Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
File:                     ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json)
Hash identifier:          PepKiH44moveIiZiFbCaLsz6PgwB4U5BkII7DA7uvEo=
Subject key identifier:   63:8B:4D:A1:72:2E:FD:BE:71:3C:1B:FF:E8:E5:AB:B6:82:20:0E:70
Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED
Certificate issuer:       /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
Certificate serial:       0695
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
Manifest number:          068C
Signing time:             Fri 12 Jun 2026 22:34:30 +0000
Manifest this update:     Fri 12 Jun 2026 22:34:30 +0000
Manifest next update:     Fri 19 Jun 2026 22:34:30 +0000
Files and hashes:         1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: 2wagXm0r/lgte8MFoYsh1KKuNhdAUDMK7zOeWPgqWO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl
                          rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91944AB, serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
        Validity
            Not Before: Jun 12 22:34:30 2026 GMT
            Not After : Jun 19 22:34:30 2026 GMT
        Subject: CN=6a2c8976-f9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:2c:5f:0a:7c:da:24:c8:87:f5:c6:8e:0b:
                    f3:79:cc:d1:e4:03:87:e7:94:2c:5f:f4:cf:92:22:
                    ef:f8:73:4b:12:2e:23:6d:39:88:77:a9:38:68:f0:
                    97:45:15:cd:2f:b7:dd:78:50:e8:57:6b:85:9f:63:
                    66:64:b5:1f:eb:14:b9:f0:b7:f9:e9:18:1a:b4:5d:
                    8e:6c:d5:fc:05:69:25:4f:b0:e4:44:50:9b:85:a7:
                    c6:60:91:81:a7:66:cb:5a:1e:fc:22:d9:43:5e:8a:
                    fc:58:9c:17:31:2f:82:92:38:8b:3e:28:3b:02:3a:
                    68:d3:90:85:7b:ee:28:b1:12:9b:e2:e2:3b:e2:0f:
                    fa:2b:fe:da:39:c5:be:39:a4:ff:f5:a7:cf:e9:ab:
                    f7:b1:80:d7:74:b3:50:89:9b:f9:75:d3:2c:4e:12:
                    50:72:f0:30:ff:5c:81:26:a6:bb:29:63:d9:97:07:
                    6c:ed:ed:e5:51:1c:7e:af:2a:41:8a:ac:b0:fc:03:
                    82:91:71:0c:0f:90:b2:47:2d:fb:70:74:7b:d1:2c:
                    96:46:54:cf:83:33:70:9f:99:72:3c:8c:77:81:de:
                    e8:9f:89:76:e5:f9:fd:bc:4f:c4:5e:e4:f9:cf:90:
                    c8:87:bd:2f:02:fd:f8:bb:5a:f1:06:2a:b0:cf:be:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8B:4D:A1:72:2E:FD:BE:71:3C:1B:FF:E8:E5:AB:B6:82:20:0E:70
            X509v3 Authority Key Identifier:
                keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a2:4e:62:d9:fd:f0:f8:e4:57:cf:20:39:39:30:ad:90:7e:
         a8:50:6f:ca:f2:e5:d5:cd:56:41:fe:7c:35:5b:0f:70:9c:e3:
         13:7b:6b:a5:ef:eb:54:4e:2e:2c:35:b5:c7:c6:65:5b:ee:da:
         e7:20:9b:fb:a7:60:26:58:5d:6f:78:0b:3d:7f:64:b1:87:fc:
         d8:b4:b5:6f:e3:ef:01:cc:08:82:2b:08:25:56:dd:f9:23:e3:
         e9:0d:31:66:77:31:33:31:95:02:e2:58:bc:53:71:88:62:c8:
         32:51:52:83:de:f8:97:99:42:f5:63:22:50:52:05:a2:d3:1c:
         6a:4e:81:f8:27:34:74:12:80:ee:12:ea:61:a1:66:5e:cd:ad:
         f7:87:c5:76:db:0d:51:e0:73:0b:80:59:2a:9d:99:19:d4:73:
         35:5c:bc:c4:7b:05:c9:d6:65:95:03:8f:bc:92:ed:8f:7d:e7:
         f1:ad:36:4f:23:0b:ad:1a:88:1f:c8:7a:0a:d4:e2:ba:78:43:
         9e:91:54:e9:7f:b6:82:12:7d:7a:f2:ea:f5:94:68:57:ff:87:
         3f:41:e8:d9:49:c0:49:bd:2b:81:60:d5:58:7d:a8:00:e7:2a:
         fe:41:6c:47:ac:2a:db:bc:a6:47:e6:e9:e5:69:01:47:bc:c5:
         7d:1a:0f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:26 2026 by rpki-client