Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
File:                     2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json)
Hash identifier:          bUJsMa3LPfMT33ylW5MpV7TOFfks/w+221TGAJX9PTw=
Subject key identifier:   A8:64:06:08:04:D4:98:64:EE:32:00:04:B8:D2:37:69:8B:5B:E2:65
Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC
Certificate issuer:       /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC
Certificate serial:       3549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
Manifest number:          3549
Signing time:             Fri 12 Jun 2026 14:49:26 +0000
Manifest this update:     Fri 12 Jun 2026 14:49:25 +0000
Manifest next update:     Fri 19 Jun 2026 14:49:25 +0000
Files and hashes:         1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: 7qLQ7W4kV/s5lZa8162mToEraPL5kfU3FqK6cOicaxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl
                          rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13641 (0x3549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127A9B, serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC
        Validity
            Not Before: Jun 12 14:49:25 2026 GMT
            Not After : Jun 19 14:49:25 2026 GMT
        Subject: CN=6a2c1c76-7a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:40:8a:cd:b8:b5:35:5c:7d:9d:4e:1d:38:1a:
                    6b:e2:ec:51:ef:c5:ca:10:ad:2a:1e:e3:33:53:39:
                    ef:a5:98:14:b5:c8:ab:8f:ea:3f:c6:90:cc:c1:88:
                    5c:0e:29:ac:02:94:29:f6:e6:24:aa:5b:d0:e7:3a:
                    b4:ae:28:e7:8a:4e:64:72:43:9c:25:a6:72:68:a5:
                    e8:60:4b:e0:97:b6:4c:ec:df:27:20:25:8e:24:cf:
                    8a:ca:75:5f:c8:90:a9:cf:f5:4f:c1:66:19:d3:79:
                    00:ef:fd:8b:a3:d7:d3:f6:e9:68:ac:d4:eb:19:3d:
                    51:24:c2:20:a2:7c:0b:44:d3:a3:da:ea:9d:1e:64:
                    78:8f:6a:c9:e3:ab:71:2e:68:95:75:3a:44:1f:db:
                    c2:7f:33:76:a6:f7:95:7c:59:09:ec:ff:58:6d:67:
                    6e:cf:6c:51:be:fc:0a:e7:0a:2c:22:70:d6:7e:e2:
                    da:79:a5:de:65:39:3c:f1:06:06:8e:41:ca:f4:ba:
                    2a:bd:a0:06:bb:f2:e5:ed:43:9a:09:d7:05:c1:f7:
                    08:23:c9:77:55:4a:76:c3:31:69:a8:9f:9b:c6:02:
                    4c:b9:6d:5c:74:ac:e1:63:b2:03:cb:c8:06:65:e9:
                    92:94:d4:e5:79:5a:8b:2d:da:28:ef:b3:f5:44:59:
                    50:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:64:06:08:04:D4:98:64:EE:32:00:04:B8:D2:37:69:8B:5B:E2:65
            X509v3 Authority Key Identifier:
                keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:08:a6:95:fb:72:bb:08:74:b4:7a:a6:79:67:c2:01:be:7d:
         3c:82:67:fd:71:0b:a9:60:78:25:dd:7e:8b:dc:89:64:fc:1a:
         57:35:66:53:e9:27:12:c9:77:11:37:52:46:30:e2:fa:09:55:
         48:c9:84:ab:89:01:3c:d1:f4:05:50:6c:7f:1d:7c:5b:82:7f:
         5a:74:fe:6c:a8:af:46:64:13:ce:00:24:f4:8c:33:c3:6e:ed:
         ac:8b:44:b2:88:89:ac:3c:7c:05:88:b6:13:a6:38:8a:19:52:
         6a:20:f9:96:d7:ab:dd:c1:0c:55:d3:e5:af:c7:a7:6b:c7:1d:
         92:94:33:59:dc:4b:fb:29:ae:c4:60:76:67:8b:3d:27:1c:bf:
         97:d6:b4:d8:fd:bd:6e:ad:02:07:b3:f4:81:49:22:36:1f:70:
         5b:0d:be:88:62:02:86:63:55:5d:10:fe:a9:b4:4f:cc:b2:17:
         07:de:39:fc:b6:2d:0e:7a:27:6a:f2:a7:ab:40:13:5d:4f:39:
         25:16:0b:77:e7:1c:43:74:b0:07:79:4f:33:bc:69:2a:cd:33:
         d1:f2:c2:b6:c6:d7:c2:74:3e:7e:2a:c6:d5:42:66:18:b2:77:
         00:1a:fe:c8:b7:82:b7:d2:44:ac:b4:d1:e1:f7:51:6d:db:83:
         9f:7e:05:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:24:15 2026 by rpki-client