Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
File:                     CO_XGTj3-dyHpp9cs_hMektyoAo.mft (raw, json)
Hash identifier:          oe/z7CoE9ao3flIRTF6XTJ7Z5vD4S7qpCN+rrDkjXJU=
Subject key identifier:   7E:2D:00:04:0B:4B:79:66:17:E5:7D:43:23:D0:68:61:1D:A9:E4:82
Authority key identifier: 08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A
Certificate issuer:       /CN=A91218BB/serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
Manifest number:          0111
Signing time:             Sat 13 Jun 2026 06:03:14 +0000
Manifest this update:     Sat 13 Jun 2026 06:03:13 +0000
Manifest next update:     Sat 20 Jun 2026 06:03:13 +0000
Files and hashes:         1: CO_XGTj3-dyHpp9cs_hMektyoAo.crl (hash: kgeZPcwGLkTm7z88vtTKpYdu371N8Li8QfDF6JD0ldQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl
                          rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91218BB, serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
        Validity
            Not Before: Jun 13 06:03:13 2026 GMT
            Not After : Jun 20 06:03:13 2026 GMT
        Subject: CN=6a2cf2a1-1a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:f4:9f:af:fb:2a:b8:dc:da:3f:5a:08:3a:1e:
                    28:77:1e:09:c7:fc:52:ee:75:59:0c:0b:35:77:fd:
                    33:c2:67:99:e2:fd:ea:86:e5:78:e8:71:0e:0f:2f:
                    92:dd:99:5c:ba:4a:0e:66:bf:9e:3d:98:dc:93:68:
                    5e:12:a7:0a:29:07:6e:9d:8e:a4:d8:27:e7:0b:dc:
                    04:b3:66:99:49:ff:7f:73:9c:3d:19:42:a5:95:c1:
                    a5:c1:b6:15:c6:5e:a0:95:2c:52:b6:9c:74:e2:a3:
                    d9:fe:92:f0:17:a8:20:c2:77:ac:34:6f:46:34:bd:
                    b0:fd:58:db:70:55:20:58:12:ec:27:21:5d:df:d8:
                    f2:86:ed:2e:3f:4d:8e:d5:5f:2b:82:0e:b8:1b:1d:
                    b7:90:b0:59:69:ee:17:7f:18:3f:4b:64:79:0e:fc:
                    b4:92:5d:82:58:74:ec:c8:7b:2d:92:81:4a:dd:c8:
                    3f:66:0a:39:fd:dd:4e:7d:12:c1:7c:f1:e7:6b:1c:
                    3a:30:95:a3:e2:99:64:fa:84:ed:6c:1a:1c:70:db:
                    95:fe:4b:db:37:b6:14:7c:e7:0d:19:a8:f4:04:c6:
                    db:c4:7e:1c:77:00:c5:2a:bc:85:04:81:4c:f6:84:
                    f9:a5:62:eb:1b:a2:df:3c:ce:c2:eb:9b:aa:85:f9:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2D:00:04:0B:4B:79:66:17:E5:7D:43:23:D0:68:61:1D:A9:E4:82
            X509v3 Authority Key Identifier:
                keyid:08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b9:b2:fa:bc:49:aa:3a:b8:68:17:10:f0:70:8b:3e:55:91:
         ee:ce:9d:6f:ec:f0:1f:c0:24:34:02:a9:b7:d6:31:8f:ea:ca:
         99:c9:4a:ee:8b:e6:9c:3b:3d:fa:29:f4:7c:50:58:eb:fd:74:
         aa:01:64:f2:36:54:03:7c:29:75:06:d3:d1:45:50:1d:50:56:
         64:a5:cd:2f:fb:09:63:20:9d:08:a4:ba:97:f3:e0:f9:3b:04:
         39:9c:3b:84:4c:80:42:11:e6:62:f6:e5:d5:f0:5c:96:47:f9:
         8b:6b:fc:be:16:bd:2a:e0:9b:fa:04:7c:e9:81:7b:e8:93:f1:
         57:50:41:02:a8:c1:52:3f:89:04:87:2e:81:a9:cc:25:19:d3:
         ea:6f:81:4a:a5:26:1c:f9:d6:38:67:8f:18:15:64:db:b6:14:
         3e:93:0d:07:9f:d9:92:1d:49:a8:6d:d8:b2:ab:0d:2f:60:33:
         4f:86:08:8f:01:f2:6d:30:63:27:ca:66:fa:ec:a0:32:53:cd:
         08:cf:e6:72:fd:c0:3b:f0:0e:b8:d2:f0:28:a9:21:a6:a1:d2:
         1c:49:b7:e1:13:ce:f6:b4:ee:5a:35:65:f4:6c:67:4c:c1:41:
         c5:9a:22:7c:21:1f:68:8a:7d:c8:34:f8:07:10:5c:37:6e:30:
         e9:3a:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:07 2026 by rpki-client