Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
File:                     CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json)
Hash identifier:          E8OJ3Qns4wcg9qu/r/x2b1uBgR/ENmaVk14uLLRjiWw=
Subject key identifier:   A8:B3:C5:68:AF:93:BE:C1:B3:2F:90:01:C3:BE:6B:1C:08:F6:0B:C1
Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
Certificate issuer:       /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
Manifest number:          03DC
Signing time:             Sat 13 Jun 2026 02:05:12 +0000
Manifest this update:     Sat 13 Jun 2026 02:05:11 +0000
Manifest next update:     Sat 20 Jun 2026 02:05:11 +0000
Files and hashes:         1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: p+OTwCWoZh4VRNCp/JcHbkiM1cg3RxmA6RNE3aejxsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl
                          rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
        Validity
            Not Before: Jun 13 02:05:11 2026 GMT
            Not After : Jun 20 02:05:11 2026 GMT
        Subject: CN=6a2cbad7-a3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:eb:97:b8:91:77:cc:de:72:b6:5b:7e:49:
                    fa:de:0b:fc:c3:ae:90:79:e2:8c:4d:0e:43:8f:71:
                    d7:f2:90:84:c9:ed:c5:2e:77:52:e7:eb:22:a8:2d:
                    1b:57:26:4c:ad:cb:18:35:56:e9:75:ca:ad:33:56:
                    e0:4c:07:2a:6c:32:9e:96:dc:eb:f1:05:61:fb:17:
                    b7:92:32:7d:d5:5a:10:eb:13:4e:1c:79:55:2b:08:
                    30:cf:13:24:e0:6c:78:bf:e5:35:30:0a:62:bc:11:
                    20:d4:69:eb:c7:2e:c8:6e:14:34:2b:87:91:27:65:
                    1c:69:52:4b:fc:e5:79:fd:6a:8e:f0:c1:7e:75:00:
                    5f:53:98:b3:2e:03:12:15:35:f0:bb:52:db:52:99:
                    a4:a2:9e:31:c7:72:d4:76:b6:3a:e1:4d:f5:c3:b8:
                    df:09:d3:89:51:55:a8:f4:a4:fa:c8:9e:5a:e8:69:
                    f1:ab:13:71:16:45:92:3a:07:59:60:3e:7f:e8:87:
                    81:4e:fe:bd:d5:4c:9a:f7:eb:68:71:37:62:21:9d:
                    37:ac:07:2f:14:2c:8a:51:e5:06:45:b8:28:73:9b:
                    bd:81:d4:3f:2b:e0:83:52:ff:56:4c:c2:22:1c:9a:
                    58:11:02:ba:a8:1f:1e:88:c3:3b:23:23:e2:a5:64:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B3:C5:68:AF:93:BE:C1:B3:2F:90:01:C3:BE:6B:1C:08:F6:0B:C1
            X509v3 Authority Key Identifier:
                keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:61:5b:74:4d:57:27:30:c4:3f:18:4d:ec:a0:4d:7d:83:36:
         a7:c8:3b:97:33:57:98:a5:0f:e6:12:bc:62:d7:11:8c:d0:19:
         16:8f:9f:58:ef:ae:ef:00:0c:5e:57:d3:b9:64:40:9b:a8:46:
         7a:53:11:39:2e:bd:32:d7:e8:0a:04:42:a3:c0:4f:7f:8f:4c:
         18:2b:9b:52:b5:4b:f2:cb:b0:2e:56:0b:c6:bc:ac:4b:ad:3e:
         d0:11:10:82:e1:fa:b6:4d:5f:3a:f1:7f:bd:f6:f2:b2:c0:1a:
         86:0f:fb:3e:8b:67:00:56:2c:4d:97:65:2c:16:83:fd:01:3e:
         aa:71:8d:b8:ac:4b:b5:83:49:a2:fc:68:44:2c:70:46:7e:54:
         d6:ff:6b:68:0d:3c:55:0d:f3:ba:4e:e9:33:08:ec:37:d4:c8:
         9a:5e:3d:b4:ba:df:75:8d:32:d3:95:05:60:94:cf:9d:58:d7:
         a4:1a:10:db:c0:e3:d5:84:e7:5e:b0:12:e9:c7:b6:ed:88:a5:
         67:bc:ef:5f:3e:8a:aa:1d:70:95:fa:dd:2d:a7:da:bc:38:bc:
         57:0f:3d:2d:81:ab:32:13:74:69:57:90:31:4a:d4:25:80:05:
         d6:30:e2:21:b3:08:08:d7:ef:52:fe:1e:7d:1d:5c:a2:43:30:
         14:d3:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:39 2026 by rpki-client