Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
File:                     z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json)
Hash identifier:          G983vUnnAzPLSjir4eEADhdVGOkJFGXplZI6dekITtQ=
Subject key identifier:   1A:6D:70:83:E7:C2:E1:28:82:3E:E1:7B:6C:3F:65:1F:42:9B:86:59
Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
Certificate issuer:       /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921
Certificate serial:       08D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
Manifest number:          08D1
Signing time:             Fri 12 Jun 2026 20:25:11 +0000
Manifest this update:     Fri 12 Jun 2026 20:25:11 +0000
Manifest next update:     Fri 19 Jun 2026 20:25:11 +0000
Files and hashes:         1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: B5QOMQDd70oTIU/4iqvl7tIXidV/PlXD8ypGzGAkjmk=)
                          2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: ye2w1MU0xLNOAhuqrYhDu4NrB2vk1m6TjmRZeLmnbh4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl
                          rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265 (0x8d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7ED9, serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921
        Validity
            Not Before: Jun 12 20:25:11 2026 GMT
            Not After : Jun 19 20:25:11 2026 GMT
        Subject: CN=6a2c6b27-9cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:a8:be:1b:48:37:ab:4a:45:56:f3:cc:50:
                    f7:8e:2a:14:c7:2b:77:3d:b2:f0:e9:99:67:4a:53:
                    3c:01:ac:67:34:ca:cf:15:0f:09:1d:ac:57:08:c0:
                    c5:ce:e9:ef:87:68:98:0d:32:40:98:79:cf:f6:c7:
                    cb:d2:2e:65:11:39:ff:d2:95:9d:f0:e6:43:1f:e5:
                    49:68:ec:aa:b4:a4:58:06:18:d1:9e:8e:c9:58:14:
                    c5:0a:96:d7:50:26:68:1a:bd:3e:a7:ce:0b:77:5a:
                    34:96:02:71:c2:67:b1:45:4f:98:77:78:52:c4:3f:
                    b7:43:69:3b:e8:02:3c:fb:10:7e:56:82:3f:66:fb:
                    1f:ef:83:55:9d:2c:78:92:83:fa:72:17:f5:18:5e:
                    89:c7:02:82:2f:0d:9e:56:56:90:ed:e7:0e:28:a2:
                    a8:57:8c:13:71:da:5c:39:4b:92:49:ef:d8:a3:1d:
                    6e:36:1b:d0:88:99:3f:4f:f0:b2:bf:60:2d:9c:56:
                    2a:0d:d5:ab:ea:df:c6:c9:bd:a5:0b:4c:d3:c5:90:
                    10:75:fd:c3:7e:88:c6:25:ea:8c:ee:88:07:aa:53:
                    44:fa:ea:7a:a5:ac:50:f7:42:1c:78:0f:db:dd:21:
                    e7:67:07:90:97:c3:66:4e:fa:0a:54:77:68:88:c7:
                    0e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6D:70:83:E7:C2:E1:28:82:3E:E1:7B:6C:3F:65:1F:42:9B:86:59
            X509v3 Authority Key Identifier:
                keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a8:77:a5:1c:46:f3:8b:e5:15:66:38:4c:68:66:03:7d:c4:
         08:6c:cf:88:8b:5f:76:ba:b6:27:64:3a:3d:e3:bb:d6:b2:66:
         ae:92:fb:19:9f:31:14:a0:3f:75:1b:8d:57:f7:28:e2:cd:f4:
         1b:69:79:a2:bf:b5:a3:b9:95:a4:bb:9d:63:c9:b8:e4:09:11:
         9b:bf:63:e9:73:33:ff:68:0d:70:6c:93:32:34:87:d9:84:93:
         85:ec:47:2c:c5:51:74:5b:a5:d0:56:e4:3b:5a:66:4d:b8:2d:
         49:7a:57:28:ab:35:25:1f:69:7b:6a:a3:f2:63:d8:05:bf:de:
         e3:2f:6b:b5:30:12:fd:ad:bc:b9:ff:a1:da:0b:61:28:ef:3e:
         b6:cb:25:16:99:e3:6d:d5:2d:f3:f4:55:6d:5b:8a:d7:b3:04:
         a7:57:75:20:5d:71:f6:42:e3:af:cf:b2:fd:61:57:cb:63:75:
         e0:23:50:37:29:25:99:2f:a0:25:27:75:11:cc:af:10:ed:03:
         4e:1a:51:04:2e:45:0b:e3:2f:49:e1:1b:4b:42:33:9e:25:cf:
         23:b4:50:65:e4:02:dc:e5:6c:0d:dc:1d:a7:26:be:5e:0b:19:
         08:32:21:cb:5b:d5:24:b5:21:62:d8:42:ba:9e:e5:91:92:28:
         24:16:41:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:41 2026 by rpki-client