Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
File:                     WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json)
Hash identifier:          rTRNYc5VKLR8Bog2wukC/SDdDZrj+fz3OVa8MxpQp68=
Subject key identifier:   DE:FB:1D:5E:44:3D:27:7F:8F:29:91:BC:0B:E9:95:05:CE:5A:11:36
Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
Certificate issuer:       /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Certificate serial:       3549
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
Manifest number:          3549
Signing time:             Fri 12 Jun 2026 14:53:37 +0000
Manifest this update:     Fri 12 Jun 2026 14:53:36 +0000
Manifest next update:     Fri 19 Jun 2026 14:53:36 +0000
Files and hashes:         1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: Vn0G7xezpIf+1Pd+3sp86N9jWOl1JMTd7HMtCncUBCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13641 (0x3549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
        Validity
            Not Before: Jun 12 14:53:36 2026 GMT
            Not After : Jun 19 14:53:36 2026 GMT
        Subject: CN=6a2c1d70-6287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:42:87:19:09:49:34:ad:db:72:1f:fe:e9:
                    2c:72:c5:31:42:b2:7d:8e:5c:7a:3a:1c:21:d6:9f:
                    55:13:21:a1:f7:f5:a4:58:71:91:6f:df:cf:5a:dd:
                    97:92:03:d6:21:94:53:f9:f7:9c:c9:e9:ec:3b:61:
                    f7:95:60:bf:7f:bc:ba:3a:a8:8d:29:52:7a:03:87:
                    dd:ff:83:b3:48:d2:89:44:bf:2c:72:68:d8:c4:dd:
                    32:dd:9c:64:9e:d4:d5:74:5c:b4:b0:89:7d:d2:aa:
                    ed:f1:55:dd:64:76:9b:22:a7:71:60:91:84:6c:af:
                    15:d2:49:c9:15:2e:96:00:f0:63:f0:68:57:15:9c:
                    ca:ee:4d:f3:8c:ab:65:9a:1f:17:9c:d3:2e:39:83:
                    6d:2c:07:9a:c9:25:42:3a:47:91:2e:85:ca:d7:f4:
                    a0:16:1e:2e:73:88:aa:15:a7:9c:85:f3:17:2b:56:
                    64:4a:b1:1f:af:c3:d0:1b:e6:fc:6a:25:bb:57:e9:
                    f5:cd:5b:eb:28:b4:ee:69:1e:97:8f:fc:b9:af:57:
                    40:1b:83:38:39:5e:51:49:23:03:6f:bc:83:71:58:
                    ee:62:62:0b:03:7f:01:e1:55:9f:4b:05:9a:18:95:
                    5c:d9:70:ad:e3:50:85:54:6f:86:87:0a:a3:c9:be:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FB:1D:5E:44:3D:27:7F:8F:29:91:BC:0B:E9:95:05:CE:5A:11:36
            X509v3 Authority Key Identifier:
                keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b6:86:b5:b3:b3:c7:17:fc:76:3b:7a:87:be:4a:f3:0a:a0:
         88:61:da:58:ad:31:b7:5a:d0:fa:84:bd:35:16:4a:77:34:39:
         8a:5f:f7:43:92:9b:0f:b5:de:db:a8:26:73:fe:bb:4a:04:18:
         ca:0a:b4:fe:6e:e7:a3:1f:89:f3:56:d0:14:20:53:77:22:51:
         09:e3:d4:bd:36:84:fa:7e:64:48:40:ba:11:e1:00:b9:6f:b8:
         59:aa:6f:78:9f:97:6d:e9:7c:9a:82:b8:1d:4e:c5:84:a4:0a:
         d8:fa:ea:24:7a:6b:1d:e8:e0:0e:0f:9b:34:e1:e7:7b:68:34:
         4b:53:ce:8c:c5:21:c1:0f:f3:e3:84:82:07:dc:a4:7a:09:8f:
         4a:9b:1b:48:67:15:46:f6:a6:d5:31:ba:49:95:d4:f2:23:6d:
         c3:28:d6:78:5f:5d:4f:89:19:e6:5f:97:10:1c:83:4f:3b:f5:
         74:05:7a:1f:f7:a2:15:81:65:d7:d9:d8:b3:6a:e0:b3:1b:0d:
         08:b6:7c:4e:db:89:94:41:50:03:66:4d:77:68:a5:2f:a4:36:
         1f:f5:af:91:84:47:84:ed:c1:02:e0:78:0a:15:f2:4d:c3:0b:
         b0:1e:4e:d9:99:bb:db:ad:64:9f:01:27:b9:89:84:57:b8:a2:
         0e:2c:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:45:11 2026 by rpki-client