Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
File:                     cNjYKyIacSIO_Vg9kvc2F15dAvE.mft (raw, json)
Hash identifier:          WnbOdGUPBiN6QmO6pd2bJxVL52CFeRn425+8wX6DxAU=
Subject key identifier:   68:8E:80:BE:CC:80:9B:38:74:F5:D7:94:19:65:C4:44:08:C1:93:ED
Authority key identifier: 70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1
Certificate issuer:       /CN=A91E9B39/serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
Manifest number:          63
Signing time:             Sat 13 Jun 2026 08:06:57 +0000
Manifest this update:     Sat 13 Jun 2026 08:06:57 +0000
Manifest next update:     Sat 20 Jun 2026 08:06:57 +0000
Files and hashes:         1: cNjYKyIacSIO_Vg9kvc2F15dAvE.crl (hash: 2TDrPTBg2uAYAV7MasZ7T+Eq9IoFUuOdxy4RaqGRdaI=)
                          2: 98127914D29411F0BA72510FC4F9AE02.roa (hash: fcVzdG0+J4J9gwuAgPs1jVI9TN7koe+xVsb1q5pHJIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl
                          rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9B39, serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1
        Validity
            Not Before: Jun 13 08:06:57 2026 GMT
            Not After : Jun 20 08:06:57 2026 GMT
        Subject: CN=6a2d0fa1-8bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:82:bc:06:a0:49:54:bc:c8:28:0e:60:bc:
                    68:13:f9:15:a0:c3:17:b9:cd:f2:55:bd:70:50:2d:
                    a2:ae:be:04:3c:6a:3f:91:a2:30:ad:10:da:25:20:
                    97:4d:6f:70:64:08:eb:7d:fa:24:13:53:97:d0:42:
                    f5:43:67:7d:9f:fb:45:69:bc:33:2a:88:e7:b8:2e:
                    8c:f1:d8:4b:db:9a:98:24:49:b9:f8:0d:a6:05:14:
                    17:7e:26:5d:ca:2a:4a:5d:7a:fd:79:05:b3:72:55:
                    5c:0d:33:b1:ef:e3:ae:c7:24:25:e0:57:8f:cc:81:
                    52:43:31:e0:99:22:37:23:b4:0e:35:b2:ed:b9:d0:
                    88:6e:ec:d3:24:54:97:07:bf:30:8d:d6:bf:fb:4a:
                    12:cd:82:24:cf:37:63:42:7c:6e:bb:f6:4a:a9:08:
                    c6:a9:4e:42:d7:71:c4:b7:78:69:39:dc:dd:d1:57:
                    cb:e5:92:29:1a:48:59:e4:45:b8:f1:89:4a:99:c0:
                    77:60:42:bb:ff:5a:5f:f9:c9:fe:82:1d:1a:88:07:
                    2c:fe:0a:5e:14:cd:19:80:dc:5a:f5:7d:35:e4:aa:
                    e2:37:f2:02:21:e1:5e:ac:ed:51:45:a3:5d:28:97:
                    48:03:66:b1:08:c8:f8:9c:33:6e:93:3a:f0:e2:05:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8E:80:BE:CC:80:9B:38:74:F5:D7:94:19:65:C4:44:08:C1:93:ED
            X509v3 Authority Key Identifier:
                keyid:70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b0:70:7e:3b:e7:e5:87:4e:3e:a7:85:e7:52:13:2f:b0:98:
         86:08:a4:28:a0:b0:d6:12:76:8b:aa:3b:e5:8c:7d:7c:b7:70:
         af:7b:bb:53:04:89:3e:ca:39:aa:bc:e3:e7:89:38:05:b6:da:
         92:6d:5f:f5:1b:db:8a:f0:69:dd:93:97:b0:04:c8:d6:8e:fc:
         7c:23:ab:7d:43:5b:71:a5:bb:b2:fd:89:27:9d:aa:dc:0d:4c:
         e9:0e:08:e0:71:45:7b:fa:75:d3:91:b6:1c:a2:c1:41:b3:0f:
         1d:f8:13:9c:dd:79:d6:3c:a0:ec:78:33:51:79:39:44:d8:85:
         b9:5d:cd:d5:bb:f3:f4:b5:ce:84:69:4e:3e:a2:5c:4b:ff:38:
         d0:b8:46:e4:0d:ad:a2:b8:c5:dd:aa:1d:4f:6a:8d:d0:7c:e4:
         52:d4:4c:c0:20:bf:f3:1a:b6:81:20:b3:28:82:87:95:90:0b:
         71:e3:67:94:f0:8e:a8:ec:c0:66:2f:d3:85:96:9b:a8:6d:1a:
         cb:ea:e8:05:78:ec:c5:3d:12:a5:00:d3:72:10:d1:6d:0e:67:
         b6:0f:20:3c:2f:ff:81:66:85:ed:5e:72:1b:cd:1c:47:cb:70:
         19:a5:27:e5:0f:3a:2d:f2:07:67:e5:48:b1:fa:4a:37:0d:51:
         5c:0e:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:12 2026 by rpki-client