Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
File:                     zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json)
Hash identifier:          eNxQ5AK1EF8lLoRWgugnCF/dHIk/f5/0lpDxCdEhqaM=
Subject key identifier:   7D:02:49:6E:98:44:7D:5A:FD:B9:D9:A4:C3:59:B0:8A:5C:37:26:69
Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
Certificate issuer:       /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
Certificate serial:       09CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
Manifest number:          09B7
Signing time:             Fri 12 Jun 2026 19:59:46 +0000
Manifest this update:     Fri 12 Jun 2026 19:59:45 +0000
Manifest next update:     Fri 19 Jun 2026 19:59:45 +0000
Files and hashes:         1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: zTJ4KCqzJcBdWEBxzuOKroZR0Fc70Grr9R1NpneBntg=)
                          2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: WShAID2RQGXvLt6YUD1Hwx0ZMGyvGXCWr68bcuwRc4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2507 (0x9cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
        Validity
            Not Before: Jun 12 19:59:45 2026 GMT
            Not After : Jun 19 19:59:45 2026 GMT
        Subject: CN=6a2c6532-b1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:f6:71:55:a5:43:86:f9:9c:b8:26:34:8e:
                    6b:f5:f6:73:f7:f1:b1:5b:d8:38:1d:cf:35:c0:df:
                    4d:6e:b7:cb:d6:96:6c:f0:68:c9:5e:f5:47:8b:bd:
                    c6:da:0d:33:61:ce:b9:95:70:7d:5a:7c:4a:cb:cd:
                    17:66:fb:05:85:68:d5:f0:71:c3:43:5f:e1:93:0c:
                    a6:d2:75:ce:98:d2:a5:84:64:52:1c:9d:1a:69:e6:
                    52:8a:92:97:17:67:dc:c4:ed:d4:fc:9c:c1:7c:76:
                    04:10:ce:ad:ca:a7:4d:3f:af:f0:48:e1:4a:f5:23:
                    61:23:4e:20:38:ed:c1:32:c9:9a:a8:c6:ba:6e:f8:
                    e1:86:e4:b8:e4:39:47:97:1b:95:c9:69:78:bc:3c:
                    aa:e6:72:23:6e:fe:f7:98:88:f0:2e:29:4d:7f:f0:
                    e2:62:3f:f4:fa:23:82:37:ef:a1:e5:b4:7a:6e:02:
                    f3:3e:25:ae:ca:07:ff:39:1a:26:f7:e0:e9:88:f9:
                    f8:c2:62:5f:2c:e2:f9:c0:d6:db:ed:5a:ff:46:78:
                    0b:be:00:03:bf:22:bc:70:dc:11:8e:d0:a6:a9:a9:
                    62:5a:12:bb:8c:aa:a2:88:e5:f5:ca:2f:95:26:3e:
                    c0:b1:d3:49:38:0d:d5:45:bb:a8:4b:94:68:9e:7b:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:02:49:6E:98:44:7D:5A:FD:B9:D9:A4:C3:59:B0:8A:5C:37:26:69
            X509v3 Authority Key Identifier:
                keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3c:36:5b:8f:c7:18:da:a6:e5:ca:f3:28:af:a8:29:45:aa:
         e9:b7:47:bd:1b:a7:8d:09:01:6d:66:82:6d:65:75:2e:21:85:
         70:24:f3:2b:dc:be:3c:f8:4c:72:fd:87:82:ae:ff:cd:c4:a5:
         10:7e:bb:41:8e:f1:d4:5b:42:11:c1:3d:c8:24:8a:96:76:06:
         03:c7:98:66:3a:29:3b:8e:03:8c:ab:a7:14:5b:19:94:0b:4f:
         93:06:7e:eb:a2:4b:77:79:40:0d:57:ca:a6:d9:62:01:21:0a:
         16:d8:de:96:5d:c4:48:66:14:7c:6c:ec:83:1f:d3:fd:20:3a:
         b1:c0:fa:c3:5e:63:91:5b:f4:a4:95:fa:4c:36:52:ee:53:9f:
         95:19:d8:a5:18:45:6d:78:57:34:65:5e:9c:1e:6e:01:8c:a3:
         45:53:0a:cf:7c:56:7b:4c:90:48:3f:b8:ae:4e:06:bb:1d:5a:
         f1:76:1e:68:de:a0:da:ee:17:72:05:23:25:1f:85:ca:c2:e4:
         18:5c:c8:ec:7b:76:45:63:42:0f:15:7e:a4:63:dd:5c:93:63:
         4c:6c:9b:ad:61:6f:57:a8:74:ea:41:cc:d9:de:d2:21:6e:9f:
         c2:63:f5:ad:af:86:45:f0:3d:b7:20:57:ec:d2:47:83:da:cb:
         11:b5:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:13:50 2026 by rpki-client