Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
File:                     sc2DuJnOYCmsikIu278VgzU5HQg.mft (raw, json)
Hash identifier:          94EDG9Lwe4k5mg1ShdEsws+uvmDdGXd57IxmqG5q2z0=
Subject key identifier:   4F:1A:5A:67:32:22:3F:2C:3A:13:56:D0:A5:DF:C8:0E:0F:51:27:B3
Authority key identifier: B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08
Certificate issuer:       /CN=A9168497/serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
Manifest number:          50
Signing time:             Sat 13 Jun 2026 08:21:32 +0000
Manifest this update:     Sat 13 Jun 2026 08:21:32 +0000
Manifest next update:     Sat 20 Jun 2026 08:21:32 +0000
Files and hashes:         1: sc2DuJnOYCmsikIu278VgzU5HQg.crl (hash: zVh6BCXkbGZ/Pk/qctdk1Qtgd5D4CjirGGnTYg+B9W4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl
                          rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168497, serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08
        Validity
            Not Before: Jun 13 08:21:32 2026 GMT
            Not After : Jun 20 08:21:32 2026 GMT
        Subject: CN=6a2d130c-f095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:87:c2:b9:0c:9a:fd:c7:7e:b1:14:dc:29:
                    81:6e:31:69:79:b8:8e:01:73:ce:c0:f4:ff:5e:ce:
                    e0:cc:2c:97:31:b1:48:ca:7c:99:19:0d:09:6a:dc:
                    0a:00:dc:dd:fe:17:78:15:21:65:db:7e:47:18:e1:
                    15:ad:6c:80:1b:07:ae:7f:d5:91:71:05:18:e9:b1:
                    cb:d8:28:78:69:8c:cb:04:41:01:cf:30:74:12:ab:
                    0d:19:d0:1f:48:90:d9:db:bf:c7:f1:10:64:45:f1:
                    d5:92:db:44:f8:f0:c4:d9:26:99:5b:49:6c:c2:78:
                    2a:b9:85:72:7c:d1:fa:df:3a:ac:8a:29:ae:51:3e:
                    41:72:f7:a3:4f:e9:ba:42:c3:e5:f1:b2:6c:a8:d2:
                    a3:90:6d:15:87:65:3e:68:da:18:4b:62:47:1c:3d:
                    16:9f:e0:cb:4d:00:a7:9b:ec:aa:fe:2a:2c:92:99:
                    6f:0e:b2:07:ac:ca:c1:be:cc:9e:26:81:a8:4a:e0:
                    f0:8b:6f:a9:ec:a0:4c:8a:26:6a:5b:c8:9f:87:8c:
                    c6:6e:d4:96:cd:84:51:36:59:43:83:54:83:3b:62:
                    00:18:4a:31:4a:66:a5:bb:9b:9d:83:fc:22:46:1f:
                    72:79:fc:b5:69:a1:10:6b:e6:59:36:c2:3a:b8:57:
                    bc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1A:5A:67:32:22:3F:2C:3A:13:56:D0:A5:DF:C8:0E:0F:51:27:B3
            X509v3 Authority Key Identifier:
                keyid:B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:be:36:2c:ae:16:6e:0a:d4:10:50:a8:5b:35:50:de:76:19:
         ae:1e:52:76:ed:dc:61:ce:49:6c:ff:8d:27:15:25:07:b9:60:
         c2:2e:02:88:d7:47:89:cd:d6:64:8f:da:b0:07:d2:52:6f:0b:
         a2:bf:e2:5a:04:19:9b:70:cd:56:7d:5e:ae:27:12:e4:8c:42:
         59:aa:a9:a5:ea:73:4c:26:b5:25:3c:51:f6:a8:c7:fa:62:45:
         a0:57:46:5c:d4:61:11:7c:38:19:96:b1:59:81:43:67:51:c0:
         26:52:60:be:a0:d2:3a:7f:59:34:73:77:0f:2b:d3:59:19:b8:
         b8:c8:c6:b1:b1:f4:d6:3d:65:ab:d5:46:ef:78:2b:17:e7:7e:
         5a:ce:a0:e2:e4:d6:d5:f8:1f:6a:4c:c0:57:63:f8:36:84:d9:
         e2:5d:d2:5f:ca:1f:59:21:fb:6c:ff:79:de:d7:a8:af:65:d0:
         b6:bb:d4:3b:a5:ea:88:3d:c3:fc:56:6a:74:7d:b2:72:32:ca:
         e9:cc:6f:32:c0:8b:a9:8c:a5:79:62:58:fa:0b:fb:45:59:2f:
         5e:9d:91:c7:60:6e:53:52:c8:e6:a7:1b:c7:85:a6:b3:66:e9:
         e9:67:15:d9:f7:be:72:3e:f5:01:f0:f8:de:a6:af:0b:84:30:
         9f:90:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:03 2026 by rpki-client