Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
File:                     sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json)
Hash identifier:          T9yEhbCStRaE2/WscYJ5Xb5k2sRVrBTSX3pUI2lMEx4=
Subject key identifier:   35:02:7A:2C:6F:16:DE:79:CB:44:01:80:D5:76:30:B9:FA:63:0A:2D
Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
Certificate issuer:       /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
Manifest number:          010F
Signing time:             Sat 13 Jun 2026 06:23:49 +0000
Manifest this update:     Sat 13 Jun 2026 06:23:49 +0000
Manifest next update:     Sat 20 Jun 2026 06:23:49 +0000
Files and hashes:         1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: Hh3XF6Ab2ydd4Q6yT49GUM6Ck/A56mtcRhStd2hbOh4=)
                          2: 84E249E030D711F1A9283A38AD833773.roa (hash: aZtgUaUAy3lxVZGUWdm5XWesfC7FySUXNi8hLQd8w2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
        Validity
            Not Before: Jun 13 06:23:49 2026 GMT
            Not After : Jun 20 06:23:49 2026 GMT
        Subject: CN=6a2cf775-7504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:14:ae:08:34:30:33:8b:53:cd:28:6e:1e:
                    bb:b7:e0:17:30:c4:ba:9f:76:75:5c:c0:55:aa:9c:
                    77:a4:e6:e5:e4:a7:10:ec:29:91:da:dc:c6:c1:c6:
                    64:55:0f:a4:d6:e2:e5:11:1b:e1:3b:6a:4e:06:84:
                    ae:f9:2d:01:70:0c:34:00:ff:70:b9:dd:36:d3:3e:
                    23:3b:d2:0e:95:21:0b:fe:e3:3c:00:80:0d:99:f1:
                    82:88:3f:b1:d7:b7:37:b1:a8:2b:42:cf:ec:e4:a3:
                    27:84:25:bd:13:12:94:56:d8:2e:56:13:df:55:8c:
                    e1:e4:71:25:23:ae:8c:90:ce:5b:37:95:14:f2:1f:
                    39:52:02:04:ca:b8:d7:34:b6:27:95:47:4c:fd:46:
                    81:4f:21:be:92:74:92:3c:77:1d:52:70:9e:35:65:
                    5f:fa:b6:19:79:55:80:7a:dd:16:7c:56:d0:03:aa:
                    ca:0d:9c:a3:4c:c8:b2:7d:3f:07:e6:32:de:53:0d:
                    8d:d6:72:0f:33:f5:55:5b:4c:b7:6c:a2:55:3f:77:
                    82:46:26:82:8d:ea:ad:57:72:a9:ae:b7:a1:95:73:
                    8f:73:41:bf:06:c2:05:2a:c9:2e:2a:fc:11:bc:69:
                    2a:91:e1:0e:24:9d:ee:5e:38:8d:2c:72:91:ee:0e:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:02:7A:2C:6F:16:DE:79:CB:44:01:80:D5:76:30:B9:FA:63:0A:2D
            X509v3 Authority Key Identifier:
                keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:70:72:f0:8c:9e:2f:c7:6a:25:41:42:ce:c9:b7:e9:0c:fd:
         1b:5f:3f:60:1f:3d:c3:d5:e2:73:89:7e:bb:25:c0:04:10:7e:
         bc:6f:83:f4:5f:19:8c:14:04:96:d9:a4:d9:df:32:63:94:a7:
         89:ef:e4:ce:e5:cf:1e:02:81:6e:11:8f:69:a9:da:05:0b:26:
         ed:28:71:60:46:a4:31:88:3f:66:5b:1b:26:7b:8f:09:99:04:
         1c:0d:07:51:a9:29:e0:f2:9b:97:a2:06:dc:60:80:6d:1f:0a:
         05:2a:7f:25:bc:93:41:e3:36:8e:43:57:59:98:66:8f:08:7a:
         0f:91:c8:b4:65:a6:85:c1:ee:d3:3e:9a:f9:54:8e:48:5f:3b:
         4e:ac:d1:0f:6e:fa:6e:2a:2d:ea:70:70:06:11:8d:5d:c8:38:
         5d:6d:77:70:cf:77:0f:40:3c:32:a5:bb:24:59:15:a8:a8:f0:
         90:22:19:96:a4:23:ae:e9:dd:63:37:e4:75:dc:e0:f1:a8:c0:
         46:ae:d5:60:be:0a:e3:68:55:cf:b4:72:3c:d6:5d:14:6d:a5:
         17:06:b3:52:90:cd:38:4c:3e:fe:cf:f3:ff:77:3e:2b:56:58:
         5f:0a:23:73:04:6b:1b:36:5f:63:cf:97:4b:b6:3f:cb:dd:73:
         0c:69:52:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:03 2026 by rpki-client