3 Authority Key Identifier:
                keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:88:2f:9f:65:18:99:f9:ce:a3:72:11:72:2c:8c:2c:f2:d5:
         98:90:74:c4:94:58:fd:c6:c8:e2:2a:cd:dd:31:5b:a7:c5:05:
         05:66:9f:5a:ef:bf:56:c1:23:74:ef:72:e1:d1:37:1d:36:e4:
         5b:90:4d:e9:b7:a2:f4:dc:29:af:a2:6d:7d:eb:a6:bd:7a:14:
         5b:2f:00:2c:95:1a:f8:ea:d8:19:49:8d:fe:42:09:aa:38:50:
         40:e0:0b:5e:b3:2c:37:a2:87:e4:2b:80:cc:45:dd:bb:03:7d:
         8e:04:19:f6:9e:f5:f2:00:59:81:43:41:27:cb:01:17:61:b8:
         59:b8:e5:95:45:ac:7b:c9:ef:71:2f:47:3d:b7:bd:cb:23:4d:
         d7:6a:80:a5:58:76:2d:13:1b:aa:0b:7c:24:46:68:0e:6a:77:
         cf:b5:3f:b3:72:f3:74:82:5e:50:c9:58:6f:5a:94:e6:bc:21:
         87:6a:e5:9b:d2:96:c2:e5:58:6b:ba:bd:dd:32:54:0b:73:31:
         be:8b:16:14:71:02:e1:15:5f:45:40:e7:14:ed:81:7d:d9:0d:
         e0:2b:28:b1:b6:dc:bc:0b:f2:91:04:b5:66:6b:49:74:c7:be:
         34:95:02:7a:fd:55:71:11:58:5b:34:30:d0:95:16:6e:09:34:
         af:86:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:23:04 2026 by rpki-client