Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
File:                     4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json)
Hash identifier:          y/AIxhUDQjdQmyTRvZTVfObaPF8rPni1DVWe7bw3WpE=
Subject key identifier:   5C:C0:A7:34:37:D1:1E:64:F0:7B:47:47:10:5E:AD:04:AF:24:DF:89
Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
Certificate issuer:       /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
Manifest number:          C7
Signing time:             Sat 13 Jun 2026 06:58:15 +0000
Manifest this update:     Sat 13 Jun 2026 06:58:15 +0000
Manifest next update:     Sat 20 Jun 2026 06:58:15 +0000
Files and hashes:         1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: TqgP+w2Jmu+vFXffPD/5FZ7v3VWfNbA+2mB3vdRvQzs=)
                          2: F88154843B9D11F091B39D67C4F9AE02.roa (hash: WttgIko4+9s/vHPmH0/bx3r2YOermo25w+xjC3iigHs=)
                          3: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: aa37TZjw6HNm2WFQiAgnFDeT1PF+5A+xhsToPCU7ZoQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
        Validity
            Not Before: Jun 13 06:58:15 2026 GMT
            Not After : Jun 20 06:58:15 2026 GMT
        Subject: CN=6a2cff87-2879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:4c:4c:c7:18:a0:1d:c7:a3:ab:aa:65:7e:
                    ed:0f:7d:a0:79:87:3d:84:0d:25:f8:b1:5b:d3:b9:
                    fe:a7:50:b3:41:db:2f:6b:e7:77:15:0c:c4:46:c2:
                    53:39:ce:30:f3:fb:ce:15:da:1e:ee:ed:e5:9a:a6:
                    17:ae:0e:98:dd:b3:ca:b9:f1:16:46:3e:f3:12:71:
                    65:60:fc:44:11:43:be:a5:3c:d0:84:32:98:3f:93:
                    84:a2:3a:40:2f:b0:6f:bf:8e:b3:8a:89:b0:35:8c:
                    39:42:bf:74:d1:0e:d4:5d:0b:65:25:ae:4e:5a:40:
                    eb:6c:f6:ef:e8:a7:bd:42:49:1c:4d:f6:59:5e:24:
                    5f:2b:5a:d8:c0:32:7e:08:a5:ed:36:39:cb:88:22:
                    86:92:38:25:ab:fa:80:e2:c5:8d:0d:5c:39:e3:53:
                    01:91:81:4f:b1:f4:8e:6c:99:ef:b5:c3:e3:80:a0:
                    11:c6:ba:85:98:cd:a4:f0:6f:f4:a0:82:d5:9e:e4:
                    99:5a:5f:de:ce:16:45:1c:39:01:8f:33:34:b6:49:
                    97:76:0f:7a:1d:4d:be:21:1c:ec:ad:fe:36:56:90:
                    f4:72:92:67:c2:56:d2:83:6d:64:24:d4:3c:72:0e:
                    ca:3c:cd:7c:31:e5:f0:dc:8b:44:e9:9b:85:52:89:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C0:A7:34:37:D1:1E:64:F0:7B:47:47:10:5E:AD:04:AF:24:DF:89
            X509v3 Authority Key Identifier:
                keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:05:2e:67:ea:16:3a:17:ae:91:09:b0:66:06:86:50:db:e2:
         0b:c1:c9:33:e0:23:31:71:69:af:7f:19:75:a5:82:28:e8:38:
         b2:32:25:ae:2b:f1:2d:49:41:27:08:13:64:ea:32:b1:75:c5:
         d6:a9:fd:8c:68:98:dc:42:f6:b3:0d:cb:28:70:b8:fe:ee:33:
         ad:f5:c1:81:4e:69:bb:b6:ac:e0:c6:36:12:f6:f3:31:bb:a4:
         9f:a5:07:c5:9d:23:25:13:7b:06:92:a3:0b:11:88:98:ca:61:
         f5:33:1d:27:27:e1:ab:f5:0e:b1:bc:7e:f0:c2:a4:9b:71:82:
         8c:fd:77:ba:db:16:7e:af:df:7c:2c:e7:05:83:91:94:6a:8a:
         c0:54:fc:c5:ba:4c:f5:4a:91:53:e4:f4:5f:5f:f0:57:3e:fb:
         88:1d:e3:ea:87:b0:d2:44:c6:d1:3e:d0:2f:9c:43:4a:d1:94:
         7a:f8:0a:98:0e:fd:8b:91:67:0d:06:d9:c9:fc:7b:98:9c:09:
         57:6c:0a:c3:ab:58:c7:92:49:de:87:e2:e4:a6:79:3d:20:83:
         e4:23:67:2d:80:01:75:9e:30:df:ba:37:cf:c8:a0:e5:9d:99:
         1a:fc:76:0c:9a:32:01:0c:56:70:52:62:9d:6a:bb:87:70:14:
         0f:61:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:29:00 2026 by rpki-client