Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
File:                     mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json)
Hash identifier:          PAngDEYqLN7cY6zKfIyl1WZzzYQsw2lYXqWSO5LthzQ=
Subject key identifier:   FD:11:B1:DD:D6:BB:9A:97:2E:D4:F5:A5:2C:E1:7D:D9:29:B4:99:23
Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE
Certificate issuer:       /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE
Certificate serial:       3555
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
Manifest number:          3553
Signing time:             Fri 12 Jun 2026 14:54:37 +0000
Manifest this update:     Fri 12 Jun 2026 14:54:37 +0000
Manifest next update:     Fri 19 Jun 2026 14:54:37 +0000
Files and hashes:         1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: bbTQ1vAwIFt1SdwYQ1X1+Llr/PiCanJXOQmZrh54ZGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl
                          rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13653 (0x3555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE
        Validity
            Not Before: Jun 12 14:54:37 2026 GMT
            Not After : Jun 19 14:54:37 2026 GMT
        Subject: CN=6a2c1dad-3c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:f4:96:98:ff:62:45:6f:aa:00:4d:43:ea:
                    2e:29:8d:2c:66:5b:fa:86:7d:fe:ee:47:f1:7a:11:
                    ed:a3:79:39:ab:3c:88:da:03:cc:84:f9:c7:98:8c:
                    c0:ef:fc:8d:3c:d4:9d:af:37:0f:e6:56:19:61:b5:
                    46:08:dd:1f:58:c3:8b:c1:1b:0e:d2:bc:5d:37:11:
                    52:45:3c:f1:54:d0:76:4c:b2:59:b8:3b:11:f9:7a:
                    94:5c:e7:97:32:1b:d8:43:bb:1d:66:65:33:87:aa:
                    5c:18:d5:59:54:df:81:06:b5:02:0b:36:5f:da:ad:
                    c8:e3:62:12:c5:1f:f1:9a:2b:e5:08:56:38:d0:d1:
                    05:63:8e:f1:36:75:a8:48:0e:74:96:8e:7d:3a:0e:
                    90:38:57:ca:b2:45:1a:65:5c:ae:ea:bb:d0:76:ae:
                    1d:12:a0:c3:66:1d:e6:e5:5e:a3:17:69:ca:61:47:
                    32:09:ac:fc:17:7c:8a:27:0c:51:55:91:82:db:5d:
                    db:a2:77:22:56:d8:5d:f9:f8:11:4a:7a:9a:d2:24:
                    9b:45:e3:08:3d:60:4c:7a:bb:26:81:54:a4:80:e5:
                    26:20:73:62:a4:70:3e:74:b3:c2:fd:fa:e6:22:36:
                    50:bf:72:fe:14:53:c8:e5:60:b5:3d:c6:a3:bc:d3:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:11:B1:DD:D6:BB:9A:97:2E:D4:F5:A5:2C:E1:7D:D9:29:B4:99:23
            X509v3 Authority Key Identifier:
                keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:71:e8:4d:c1:72:13:f1:10:cb:86:9f:0e:d0:73:aa:23:e8:
         91:c2:9e:fd:92:89:11:ef:b7:5a:3a:97:0e:97:ba:3c:fd:be:
         46:3a:10:6d:7f:7b:ec:d2:fb:e3:43:95:b4:7a:db:78:1f:4c:
         6e:af:e5:34:90:50:ff:23:1c:ff:f1:31:03:78:11:8f:71:b8:
         cc:1a:f3:23:1d:44:1d:45:52:29:2b:59:14:49:05:b7:62:de:
         fc:4b:67:9c:2f:50:48:be:3a:1e:09:31:1d:14:b0:0a:b6:7e:
         6c:55:57:55:84:f5:24:c7:51:2f:b8:9d:64:e6:46:51:8b:66:
         82:90:3a:71:63:5e:2b:23:5b:9e:9d:60:4b:04:22:42:ba:20:
         0b:41:6c:d8:db:83:bc:99:99:0a:f5:f9:52:ce:d5:36:82:97:
         39:67:00:59:85:a5:73:10:c1:f9:f4:96:f7:66:da:99:f3:cb:
         69:5f:21:ed:70:96:3a:46:ca:5e:7b:0a:76:dc:d8:b9:25:a3:
         6a:06:b4:f0:c7:91:dc:01:5b:7a:cd:4e:44:7f:27:7f:e9:cf:
         2f:0f:78:d6:07:72:e6:7c:6d:4e:5b:c2:99:f5:66:a6:10:74:
         83:0d:c8:c8:2d:ee:8a:ee:2a:41:c2:cd:fe:8b:51:1c:be:36:
         24:03:e9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:25 2026 by rpki-client