Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
File:                     gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json)
Hash identifier:          rnHd8mWyLbFfl5pipqsVmzhn+lq/lCEThHqdhaoWwzc=
Subject key identifier:   DC:45:6E:90:EA:D0:56:F6:C6:E9:EC:22:E5:15:9D:EC:D4:84:FC:B1
Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
Certificate issuer:       /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Certificate serial:       3569
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
Manifest number:          3569
Signing time:             Fri 12 Jun 2026 14:22:09 +0000
Manifest this update:     Fri 12 Jun 2026 14:22:09 +0000
Manifest next update:     Fri 19 Jun 2026 14:22:09 +0000
Files and hashes:         1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: 1iMeyGe3MD2157olwtn0apOkiGZJ4dHbZSpM+8+OxtE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13673 (0x3569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
        Validity
            Not Before: Jun 12 14:22:09 2026 GMT
            Not After : Jun 19 14:22:09 2026 GMT
        Subject: CN=6a2c1611-7d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:73:e6:d8:cf:c0:ed:c2:e1:fa:e7:6c:c1:b8:
                    82:49:e2:ad:15:35:8b:56:79:4b:aa:0c:2b:f1:c9:
                    d0:32:1b:29:b6:c9:82:74:32:f1:8e:91:c9:40:8f:
                    67:06:a5:6f:64:e3:f2:4b:e3:c5:0c:40:c9:65:fb:
                    e4:36:00:20:61:7c:df:5f:60:34:35:9c:d4:c3:56:
                    82:9d:4e:41:40:c6:2c:45:d5:95:6e:6d:5a:8d:ee:
                    61:33:02:d6:a0:26:25:f9:2f:e2:67:e1:75:30:45:
                    d2:b3:65:ec:69:b2:d6:c3:f8:41:c4:90:69:38:85:
                    77:17:e4:07:e3:92:03:6c:24:a5:e3:15:81:ef:96:
                    f4:27:ca:f2:57:a0:e3:cb:65:75:fb:28:55:ae:54:
                    c0:4f:b1:00:d5:fc:89:3c:fc:23:b8:01:4a:1b:84:
                    38:b3:61:64:5f:cd:ca:82:3a:4c:24:70:46:a4:f0:
                    70:fc:12:53:b6:4b:e3:94:25:61:14:d5:85:eb:2f:
                    15:00:68:73:4b:00:bd:59:b5:af:0f:4f:22:57:cb:
                    cf:c9:4b:4e:4c:5d:ce:d9:a7:c6:af:ad:6f:bb:e1:
                    90:b3:b5:0c:38:88:dc:7a:b9:c5:9b:b8:76:eb:8e:
                    f0:3f:5e:39:b6:c6:50:84:0e:69:29:3d:20:f9:ee:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:45:6E:90:EA:D0:56:F6:C6:E9:EC:22:E5:15:9D:EC:D4:84:FC:B1
            X509v3 Authority Key Identifier:
                keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3e:2a:af:8f:4f:d6:ee:59:59:a0:08:0d:c7:79:df:d8:6a:
         78:7d:5a:64:4d:d7:cd:fc:fe:ae:f3:4a:43:46:88:ad:a8:87:
         c8:11:e4:88:d2:18:e3:28:e3:3a:6b:f1:f1:95:60:e2:ce:95:
         0f:66:d3:07:42:b2:b7:99:94:26:a7:35:ca:af:cb:e1:b8:f5:
         48:65:38:4b:d1:13:9a:50:bc:6f:24:c5:9a:b9:25:ed:11:9d:
         d7:a7:6f:a8:4e:d4:ea:f2:77:e8:b0:cd:7d:bc:56:b9:ff:38:
         9c:bc:35:5b:2e:a8:84:e4:46:b5:d2:2c:59:41:4b:e8:33:83:
         10:f4:a3:56:d3:36:67:ba:48:46:3f:5f:5d:61:17:f3:00:cf:
         0a:1f:7d:d0:09:69:7d:1f:5a:cc:48:be:01:1a:0b:ac:fe:ee:
         5a:a9:0f:1a:4b:97:60:b2:9a:c5:3e:6d:ea:ff:37:ec:d2:fa:
         7a:d4:1e:df:60:ff:66:fb:73:82:ae:79:6a:ac:b0:b2:bf:10:
         93:34:7f:19:22:4d:ec:a4:bc:78:ba:44:09:bf:54:1e:3e:7f:
         01:d7:76:a5:f9:96:9d:8a:ad:da:2d:fe:da:f5:f6:5c:3b:67:
         75:54:d9:90:7e:c0:0c:06:b7:98:e8:e4:c1:27:94:b3:26:e4:
         c1:d4:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:55 2026 by rpki-client