Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
File:                     H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json)
Hash identifier:          KjoUUZpW38/9ZNWW3SsoRMmkp0BYHGzrNq6A3amLPds=
Subject key identifier:   C9:81:5C:DE:32:14:F4:3C:68:CD:BF:66:B7:65:1A:83:B7:C2:35:EB
Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
Certificate issuer:       /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
Manifest number:          F0
Signing time:             Sat 13 Jun 2026 06:30:10 +0000
Manifest this update:     Sat 13 Jun 2026 06:30:10 +0000
Manifest next update:     Sat 20 Jun 2026 06:30:10 +0000
Files and hashes:         1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: eFiXtFb3+iZBOMG5U5a3cLuWNoW08tD8ECySPqHSMdg=)
                          2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: VTTmes8N3+DkLFdnT/jEg6MX9n3Ds/jhDY1DgH8WfVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
        Validity
            Not Before: Jun 13 06:30:10 2026 GMT
            Not After : Jun 20 06:30:10 2026 GMT
        Subject: CN=6a2cf8f2-6f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:c8:9d:03:7f:9d:1c:7f:d7:8f:5c:db:be:
                    b5:ae:10:20:0c:73:1a:66:cc:84:cc:c9:81:31:87:
                    7e:90:40:0a:1a:04:61:53:30:ea:d8:39:61:f0:6a:
                    75:35:51:b9:e1:26:a5:d9:ae:0f:c7:c9:f8:82:de:
                    39:f5:92:d5:17:e5:40:26:1e:d6:28:b3:74:50:a6:
                    4c:4c:4d:45:fc:81:99:96:67:80:57:62:61:c5:ed:
                    cb:1c:8a:ee:cb:35:b3:1b:12:27:f9:6f:d8:9a:9f:
                    14:bb:ba:79:77:46:40:ae:a0:f5:4b:a8:0f:26:b7:
                    66:5a:bc:a3:72:a0:fb:ae:f0:66:83:ca:7f:d0:9b:
                    c5:c9:a2:e1:87:14:84:52:07:e1:82:ec:23:fb:61:
                    2c:23:5a:7d:3d:98:fd:55:ef:0d:0d:4d:8d:51:94:
                    58:b3:12:56:b7:9d:f8:5d:7d:31:81:e1:d9:8d:cd:
                    cc:0f:36:3a:27:d7:97:99:a2:92:95:87:c7:0b:22:
                    3f:f3:fb:c8:59:eb:59:aa:db:0e:68:5b:0f:6a:fd:
                    4a:aa:64:e9:2c:d9:f1:30:51:45:75:43:ac:a9:f9:
                    c9:44:19:21:d8:a8:ee:97:3e:49:dc:81:d6:63:90:
                    dc:d3:e5:aa:c8:f0:cd:90:2d:42:98:af:4a:34:1e:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:81:5C:DE:32:14:F4:3C:68:CD:BF:66:B7:65:1A:83:B7:C2:35:EB
            X509v3 Authority Key Identifier:
                keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:93:65:f7:11:e9:3a:da:3c:af:22:3c:01:93:6e:b9:e8:3c:
         4a:22:86:a0:7e:b7:06:b4:40:68:ab:50:d3:92:d4:62:36:d2:
         db:8a:80:ae:2f:b2:3f:6a:c9:67:20:4f:61:d5:2f:c9:01:e8:
         4b:ef:b7:4e:4f:f9:1a:55:d6:28:8d:b6:62:5b:8c:58:47:a2:
         ba:83:96:7e:47:2a:ea:ae:05:72:f3:ba:90:d2:7b:85:ea:8a:
         ae:fe:8a:5e:d2:89:d1:86:72:79:f7:df:ec:d1:1d:04:aa:a9:
         53:29:d7:a1:61:11:4a:d5:dd:07:4b:7c:90:89:45:ae:80:f7:
         cc:ee:0b:95:2a:d4:45:8b:ef:e3:e5:be:34:32:c1:f3:0d:bf:
         32:35:cc:53:43:7f:8e:02:a9:4d:f3:88:f3:40:82:41:1f:2a:
         41:45:77:6e:d1:cf:1b:bc:39:b8:56:c7:12:33:62:07:0a:78:
         d8:a8:b5:f2:f0:42:19:7e:f8:3d:37:3f:ee:dc:6a:b2:f5:93:
         77:3b:95:ba:43:36:82:8f:02:d7:55:33:dc:2a:aa:db:0e:13:
         f7:06:7c:75:24:6f:43:0c:f3:2d:0f:52:a7:ce:65:ee:82:ca:
         2e:04:7d:ae:4a:16:4c:c3:95:1b:2c:b8:c4:f7:6a:48:6c:b6:
         69:9b:0a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:37:41 2026 by rpki-client