Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
File:                     M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json)
Hash identifier:          UqEKQjpOisapG59E854Op7BVQWoHx4oBeSZfV9l/g34=
Subject key identifier:   E4:78:D7:E4:FE:F3:C8:55:F2:02:C6:9F:BF:FD:65:3F:2F:58:6B:C3
Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2
Certificate issuer:       /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2
Certificate serial:       354A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
Manifest number:          354A
Signing time:             Fri 12 Jun 2026 15:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 15:01:01 +0000
Manifest next update:     Fri 19 Jun 2026 15:01:01 +0000
Files and hashes:         1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: KBdBHZNFfSqT61gnUkhqqBASPIzBhghOC1b/sZq1QY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl
                          rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13642 (0x354a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2
        Validity
            Not Before: Jun 12 15:01:01 2026 GMT
            Not After : Jun 19 15:01:01 2026 GMT
        Subject: CN=6a2c1f2e-0f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:02:82:b1:67:78:0d:ba:4b:8e:f9:41:1d:
                    03:83:48:55:82:3a:eb:65:20:37:13:df:9c:b6:3a:
                    78:cc:53:6b:f1:87:77:7a:f4:60:c4:52:8a:a4:b9:
                    44:46:c3:c0:00:83:38:88:02:fc:14:cd:3d:79:d9:
                    ab:bd:12:2a:50:fd:59:6a:31:3d:a0:84:69:c8:b5:
                    12:aa:d5:74:a3:4d:bf:cb:7b:80:34:71:a4:23:a5:
                    0f:74:8d:f4:11:b9:2c:a3:6a:de:22:b6:99:61:ee:
                    19:a5:86:b7:bc:86:d8:6f:c5:df:66:74:32:1e:a0:
                    ff:62:a0:fb:5a:23:2a:0e:6b:5f:4c:bd:01:12:2d:
                    12:d5:78:14:b7:99:9b:9f:3f:ad:ba:35:52:c0:ae:
                    1c:87:40:e0:6f:38:69:ef:1e:68:89:5c:2b:64:ae:
                    05:b9:25:79:bf:d0:97:6b:51:ae:c2:8b:b4:5b:eb:
                    72:71:dc:5e:bc:2c:ea:da:fd:37:c1:3a:bf:8d:3d:
                    bd:e2:30:ce:ec:5b:b2:93:4c:49:b8:2b:c2:2a:f3:
                    9f:34:dd:fd:8a:e7:2b:dc:1f:dd:ec:95:14:50:04:
                    b4:9f:81:05:dd:01:80:67:b7:92:db:03:07:26:59:
                    9d:a8:0f:1b:90:7a:45:a6:04:f7:6f:58:f2:67:8b:
                    8b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:78:D7:E4:FE:F3:C8:55:F2:02:C6:9F:BF:FD:65:3F:2F:58:6B:C3
            X509v3 Authority Key Identifier:
                keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b3:09:ab:93:16:d8:b2:8f:b8:d1:c1:16:41:36:80:06:a2:
         32:43:6b:a6:f7:dc:56:d4:3d:f4:2f:69:d2:68:82:9e:10:24:
         c7:74:b8:ae:d1:c2:4c:15:10:81:70:4b:33:08:fd:8f:27:e8:
         a2:c1:d6:dd:e4:cd:bc:97:85:ab:d6:8b:5e:5b:a4:49:b6:3c:
         75:94:81:09:20:f1:de:7b:e2:b9:40:ca:78:68:88:44:6f:fc:
         3c:60:93:43:d3:db:fa:69:67:13:de:e0:55:76:20:89:e2:cc:
         54:30:56:9b:c1:90:63:44:9e:dc:39:8c:0e:aa:c0:1f:7e:45:
         7d:f5:c3:73:2d:8f:37:20:6e:82:4e:9a:4f:59:f5:8e:df:08:
         ef:18:77:b2:8e:19:7d:69:74:d5:af:a1:88:bc:ca:5b:47:c9:
         82:2b:97:33:53:2d:01:e8:cf:a3:6a:be:76:2d:a1:e9:e8:c1:
         8d:b6:30:33:27:a5:95:9a:b7:af:17:5b:45:7c:5a:a0:a4:f7:
         8b:73:f3:b1:fa:1f:73:2c:3d:da:d8:f3:20:54:ec:88:cf:c8:
         e1:ae:5c:5f:76:21:0b:a5:ab:fa:d9:03:86:6c:3b:f8:36:d0:
         a5:df:51:ae:5c:9e:d3:da:f9:d4:f8:45:f2:c3:b8:60:af:f7:
         5d:5d:ec:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:24:04 2026 by rpki-client