Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
File:                     9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json)
Hash identifier:          i+BQcK1dqa0LFpJAf/B3X/uF4RsMHY4q1gjkH9qskdQ=
Subject key identifier:   24:D4:97:9E:39:26:5B:73:F1:0B:B7:C9:4F:99:4D:48:51:AF:D9:65
Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2
Certificate issuer:       /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
Manifest number:          0217
Signing time:             Fri 12 Jun 2026 15:44:17 +0000
Manifest this update:     Fri 12 Jun 2026 15:44:17 +0000
Manifest next update:     Fri 19 Jun 2026 15:44:17 +0000
Files and hashes:         1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: sqyD/uXA+kcb3EY2ykP5Qx7OwNoa5qLMv+L8zhhrYSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
        Validity
            Not Before: Jun 12 15:44:17 2026 GMT
            Not After : Jun 19 15:44:17 2026 GMT
        Subject: CN=6a2c2951-e80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:20:6e:70:4c:3c:4c:0e:ea:c0:83:da:81:52:
                    a4:67:dd:5b:50:be:5c:ae:46:89:dd:e4:b5:cf:bc:
                    e2:c2:71:1e:07:76:f3:cf:08:32:a0:4d:1f:6c:51:
                    1f:7a:6b:a5:17:0d:4b:bc:75:ab:5f:99:ed:46:15:
                    9d:23:31:95:ca:f3:2d:e1:54:4e:f0:66:bf:cb:d0:
                    6f:7d:c2:d2:f7:b9:0a:c5:9b:2f:fd:13:2d:62:15:
                    06:74:e6:7e:f8:2f:17:39:a3:d8:a8:99:5c:5b:1f:
                    cf:28:17:67:71:39:73:a7:8f:cd:25:65:c5:70:46:
                    a3:11:cd:30:f0:3b:77:6d:6d:0b:a0:94:d9:1b:71:
                    b9:ab:72:91:0d:89:8d:09:14:a2:a5:69:ce:0a:c0:
                    38:30:7e:59:14:08:6e:27:d8:b0:1d:9e:9e:86:20:
                    ce:aa:49:a3:79:ab:82:8d:ee:33:a9:6c:89:66:f3:
                    c1:d3:b1:f3:bb:7b:39:68:8f:5c:9b:f5:a5:bf:a6:
                    ea:e9:93:5d:af:62:1d:46:aa:c1:ba:98:2a:ea:88:
                    49:90:63:38:38:a3:24:ac:36:df:e7:72:df:a2:1d:
                    32:34:21:78:cb:9d:63:1f:fa:65:28:f9:63:c2:70:
                    84:e2:d4:ea:29:bc:cc:94:5d:9b:65:ca:9f:01:50:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D4:97:9E:39:26:5B:73:F1:0B:B7:C9:4F:99:4D:48:51:AF:D9:65
            X509v3 Authority Key Identifier:
                keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2d:39:cd:66:03:9a:a3:28:d7:8b:30:89:b6:77:b0:80:cb:
         53:55:17:dd:de:a9:1a:6c:5d:22:32:cd:b6:8c:e8:f7:10:6d:
         16:27:c8:31:65:ad:b6:b3:51:b2:74:cd:09:10:46:8f:41:64:
         4e:f9:79:d2:1c:c6:98:dc:6d:72:92:03:b5:ff:3f:03:99:19:
         8e:60:b6:ba:f6:db:52:ec:aa:7b:a9:65:c9:14:68:db:f7:df:
         e9:b3:e2:2c:5b:fa:9b:a7:ad:07:63:64:65:72:65:41:e2:fc:
         de:fc:7b:86:29:bc:b4:c8:0c:91:5d:6e:33:c1:f1:5b:cb:e3:
         27:de:82:21:58:cf:f8:76:05:aa:0b:8d:13:91:25:6a:58:27:
         76:25:4f:e5:50:e2:7e:d6:10:cb:b7:90:fa:d0:6a:ca:3d:d8:
         7f:cc:d6:da:9e:60:4e:65:cb:0c:e5:04:17:d0:fd:1d:10:2e:
         d7:e6:0a:16:e7:c7:a2:74:2d:ae:43:93:d0:98:a4:5b:d1:4a:
         fa:5d:38:55:e4:02:4d:07:30:c8:14:6f:6d:63:b5:ab:69:39:
         88:58:91:24:78:76:e8:0f:7c:b3:ae:b2:8c:e1:ac:e9:c3:0a:
         e6:b3:39:5b:c1:d1:d9:60:04:28:35:32:df:ef:0c:1b:10:b5:
         93:7e:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:35:22 2026 by rpki-client