Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
File:                     tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json)
Hash identifier:          viYIKLbtPGhObYsyoJ+i6upUuMuKlj5S4hTmmxvzBXY=
Subject key identifier:   FB:97:CC:DE:1F:8A:91:C5:D8:41:37:60:44:AE:8D:D2:5F:C7:B3:C5
Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
Certificate issuer:       /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
Manifest number:          77
Signing time:             Thu 11 Jun 2026 10:05:07 +0000
Manifest this update:     Thu 11 Jun 2026 10:05:07 +0000
Manifest next update:     Thu 18 Jun 2026 10:05:07 +0000
Files and hashes:         1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: A/74hN7IkaOC5eIRyF9zevujiZFEaIlD7cXqey2hfyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
        Validity
            Not Before: Jun 11 10:05:07 2026 GMT
            Not After : Jun 18 10:05:07 2026 GMT
        Subject: CN=6a2a8853-6884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:13:5f:7a:5e:26:6e:72:5b:7d:23:f2:49:
                    7e:db:9a:9b:e4:90:68:45:e5:04:cc:b5:85:b9:0e:
                    73:4d:d6:73:51:05:33:07:25:16:02:5c:4c:ae:7e:
                    3c:a6:65:6e:f8:45:0b:3b:09:72:8d:fd:c7:bc:74:
                    05:8d:eb:97:6d:f6:ea:af:63:3b:3d:75:66:95:98:
                    e7:04:b2:d0:47:50:5f:6b:c3:c3:79:2b:70:86:34:
                    fb:0e:e3:83:b2:4d:74:32:15:95:e7:4f:57:5e:f8:
                    51:9e:4c:9b:6e:fc:7a:82:fb:b0:7d:28:ce:5c:51:
                    66:68:3f:29:17:ba:ba:fb:21:11:23:9d:f8:a7:6c:
                    49:e8:c9:62:3e:17:06:2c:f8:12:23:c1:c0:5e:51:
                    47:14:96:e5:de:d1:93:c9:3c:bc:82:41:f0:9c:6c:
                    5c:54:a1:ee:15:e9:a7:4a:a3:38:68:50:47:04:60:
                    fe:1f:cc:0c:60:c2:75:cf:15:0a:f9:f4:f7:e6:f6:
                    0c:e9:60:ce:ab:97:b9:a5:87:e1:a4:5c:19:4d:5a:
                    d1:d1:f9:84:fe:ed:a9:cb:97:29:e8:91:22:ce:8b:
                    f0:23:16:31:8c:b0:b7:51:28:10:ba:ea:20:a7:ad:
                    83:74:c4:34:73:88:4d:63:d8:b2:51:ad:cd:60:06:
                    6c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:97:CC:DE:1F:8A:91:C5:D8:41:37:60:44:AE:8D:D2:5F:C7:B3:C5
            X509v3 Authority Key Identifier:
                keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1e:da:8b:40:a2:1a:2b:57:c0:aa:d7:58:88:f1:7c:00:26:
         c5:04:d6:99:d7:b2:33:a7:52:17:99:3a:d5:3b:29:28:ca:f9:
         64:41:64:7a:53:f3:b6:9b:d2:ca:09:13:e8:96:c3:e9:e5:57:
         7f:0d:4c:93:21:a3:f9:c2:50:da:7b:b4:f2:2e:26:d6:3e:b9:
         36:b0:23:d4:5f:b2:1b:6b:0e:06:56:fc:25:54:b4:4a:e4:61:
         28:e1:0f:2e:1f:f8:e7:02:81:7b:44:51:10:56:9c:c4:8f:fe:
         55:10:ea:9c:f7:39:87:2c:c7:f3:8d:7f:d9:bd:a6:69:5d:99:
         f7:5f:71:6b:b0:3b:ad:44:8a:25:ec:e2:e6:d7:a3:d5:33:16:
         09:dd:69:ed:17:3b:5d:54:44:f3:b0:5d:d5:2e:c4:ac:b8:eb:
         3b:b2:c4:4b:03:d9:cf:11:e2:d9:19:38:86:f5:59:51:be:37:
         af:c8:e6:58:4d:0c:c0:9e:dd:fd:36:a8:4c:af:3c:08:59:42:
         f2:57:2f:62:d4:96:89:da:2f:ab:99:9d:de:c6:fa:12:53:67:
         94:d8:76:b4:17:d6:89:63:f6:92:25:e7:0d:dc:8a:25:c8:f3:
         d5:3a:1a:e1:eb:28:da:0d:37:c1:f8:af:ab:46:b3:c7:89:59:
         84:66:ba:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:42 2026 by rpki-client