Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File:                     A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier:          aaZ734pTzRhJcuVIva+i+y6EiVumW6YOyKwl1W+alNc=
Subject key identifier:   BB:80:38:5C:26:35:27:0E:96:08:78:F5:11:D4:4D:E6:D7:87:28:37
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer:       /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number:          0154
Signing time:             Sat 13 Jun 2026 05:04:02 +0000
Manifest this update:     Sat 13 Jun 2026 05:04:01 +0000
Manifest next update:     Sat 20 Jun 2026 05:04:01 +0000
Files and hashes:         1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: 5c7X3uixPGwOZhDfGmKEunPW7jD0pXYn/Hy1hX3zipQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
        Validity
            Not Before: Jun 13 05:04:01 2026 GMT
            Not After : Jun 20 05:04:01 2026 GMT
        Subject: CN=6a2ce4c2-8aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:aa:d6:23:8b:77:86:dd:33:21:3c:5c:e0:
                    01:2d:a9:fa:ce:c6:3b:f5:1a:e9:74:8f:47:14:bd:
                    81:ad:e8:54:12:4f:c8:1f:20:87:7e:c7:32:13:80:
                    5c:9e:05:96:a0:0e:4d:43:da:49:f6:b4:fa:29:e6:
                    da:6b:b0:4b:c8:7c:d0:48:bf:76:46:a9:32:44:ab:
                    8b:c8:5e:33:d0:ee:a4:06:04:fc:a7:52:1c:b9:b8:
                    5a:d6:0d:3f:1d:65:5a:2b:24:dd:85:73:f1:ee:d8:
                    f8:08:0d:53:1e:8d:53:56:0b:0d:bf:a8:5b:7e:2d:
                    2f:cc:b4:2b:5b:fb:32:a0:dc:d6:af:69:08:05:9e:
                    d3:4e:86:2f:6a:91:78:48:99:12:3d:2f:2c:ec:32:
                    e6:9e:a3:4f:3e:5f:41:02:a4:ec:03:b2:41:d2:c6:
                    43:e2:b0:30:2a:e8:b3:6f:72:5b:ee:30:41:8d:d5:
                    9f:45:84:8b:80:d6:82:0b:3a:ce:d4:95:a9:0d:25:
                    88:e5:a6:70:5e:99:d4:cc:d9:c9:d4:1d:5d:14:01:
                    ff:8e:4e:38:90:28:45:fe:89:b8:61:66:10:a4:26:
                    7f:59:80:50:31:b3:94:d5:f2:f2:49:b9:30:6b:e9:
                    41:bb:cb:2e:d3:c2:93:7d:b6:bf:f8:f4:85:76:74:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:80:38:5C:26:35:27:0E:96:08:78:F5:11:D4:4D:E6:D7:87:28:37
            X509v3 Authority Key Identifier:
                keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0d:85:82:cf:0d:c7:f2:7f:14:54:95:84:8b:ce:ff:05:08:
         97:5d:72:7d:9a:0a:8e:db:23:54:f9:19:33:91:d7:8e:ab:b6:
         46:a6:ec:d0:34:b5:90:a6:39:52:02:81:6a:b8:a5:ca:23:5b:
         ce:a8:e3:db:4e:1a:4a:21:82:e1:40:b9:fa:79:1a:f8:a9:e7:
         1f:6c:e2:99:7f:be:bd:43:3a:5d:d5:fb:c5:00:c6:c8:f2:3a:
         a5:25:01:84:59:d7:e1:32:36:70:a1:04:5b:e6:8c:a6:9f:f1:
         1b:8a:6e:f2:ae:48:3e:f2:a7:d7:45:3a:44:51:aa:75:64:e0:
         72:3c:e6:a8:1f:30:98:22:20:7e:38:03:fd:30:cf:f8:e0:6a:
         71:8d:20:06:8c:eb:cc:43:71:b9:d7:b3:90:c2:c1:5f:c3:dd:
         05:63:84:17:15:c2:ec:83:77:3d:0f:b8:ca:7e:b1:e2:0e:5e:
         f5:2c:48:1e:8b:3a:c6:26:a0:0f:c3:5c:a4:0a:31:6c:68:a9:
         b9:81:0e:9a:e5:3f:b5:94:8d:fb:6a:04:b8:a6:22:00:28:98:
         8f:52:25:87:ee:0a:cd:f7:8a:7e:c5:cf:3c:f8:d6:d7:ed:b6:
         a2:fc:98:9e:cc:ea:87:65:51:66:18:71:89:74:1d:29:11:71:
         02:2a:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:59:41 2026 by rpki-client