Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
File:                     8e0mdV_Ai9BZkZUyuPo6akg04_k.mft (raw, json)
Hash identifier:          HWZ6yD6QqVJM/oXACTms0V443zDm06gWOvPnsR8N8xc=
Subject key identifier:   C1:17:23:C0:42:9D:6B:A4:AD:C8:FC:59:26:D2:95:0C:35:F1:AD:D0
Authority key identifier: F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9
Certificate issuer:       /CN=A91E6369/serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
Manifest number:          40
Signing time:             Sat 13 Jun 2026 08:35:33 +0000
Manifest this update:     Sat 13 Jun 2026 08:35:33 +0000
Manifest next update:     Sat 20 Jun 2026 08:35:33 +0000
Files and hashes:         1: 8e0mdV_Ai9BZkZUyuPo6akg04_k.crl (hash: RtQvzIydMlADK6NVUCZp5j53HKhkvpdJgdpudyGOoUg=)
                          2: E0F26F840C7A11F1925E54691C3D8C67.roa (hash: I7EBb+YBXT8xgUhV3T13QqxJ9GRbIYd43OJn2AJIB9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl
                          rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6369, serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
        Validity
            Not Before: Jun 13 08:35:33 2026 GMT
            Not After : Jun 20 08:35:33 2026 GMT
        Subject: CN=6a2d1655-6e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:11:6b:dc:bf:a1:79:7d:53:87:97:63:b2:
                    39:9d:49:45:f3:a3:ef:7c:35:dc:37:17:17:a1:ad:
                    31:ea:b6:9f:72:22:ea:e4:fd:3a:00:5b:69:7b:72:
                    d6:00:8b:08:55:f2:7a:76:22:69:52:ff:00:83:7d:
                    c6:f7:b3:eb:d7:d4:19:07:59:57:a0:0c:9f:19:41:
                    97:98:5c:75:07:ae:d3:e0:5e:53:ce:dc:7f:92:fe:
                    87:6a:18:e3:7e:99:4c:6e:b9:a6:4a:34:e3:45:a3:
                    0b:05:1e:97:71:08:9f:cc:b3:c3:71:b9:7b:8d:62:
                    f2:f7:ee:1f:0d:bd:48:ac:55:fc:49:1e:9e:be:9d:
                    8d:d0:10:29:bf:4e:6c:06:cf:b6:89:98:bf:18:b1:
                    9c:ee:f5:11:dc:84:73:69:d9:bd:f6:30:59:fa:02:
                    82:a1:c3:fc:f0:72:0c:07:3d:e4:51:c8:8f:c7:ea:
                    f3:0e:9c:be:a9:f5:c2:92:9a:e3:49:e5:31:3d:c1:
                    e7:0a:42:55:72:06:c2:4c:0b:4b:ff:92:6d:d1:d6:
                    41:25:3a:d2:b3:54:ae:ef:b4:2d:2b:df:bd:5c:74:
                    9b:ec:cb:19:62:67:39:3b:b4:28:f1:6a:83:e4:23:
                    21:c2:22:95:b9:33:1e:0b:95:0e:07:a2:f2:ce:23:
                    d3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:17:23:C0:42:9D:6B:A4:AD:C8:FC:59:26:D2:95:0C:35:F1:AD:D0
            X509v3 Authority Key Identifier:
                keyid:F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9b:14:84:af:f9:2f:f2:50:ca:f2:f7:6a:1b:b0:c9:ba:e7:
         41:40:f6:f8:65:a4:67:0c:39:d5:a2:ec:63:10:98:6f:cb:82:
         b4:56:19:5a:d0:a0:c3:fa:46:17:32:79:87:8b:09:58:e6:d4:
         b8:23:6a:59:9b:a0:16:d0:2f:f4:d7:35:92:94:5a:ec:46:10:
         9a:3c:4b:a1:a3:37:3f:92:8c:7b:4c:2f:93:64:4c:cf:ff:a8:
         d4:d3:23:e8:71:ff:bf:8a:26:54:20:68:f7:31:80:83:e8:44:
         3b:df:af:ef:2a:92:65:5e:cb:db:93:ee:c6:e1:dd:b5:21:cd:
         4d:65:db:72:bf:28:0f:9a:9e:5b:0a:32:5c:41:df:4f:68:48:
         b6:ea:69:42:aa:b2:e6:90:fe:68:3c:93:2d:10:6d:3c:e5:e5:
         e3:4a:9d:cd:88:9f:5e:7b:cf:83:0c:c2:af:4f:d3:ea:27:d3:
         76:27:42:b2:c5:e6:c7:ca:3f:66:42:14:5c:e1:3f:77:b2:ef:
         f6:bc:ce:68:32:95:1e:66:06:78:1e:7e:a9:93:63:d6:26:b5:
         c2:df:36:f3:a6:91:4c:87:f6:68:76:2f:84:0d:83:86:7e:83:
         59:75:b3:76:b6:25:23:11:77:7e:84:c9:13:60:51:3c:0d:b6:
         2f:99:05:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:12:21 2026 by rpki-client