Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
File:                     _AVdqSFUGMKhRWbvVna4pPTSCzA.mft (raw, json)
Hash identifier:          HE/htSxdcl/BRoKlSO7sZoCeKYn/BadtkS1ziVLqepI=
Subject key identifier:   A6:BB:EE:E5:AC:4E:37:4A:CD:DF:F9:EE:70:FF:59:81:2E:C2:C6:1E
Authority key identifier: FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30
Certificate issuer:       /CN=A91133DE/serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
Manifest number:          31
Signing time:             Sat 13 Jun 2026 08:43:50 +0000
Manifest this update:     Sat 13 Jun 2026 08:43:49 +0000
Manifest next update:     Sat 20 Jun 2026 08:43:49 +0000
Files and hashes:         1: _AVdqSFUGMKhRWbvVna4pPTSCzA.crl (hash: NmxL1OsW6xWOsyjH+/rsbwCUkgedQpT9SmqcvnByoaE=)
                          2: 3F1CEAEC1D0311F1B8948CF0043D8C67.roa (hash: 1C1WKunXRhUP/ppMqilBjQAG9/WWODiA+ekMdQn1ktE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
        Validity
            Not Before: Jun 13 08:43:49 2026 GMT
            Not After : Jun 20 08:43:49 2026 GMT
        Subject: CN=6a2d1846-ebf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e9:42:cd:b4:b5:27:2f:31:74:0f:ee:a7:80:
                    90:cc:f3:96:d6:46:fd:8c:c1:15:0d:6b:1a:94:b8:
                    a5:ae:e2:d0:97:74:20:5e:21:b4:68:68:a3:56:8f:
                    1f:ca:7c:8a:9f:34:b5:cf:64:cf:8c:a6:c3:ff:54:
                    92:49:9c:65:0f:84:59:fd:b4:95:bb:14:81:fa:d2:
                    72:c6:30:a7:71:a2:46:92:ca:3c:6b:7a:5b:b9:39:
                    75:6a:77:2c:f7:96:9a:46:be:f6:ab:16:b7:5e:f5:
                    bd:7d:b6:84:96:fb:fd:a3:e2:2f:e4:83:22:87:94:
                    70:1f:58:4c:ab:de:e2:df:b5:80:1e:9a:89:9c:38:
                    51:33:23:7b:64:36:ca:fa:08:a8:c8:3f:5f:00:61:
                    08:95:c1:7f:8c:60:21:61:5f:db:c5:ec:2f:d7:63:
                    ef:f0:cd:87:dd:49:3a:00:18:a3:d1:b4:26:8f:b7:
                    e6:00:42:95:f5:c4:89:09:84:e0:8d:4e:8f:dd:e9:
                    b1:8c:96:bc:60:eb:b6:a8:6f:b4:1f:ec:22:2a:c7:
                    01:09:6a:4a:31:13:2c:9f:fa:56:02:6c:91:a2:44:
                    b3:74:64:6a:d2:54:8b:bd:57:5d:44:c1:ac:5f:9a:
                    16:a3:3a:f2:64:b6:6d:fd:5d:77:bd:0b:9c:1b:f4:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BB:EE:E5:AC:4E:37:4A:CD:DF:F9:EE:70:FF:59:81:2E:C2:C6:1E
            X509v3 Authority Key Identifier:
                keyid:FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c8:0a:b5:8b:a4:e6:4b:d8:1d:01:71:47:43:66:7a:0a:e9:
         c7:76:0d:40:d1:85:07:ec:0b:3b:a7:44:2e:ed:28:2a:50:c7:
         b1:b8:ae:92:12:49:db:f9:b3:d0:19:e0:b4:bc:aa:73:fe:4e:
         9f:cc:63:9d:ba:31:c6:85:ff:82:37:e5:98:58:9a:4f:a6:9d:
         d5:02:dc:b9:02:ed:5a:4a:40:17:a3:be:30:db:9e:f7:ad:73:
         b1:83:14:25:6c:ba:da:bb:6d:28:fd:5c:06:94:28:0b:44:dc:
         bf:1c:6a:aa:75:9e:13:5a:e1:24:1d:e1:23:a9:f3:3c:36:ff:
         26:54:57:28:d7:5f:b4:fd:0f:9d:8e:d3:d9:d3:47:0d:16:ca:
         34:93:c1:c3:b3:6b:a8:ca:1d:ff:d6:c0:e5:c6:ac:07:85:47:
         50:14:f2:1a:aa:e7:d9:53:4b:c3:71:79:7b:3d:fb:30:2c:88:
         05:50:e1:88:fd:96:12:cb:11:68:fe:e5:0b:ea:6d:37:72:1c:
         d8:ee:16:ed:5d:b9:d2:51:ea:de:9e:9d:3d:62:88:2a:95:66:
         c0:b8:85:48:bb:ff:dd:dd:f9:42:ad:90:f2:37:9f:c5:dd:cc:
         da:ab:85:8a:86:83:03:01:8b:76:82:82:5a:77:32:21:44:9c:
         5b:a2:ec:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:13:42 2026 by rpki-client