Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
File:                     mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json)
Hash identifier:          rc3B9SE1wXpAYMVoJnuy/Y/K09qYfnqhOGJ4f500rHk=
Subject key identifier:   42:B9:9E:50:85:D4:02:AC:43:2E:8B:7B:8A:B8:DA:70:9C:03:0B:75
Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7
Certificate issuer:       /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7
Certificate serial:       352C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
Manifest number:          352B
Signing time:             Fri 12 Jun 2026 15:17:27 +0000
Manifest this update:     Fri 12 Jun 2026 15:17:26 +0000
Manifest next update:     Fri 19 Jun 2026 15:17:26 +0000
Files and hashes:         1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: 33/O/z3OBHcW6wlPhBk4Xv1MXZEDP+W7DAq0gN0sAMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl
                          rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13612 (0x352c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7
        Validity
            Not Before: Jun 12 15:17:26 2026 GMT
            Not After : Jun 19 15:17:26 2026 GMT
        Subject: CN=6a2c2307-b2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:8c:c4:06:87:1a:a2:bb:c7:33:7c:01:0e:
                    b4:6b:9f:0e:8e:4f:79:f5:a3:b8:bd:21:fa:c1:3b:
                    21:15:09:24:16:e5:fe:53:f6:28:4a:f6:f5:76:99:
                    c6:66:7b:1b:64:ad:64:0c:3c:b6:8e:aa:84:9b:40:
                    56:4c:e9:da:98:07:32:42:c4:26:04:58:d1:1b:dd:
                    82:40:64:9d:59:15:18:05:a2:c2:9f:bd:bc:83:fd:
                    f7:09:59:7d:f3:c5:9a:91:96:dd:b5:f9:49:70:8d:
                    86:62:db:7c:b5:14:2c:78:01:8d:10:43:f3:89:2b:
                    61:95:8e:c6:f2:bb:1f:a1:bf:b2:6c:46:2a:7a:37:
                    e3:fa:cb:33:bc:c2:a8:d5:d8:0d:00:bb:3f:be:7c:
                    06:3d:20:f6:df:c8:c1:ff:4a:a6:42:38:ea:97:9e:
                    bd:9c:6b:28:32:f9:3c:04:44:05:0b:83:10:0c:6a:
                    3f:a3:dc:b4:1b:f4:b3:5c:4e:db:40:9c:59:eb:28:
                    1d:b3:3c:7a:5a:ae:22:4a:1e:33:4e:23:33:9c:0d:
                    52:a6:5c:fa:63:c3:dc:ee:38:11:c2:1d:e0:34:e5:
                    ea:da:e4:b4:25:7e:7f:19:3d:e3:78:bf:09:ea:11:
                    68:95:e8:c0:8d:98:3f:89:53:fe:fa:c6:b7:eb:8e:
                    1d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B9:9E:50:85:D4:02:AC:43:2E:8B:7B:8A:B8:DA:70:9C:03:0B:75
            X509v3 Authority Key Identifier:
                keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:07:1e:a3:c8:91:06:5b:1a:fa:40:2d:50:98:6c:cf:b8:d0:
         4d:a6:bb:c4:c1:a6:b1:77:ec:c9:5c:b8:74:ba:f1:97:ba:86:
         30:ec:0c:2c:18:0f:05:67:fa:e0:39:cf:e9:24:f9:70:fc:c8:
         70:b6:8a:4c:bd:21:4d:64:13:ab:79:a5:c8:c4:4e:f6:56:31:
         a6:02:88:f7:45:81:97:e9:3f:0e:3f:d0:b4:f2:d5:25:fd:22:
         5f:14:63:1d:7b:93:40:81:8a:f2:23:ec:8e:70:77:a8:1a:19:
         be:45:2e:d5:21:ea:cf:a2:93:1a:1c:17:39:af:cd:0c:20:a3:
         c2:47:74:be:d9:8e:99:b5:f8:89:a5:7f:fb:7d:9f:dd:a8:06:
         f8:68:68:02:70:b3:9c:1f:c2:98:6f:4e:83:c5:3a:9c:79:b6:
         47:24:f3:23:f3:74:55:be:69:52:a3:fc:6e:06:0c:79:95:b1:
         04:9d:fc:b6:56:69:54:c6:22:e2:df:f5:4f:62:6d:08:a3:a9:
         8b:26:3f:33:2c:95:83:60:b2:fe:10:fc:65:06:31:ec:21:ed:
         e4:d5:81:d2:3e:1f:05:67:d5:6e:ce:34:2a:74:89:d6:10:bc:
         83:b4:41:29:0b:ef:1b:70:1d:4f:14:35:db:1a:68:6e:1c:50:
         28:97:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:33:50 2026 by rpki-client