Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
File:                     v1I81vFmSFOJGRVeX58meDD28B4.mft (raw, json)
Hash identifier:          vt3KMGNxY9U8nt/8GZZQpjgngAqCg1jLYOm6gUp5cMQ=
Subject key identifier:   66:24:1E:E0:D9:C1:FE:D5:0E:2E:8D:D0:1E:7A:46:FA:94:98:DB:19
Authority key identifier: BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E
Certificate issuer:       /CN=A9169A3F/serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
Manifest number:          0128
Signing time:             Sat 13 Jun 2026 05:39:01 +0000
Manifest this update:     Sat 13 Jun 2026 05:39:00 +0000
Manifest next update:     Sat 20 Jun 2026 05:39:00 +0000
Files and hashes:         1: v1I81vFmSFOJGRVeX58meDD28B4.crl (hash: l4suULYR5otdKDMxTPfI7p/cE2ePvuMFNI01FAFJJQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl
                          rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A3F, serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E
        Validity
            Not Before: Jun 13 05:39:00 2026 GMT
            Not After : Jun 20 05:39:00 2026 GMT
        Subject: CN=6a2cecf4-0b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:2c:10:f9:96:a4:d4:5f:f7:f2:67:db:7d:
                    bc:31:3a:81:0b:45:e8:c0:8e:60:ce:a9:19:b1:4f:
                    47:d6:3a:02:f9:c3:1e:41:22:48:96:a3:06:17:e3:
                    b7:c8:47:35:94:ba:bb:6f:e9:3e:f3:10:52:eb:95:
                    90:e8:4a:8e:c6:b2:dd:16:51:71:7d:d8:f5:b4:4d:
                    61:a8:42:10:2a:e0:2a:b8:b0:83:97:20:3a:d3:b8:
                    68:ef:a8:04:b2:ac:ad:65:89:81:5b:ca:63:39:70:
                    a5:5d:b3:31:1d:6f:c8:10:cb:3d:4c:61:78:25:d4:
                    10:dd:d9:4a:81:41:67:12:cc:cd:39:57:81:24:c7:
                    0f:8c:cf:79:18:5a:df:85:88:d2:df:be:7e:a7:2f:
                    8c:4c:3d:48:0a:2a:67:68:93:14:29:dc:db:a6:01:
                    67:80:50:f0:a6:5a:45:ab:2d:ce:61:11:5b:ce:af:
                    4f:73:b3:a5:ee:39:e4:2d:ca:70:35:5f:5a:b5:e6:
                    a7:7e:c0:2d:ad:c4:b8:f3:5f:8c:70:1f:ba:69:1d:
                    57:ad:f4:e1:b1:d1:19:e0:af:26:dd:16:da:70:e1:
                    32:a6:f1:04:63:74:b5:e4:26:b7:fd:52:ed:91:e7:
                    cc:06:c4:b9:a2:d8:5c:a8:bc:be:b2:e3:95:32:00:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:24:1E:E0:D9:C1:FE:D5:0E:2E:8D:D0:1E:7A:46:FA:94:98:DB:19
            X509v3 Authority Key Identifier:
                keyid:BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:26:5f:56:d5:f3:e8:0c:30:91:86:c6:9e:fa:6e:30:99:56:
         b4:23:5c:f6:f3:ee:05:0f:2b:85:02:e9:e8:a4:b6:05:94:68:
         81:cc:65:98:ff:21:d4:c2:06:d3:f8:de:29:47:26:e9:3f:24:
         3b:22:a3:26:53:71:f2:82:ec:c1:ed:c3:71:cb:cc:61:57:31:
         68:f3:1a:b7:26:59:cd:fb:98:0f:09:cf:47:55:c3:0f:b1:18:
         54:de:91:0c:03:68:c3:ea:2c:7f:5a:93:5f:f5:71:ac:d7:ed:
         bd:f9:05:ba:4f:e5:e9:8f:3b:6f:f5:74:9f:23:a3:e6:3e:60:
         0d:fa:db:a4:a8:2a:0a:5c:57:22:24:ee:22:3e:e6:f8:36:fc:
         40:52:83:34:fc:61:8c:f4:f3:4c:f7:f2:0f:3e:a4:67:b1:3a:
         25:67:ed:9b:dc:c6:eb:87:7e:b2:40:97:a4:cc:5a:fb:2b:50:
         6d:99:54:5d:44:90:45:90:44:83:6c:8b:c6:73:21:27:74:fe:
         ac:06:53:45:6d:63:13:17:63:ce:f2:73:be:dc:0e:e8:9b:5d:
         c1:53:ef:7e:b9:1e:e3:cc:fd:31:51:8a:88:00:1e:14:65:0c:
         c9:50:3d:93:f4:b4:00:6b:22:c2:c3:25:94:66:cf:e5:7e:6a:
         0a:98:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:33 2026 by rpki-client