Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
File:                     ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json)
Hash identifier:          gQntnHjBpcMT0dg8TVPrjDgo92+5v+adB2f/o4PHc8k=
Subject key identifier:   68:F7:AB:39:23:0F:AF:3F:DF:AB:BD:11:5E:ED:58:1A:80:82:E3:69
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Certificate issuer:       /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial:       04DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
Manifest number:          04CC
Signing time:             Fri 12 Jun 2026 23:54:50 +0000
Manifest this update:     Fri 12 Jun 2026 23:54:50 +0000
Manifest next update:     Fri 19 Jun 2026 23:54:50 +0000
Files and hashes:         1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: LB+yEqgkrNmWa0elY3cdJFG2bQApyWu9N8NJFICb7Ak=)
                          2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: 5ouGpnrc88UaPc+vfvkjp6GSHwZ+FFwFaS+DtJBuhFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
                          rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1247 (0x4df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
        Validity
            Not Before: Jun 12 23:54:50 2026 GMT
            Not After : Jun 19 23:54:50 2026 GMT
        Subject: CN=6a2c9c4a-757f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:19:ce:6d:e8:90:bf:b0:b3:e7:69:da:eb:
                    94:10:f8:62:ef:b7:5d:98:8f:57:3b:9a:f8:5f:bc:
                    bd:41:44:a9:84:91:1b:ce:52:e6:82:8a:45:40:73:
                    b7:75:4f:02:d6:21:eb:49:ef:bd:ed:14:ef:92:90:
                    20:02:25:75:c0:6b:b0:78:03:24:01:2b:85:69:de:
                    12:ad:fc:50:d8:f6:fc:c6:d0:0d:ca:dd:e4:97:4c:
                    ef:be:fd:21:eb:5b:7f:7b:e6:dc:93:c3:c0:22:0c:
                    a1:64:93:c1:b3:e7:51:71:f5:6a:be:65:bf:f8:28:
                    3c:17:cd:44:55:15:6f:de:48:26:dd:15:74:99:4d:
                    ef:b9:8f:de:88:82:de:a0:b3:31:ab:8d:fa:17:7e:
                    9d:e2:39:77:7d:1c:a3:54:4e:4f:a2:07:c6:a2:c0:
                    6f:83:a5:51:d3:a8:33:cc:1b:df:01:05:ab:f3:f6:
                    4f:dc:50:3a:e1:71:4d:0c:ce:ec:4f:bc:c0:19:88:
                    db:1c:ff:47:e2:16:c7:70:fb:d3:07:b8:03:be:fd:
                    1b:41:4b:e7:93:00:b1:22:35:07:d5:e8:de:d4:14:
                    4d:53:d3:01:0a:7d:84:f4:8f:bd:23:a1:c0:7e:fe:
                    60:7f:04:c6:42:12:26:60:e0:3d:72:cb:7f:4e:22:
                    f2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F7:AB:39:23:0F:AF:3F:DF:AB:BD:11:5E:ED:58:1A:80:82:E3:69
            X509v3 Authority Key Identifier:
                keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:31:bc:7a:2d:11:04:90:35:cd:2f:88:79:c3:46:98:14:e4:
         6e:ae:9b:a6:73:c9:de:be:33:4b:99:12:b4:78:a5:e8:29:bc:
         57:8c:0d:ef:80:ac:1c:93:40:5f:39:3b:c6:5d:cd:0e:65:6c:
         d6:92:1f:a7:8b:a1:1d:f9:10:d1:3a:e2:7d:31:70:ce:a8:d1:
         01:c5:c2:b2:0b:d5:e1:17:f2:fa:9a:13:a8:7b:5f:69:b4:88:
         ce:b2:c3:f3:59:13:0d:db:7a:c9:25:4a:f7:08:dc:c2:1b:bc:
         19:2b:17:6c:d9:67:59:b1:6f:60:4c:16:1e:b5:21:96:44:c8:
         ad:3a:84:4c:45:9d:cb:ea:c1:55:1b:29:a9:73:0a:da:17:75:
         ee:ad:5f:13:40:53:25:54:ab:5e:63:f6:fb:89:d5:df:57:b5:
         5b:bf:15:09:3d:f6:b9:c4:01:74:91:ac:25:b7:39:90:d5:39:
         ba:00:0a:10:db:77:3e:c8:70:40:07:6e:06:c5:46:eb:5a:3c:
         f5:cd:61:fb:5e:e7:64:51:3b:73:ab:c1:40:55:3f:d8:66:29:
         8a:43:0b:04:15:07:4c:52:d8:ad:35:65:7b:3c:69:dd:f6:5e:
         f6:63:57:b0:2c:bc:d4:0c:73:f3:20:7f:ba:bf:f3:ca:bf:62:
         22:01:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:20:25 2026 by rpki-client