Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
File:                     529w4WvXl_FHD9HglUZu2f_XC94.mft (raw, json)
Hash identifier:          ul4AgWhRFiAU9AdV2H7hQLTN2rwOVsWwora3SHbyfwg=
Subject key identifier:   78:6C:D0:C0:9A:41:F2:74:D2:FE:4B:09:E2:74:72:33:1F:E0:73:68
Authority key identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE
Certificate issuer:       /CN=A914B6D8/serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
Manifest number:          72
Signing time:             Fri 12 Jun 2026 18:04:28 +0000
Manifest this update:     Fri 12 Jun 2026 18:04:28 +0000
Manifest next update:     Fri 19 Jun 2026 18:04:28 +0000
Files and hashes:         1: 529w4WvXl_FHD9HglUZu2f_XC94.crl (hash: 9QLwVCNLxlXRv0EjO3Plxy+7m5I3C2zuG6qnl7YeCgA=)
                          2: 551B0760BEBD11F0AD50D23AC4F9AE02.roa (hash: 5yaxUN0WdNPJcEJkf69PFh/CxSo68teL13Z+Mjg2H+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl
                          rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B6D8, serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
        Validity
            Not Before: Jun 12 18:04:28 2026 GMT
            Not After : Jun 19 18:04:28 2026 GMT
        Subject: CN=6a2c4a2c-814f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:44:1c:e2:32:a3:d8:9c:ec:8d:59:d5:85:
                    32:b1:1b:30:5d:d4:66:45:fc:f1:fa:31:c1:b8:3f:
                    cc:c6:c1:2c:87:8b:ae:26:5a:d2:42:f1:04:1f:c2:
                    0e:ab:fd:57:8c:a6:0d:82:9c:1c:49:7a:6f:36:56:
                    b6:29:ae:65:a6:ae:7a:98:b4:a1:26:96:38:2e:f5:
                    a7:1d:69:17:af:6e:ea:57:06:31:ce:32:53:05:f7:
                    f1:38:73:a7:04:1a:4c:51:23:7e:97:f9:2e:e2:02:
                    bd:67:c5:58:8a:27:4f:99:a7:89:c3:7d:71:f6:61:
                    0f:ec:35:d7:58:f6:1f:ce:e6:f4:e6:7c:9e:b5:7c:
                    92:b8:17:c7:86:71:64:4b:c5:1f:4c:20:46:0d:ee:
                    24:89:74:5b:71:bb:f3:c8:14:03:95:d5:4f:4b:a2:
                    da:fa:99:ea:c7:bd:5b:1a:d9:74:b8:21:01:29:1f:
                    7c:92:b1:5a:6b:88:1a:26:4f:a8:3d:84:11:bc:f7:
                    c3:4c:08:ee:b3:63:06:1b:9d:a3:7a:0f:c3:70:0a:
                    cd:94:7f:3b:8c:db:29:c3:d4:16:5d:68:95:e9:df:
                    1c:48:94:32:89:27:4b:fc:e7:14:01:57:8f:3e:19:
                    47:6a:8e:00:e9:a3:28:ae:cb:bc:0b:49:c4:e7:27:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6C:D0:C0:9A:41:F2:74:D2:FE:4B:09:E2:74:72:33:1F:E0:73:68
            X509v3 Authority Key Identifier:
                keyid:E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:ca:52:ae:1b:d8:ac:b4:98:21:95:3f:d6:13:3d:33:39:
         b4:29:5b:fe:44:63:54:bc:49:f9:b7:fb:6b:40:0f:a2:b5:22:
         fe:2c:63:aa:86:d6:0a:18:45:e2:ef:1d:25:28:9a:49:f6:96:
         57:d1:03:bd:db:b9:bf:be:91:a7:ed:e5:19:a7:1e:a0:38:b9:
         95:a9:71:0f:58:de:e6:37:9c:2a:43:21:53:9e:a9:2f:cc:0d:
         29:f1:83:51:a9:5e:18:b1:71:63:28:18:a0:3f:e9:96:02:12:
         aa:1a:01:36:25:28:55:82:a3:d0:ca:2c:24:63:ef:29:45:47:
         1b:2e:11:12:cc:8e:2b:db:bf:58:3f:9a:29:f1:d3:12:7c:fd:
         16:40:5d:44:e9:0e:cb:a8:58:36:00:45:24:fb:73:67:a4:56:
         01:66:6d:3d:51:ac:e4:df:b9:be:c5:ea:03:91:b8:88:ad:43:
         45:0c:bf:ae:8c:89:91:6f:f1:35:76:20:6d:08:29:cd:79:1f:
         50:f6:c3:db:75:6f:64:5c:23:3b:1a:fa:ba:b0:0f:4c:4d:7d:
         cb:b5:b3:14:3d:56:0a:30:84:bd:7e:0f:90:af:92:59:22:e3:
         20:e6:94:6a:86:17:71:7d:9d:16:f5:95:d1:2e:39:01:4b:4a:
         ef:fd:3c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:53:40 2026 by rpki-client