Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
File:                     MZfydASVOdoqReLMBqpcyHTmJ28.mft (raw, json)
Hash identifier:          wnCeY67D7NsmVBmNfBu7SdA2pLGOodvTK1+K0jUtvWw=
Subject key identifier:   0A:14:20:FB:96:C8:62:1B:DD:A5:47:57:61:CA:EE:8E:67:74:A9:3C
Authority key identifier: 31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
Certificate issuer:       /CN=A919BF94/serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
Manifest number:          04
Signing time:             Mon 15 Jun 2026 09:18:54 +0000
Manifest this update:     Mon 15 Jun 2026 09:18:54 +0000
Manifest next update:     Mon 22 Jun 2026 09:18:54 +0000
Files and hashes:         1: MZfydASVOdoqReLMBqpcyHTmJ28.crl (hash: JuMItpVIuXNDI7J+apjP8+p3zhWHCu6vDRnAjRwLW/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
                          rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BF94, serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
        Validity
            Not Before: Jun 15 09:18:54 2026 GMT
            Not After : Jun 22 09:18:54 2026 GMT
        Subject: CN=6a2fc37e-61ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:3f:7b:96:41:12:6c:38:ad:f9:c0:14:6a:
                    e5:ef:74:d9:9f:93:4d:54:ec:19:cc:53:58:45:23:
                    d0:c8:7a:ac:f2:21:07:8f:79:5f:d4:9c:0a:67:af:
                    6a:56:42:8e:4d:b8:65:0f:31:d4:c2:aa:3a:ce:5b:
                    e7:eb:47:40:96:58:a6:db:c9:44:a2:ce:48:52:38:
                    86:05:90:4a:8e:f2:79:35:08:46:a9:6e:88:bc:7b:
                    43:6c:e7:4e:df:32:e4:6f:22:cd:cb:4c:87:b4:ac:
                    1b:e3:83:c7:06:4b:8a:a2:88:49:cf:67:40:44:b4:
                    1d:65:ce:fa:4f:b6:c2:f4:e0:d4:f3:be:05:b1:28:
                    9d:3e:e4:90:6a:57:4a:2b:ad:93:6a:32:cd:6b:44:
                    5e:ef:d2:fe:1f:e2:f7:71:d7:d5:d0:b2:c6:54:ad:
                    7f:47:5f:53:a1:2e:3e:fc:9f:a4:fc:cc:70:6d:12:
                    fb:f3:11:4d:82:3b:e9:52:1d:75:a8:21:96:ce:0d:
                    84:1b:aa:cb:e9:b9:ce:4b:6f:96:0d:8f:ae:04:6b:
                    9a:78:3d:45:33:c7:ec:c5:eb:0b:46:75:e8:8f:00:
                    02:78:d8:a2:f1:a3:40:9d:10:35:f1:84:cb:84:48:
                    65:17:84:61:88:c6:35:35:5c:44:b1:87:08:09:b7:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:14:20:FB:96:C8:62:1B:DD:A5:47:57:61:CA:EE:8E:67:74:A9:3C
            X509v3 Authority Key Identifier:
                keyid:31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c9:79:c6:07:de:bf:23:fc:d1:e2:4f:c4:67:d9:94:b9:7c:
         70:44:3f:c5:31:58:8a:03:ea:0b:62:9c:77:2b:3f:23:99:77:
         41:43:50:7b:2f:39:00:15:47:b2:8c:31:fc:c5:12:87:53:64:
         ce:6b:da:fd:32:f5:2f:ae:99:3f:a2:4b:ef:37:36:89:4a:42:
         8f:4f:68:bd:3c:b7:c0:1d:73:9b:13:53:3f:44:8a:30:91:49:
         17:cf:49:d4:c2:b2:9d:0f:94:0c:d5:ce:46:5b:77:fd:f4:c1:
         16:2d:d0:88:09:d5:54:f4:62:89:83:27:d0:52:f3:75:be:46:
         77:32:fb:60:de:f4:0f:d0:7f:f4:ac:75:df:b4:e5:dd:f7:5e:
         a0:43:cf:39:15:bf:22:5e:6f:d8:1a:c1:91:62:76:53:db:a4:
         f7:61:86:c8:85:cf:f0:1b:88:e8:c8:da:01:c8:5b:5b:ef:30:
         27:64:17:bf:e0:5d:58:cf:ea:57:07:80:38:50:31:94:80:7b:
         d9:34:1a:1b:70:5f:6d:ef:12:20:65:21:f8:f3:a3:aa:aa:98:
         a3:51:22:1b:b2:55:b2:de:16:c1:42:fd:83:43:0d:4c:c0:bb:
         bb:e2:3a:90:bd:f9:99:eb:28:9b:49:51:63:73:42:8c:e3:57:
         98:c5:26:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:04:36 2026 by rpki-client