Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
File:                     tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json)
Hash identifier:          2oh7BWZCihklUwbK2obn3avsh+so9UY0loWZYkqTFog=
Subject key identifier:   D8:B1:DC:44:94:55:FA:74:84:8B:95:2D:26:26:93:19:8E:A0:B0:68
Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
Certificate issuer:       /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
Manifest number:          024A
Signing time:             Fri 12 Jun 2026 18:39:44 +0000
Manifest this update:     Fri 12 Jun 2026 18:39:43 +0000
Manifest next update:     Fri 19 Jun 2026 18:39:43 +0000
Files and hashes:         1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: JENvLp+wq+XFLXLPA5YADKb9z3A2YKc+1ucgBzZQWqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
        Validity
            Not Before: Jun 12 18:39:43 2026 GMT
            Not After : Jun 19 18:39:43 2026 GMT
        Subject: CN=6a2c526f-860e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:3c:f6:36:a3:a0:cd:7f:20:4a:e0:01:4b:
                    96:d6:0e:77:9d:ac:3b:32:af:b8:4e:cd:ca:3d:e1:
                    4c:52:7b:18:1e:86:3c:f9:85:c3:7d:a0:1a:e7:c9:
                    ec:3f:e9:a5:06:86:89:2c:54:a8:52:9f:0e:2b:12:
                    e4:01:a5:80:6e:a8:2f:a9:fe:df:91:fd:08:60:8e:
                    84:91:19:ce:c6:2f:30:a7:ac:a3:de:af:2d:9c:b8:
                    12:37:55:28:c3:76:ce:1c:55:7f:87:41:3b:20:77:
                    a6:bd:96:da:db:dd:95:62:97:1c:ea:57:b1:06:cd:
                    b7:de:c8:6b:20:20:f1:12:79:1a:d7:85:17:33:7e:
                    7b:59:c2:7a:fb:47:88:b2:47:96:2f:01:62:a1:63:
                    dd:4d:8d:83:73:d3:bf:da:a4:59:a3:98:03:06:63:
                    40:3b:7e:d4:2f:60:43:18:62:55:1c:31:fb:04:03:
                    57:bb:18:8c:92:60:f1:d5:99:4e:5e:3a:b0:73:e9:
                    e8:dc:f5:6f:dc:83:e0:13:06:fc:4e:08:70:f2:04:
                    84:44:1e:8e:4b:c3:39:32:76:83:0d:c6:69:15:d4:
                    1f:e9:ab:5f:f2:89:a7:42:d9:30:88:84:ff:a0:17:
                    09:b2:72:fa:e3:2b:2d:23:d7:6c:9b:3f:34:94:9e:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B1:DC:44:94:55:FA:74:84:8B:95:2D:26:26:93:19:8E:A0:B0:68
            X509v3 Authority Key Identifier:
                keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d8:98:56:ee:e6:04:2e:6e:31:d5:b9:6c:fe:0e:47:f8:fa:
         f4:94:f2:4a:af:2b:a8:ff:18:a4:b4:b1:be:14:aa:7e:1f:b3:
         65:73:18:2c:73:db:b4:0e:48:bf:c4:88:1d:c1:42:f4:38:7f:
         14:e5:0f:e4:07:5b:cd:79:ba:b0:66:10:9d:dc:99:a9:71:25:
         be:da:c2:63:78:9a:c2:0f:de:f8:4a:cb:78:53:7f:42:07:36:
         12:01:34:c6:0e:e1:9c:4f:f2:18:dc:2d:83:43:10:8b:71:43:
         47:68:aa:5f:fd:d1:ff:9f:12:2e:b2:da:95:ed:b4:dd:a1:d6:
         a1:e5:48:ae:58:52:9c:88:ae:6a:12:45:cd:1c:76:5d:d2:ae:
         18:1b:e4:5c:f9:5a:74:a1:ce:12:e1:df:01:b4:70:dc:0f:08:
         d4:60:23:72:cd:aa:4d:8f:04:ea:40:2d:0a:3d:54:2b:c7:cb:
         a9:3e:5d:a4:ef:70:f1:5f:f8:63:bd:23:bf:bb:d2:0f:45:da:
         83:d4:6c:75:d5:c1:4a:49:e1:ac:17:ce:07:85:82:a4:8a:b6:
         40:ec:20:b9:ed:bb:9b:cc:e5:57:d7:b5:e5:ac:ea:bf:f3:39:
         99:f8:5f:51:e0:d1:14:46:07:66:85:a8:cb:43:e4:c2:31:6e:
         e3:0d:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:59:35 2026 by rpki-client