Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
File:                     I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json)
Hash identifier:          O2YVYJgs2uNgJvmQK6jjplAJaKTKyFwWG2WEUvmFYGQ=
Subject key identifier:   68:8D:85:C7:E0:C5:CC:35:7E:62:31:8A:75:26:28:1C:72:8B:97:D7
Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
Certificate issuer:       /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Certificate serial:       3694
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
Manifest number:          360A
Signing time:             Fri 12 Jun 2026 14:59:51 +0000
Manifest this update:     Fri 12 Jun 2026 14:59:50 +0000
Manifest next update:     Fri 19 Jun 2026 14:59:50 +0000
Files and hashes:         1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: 8H9m1igB3FT61C+VQNQ4MN0UXUkbv2GJ/gNeAmgw38s=)
                          2: 14C7EB3E4A0311F188B4A0B8BF833773.roa (hash: uuHcdBkxccty/weIenIOJopCypBlJDPkgRjWEztGkA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
                          rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13972 (0x3694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
        Validity
            Not Before: Jun 12 14:59:50 2026 GMT
            Not After : Jun 19 14:59:50 2026 GMT
        Subject: CN=6a2c1ee7-fabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:f9:e0:e0:b8:07:90:c5:c0:c2:46:a8:c4:
                    0d:d1:4f:a3:d4:9e:e5:3a:28:cc:9b:45:dc:45:02:
                    4e:7a:a6:17:e5:5c:3f:91:f8:2e:a9:f4:ff:9b:bf:
                    54:bf:f2:07:ae:f4:74:57:98:63:37:4c:65:b5:55:
                    3c:b1:ce:3b:0b:0c:04:b7:7d:de:90:b7:d3:95:7b:
                    00:3b:eb:6c:b6:7b:1a:ce:fa:78:5a:47:93:54:fe:
                    a3:d6:5d:86:ab:59:64:4d:dd:c4:73:cd:de:75:ea:
                    71:59:96:3e:6f:ab:0b:02:8f:ca:31:10:55:7e:90:
                    c9:41:73:83:14:d6:a2:a9:ae:6d:fb:6a:0b:70:c3:
                    46:c6:f7:11:f0:00:96:85:fe:ba:a4:03:fe:c3:e7:
                    bd:0d:d0:24:21:82:39:f8:d8:58:bc:39:1e:60:2c:
                    8a:e5:0c:ae:af:f4:29:16:51:c0:7f:ea:fb:d0:64:
                    f5:9a:24:d6:b0:ed:af:e7:fc:6c:2b:12:ef:bf:99:
                    83:be:1b:d4:6a:c9:89:fa:2d:e2:15:54:10:d1:f5:
                    bb:9a:cd:5c:7e:ed:fd:87:0e:0f:52:92:c8:36:b1:
                    52:07:e6:4d:98:2c:40:4f:9d:f0:c8:85:5a:88:ae:
                    0c:54:97:91:eb:73:54:78:35:a7:16:20:e2:5b:1a:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8D:85:C7:E0:C5:CC:35:7E:62:31:8A:75:26:28:1C:72:8B:97:D7
            X509v3 Authority Key Identifier:
                keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4b:6d:75:0b:a4:20:59:f5:21:f0:35:bc:50:75:57:21:40:
         e1:6b:80:de:43:52:50:ee:39:2c:63:7d:1a:f6:57:5a:56:4a:
         cc:f0:e3:23:59:6e:a9:b0:67:c1:52:04:3d:92:4c:e9:a1:87:
         8e:62:7d:ed:72:a0:38:b2:04:a3:57:f5:e9:b6:6e:5f:de:ca:
         19:b5:1b:71:19:9e:bf:82:ab:b4:43:37:41:90:c2:2b:af:4f:
         3e:c9:45:d0:60:b9:45:8c:1b:e9:09:c5:49:b4:ef:87:00:b0:
         a2:a5:74:e3:81:a0:7e:c8:fe:6b:81:27:13:38:d8:75:b9:f7:
         22:6b:1a:84:a3:00:58:be:d8:9a:00:99:64:f2:2d:fb:3e:85:
         78:8b:0c:13:06:5a:35:d6:14:6c:7b:5a:96:41:4e:1a:70:ee:
         b7:19:73:b2:ee:22:48:af:03:63:28:a5:6f:cc:28:fe:2a:c2:
         3c:fc:9a:d9:ca:83:56:66:2f:59:93:c7:ce:3f:c1:a2:cf:9c:
         27:b7:41:29:86:d7:f5:f2:d7:26:bf:7d:ab:27:4f:09:39:b9:
         13:a8:f6:7f:58:90:9f:9d:a5:27:c5:f0:3d:c4:07:42:55:72:
         c4:9f:ea:00:e2:8a:1e:a0:58:da:c1:29:9b:4b:07:ff:03:69:
         96:d1:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:13 2026 by rpki-client