Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
File:                     EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json)
Hash identifier:          5mJ0T9K6NeHfVuPhMEiFWopvrbSwRfUfW7zq2vSBCAE=
Subject key identifier:   83:E2:FE:01:A8:F7:60:C6:F0:2F:DC:0E:5B:81:90:2B:C9:E8:43:B0
Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44
Certificate issuer:       /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
Manifest number:          A6
Signing time:             Sat 13 Jun 2026 07:20:51 +0000
Manifest this update:     Sat 13 Jun 2026 07:20:51 +0000
Manifest next update:     Sat 20 Jun 2026 07:20:51 +0000
Files and hashes:         1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: EzLBG2c1ReDvVP+WvljAL2bEFQmnqzb+7ZnxO/5Zw40=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl
                          rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44
        Validity
            Not Before: Jun 13 07:20:51 2026 GMT
            Not After : Jun 20 07:20:51 2026 GMT
        Subject: CN=6a2d04d3-709a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:81:5c:83:9c:93:85:93:c4:d0:60:5e:88:dd:
                    dc:3a:a1:e3:61:ca:ad:e1:a4:c1:e6:1b:f5:2a:33:
                    ad:fe:d1:31:7b:fa:26:b1:16:3b:2c:ee:e7:4d:7a:
                    14:48:2b:a6:07:d8:c5:76:08:e7:5a:35:8e:4a:98:
                    83:9e:b4:95:22:64:f9:e1:62:26:4c:33:c4:79:f7:
                    50:0c:a2:bd:c8:a0:91:f8:a2:fe:3e:de:7e:16:a3:
                    db:7e:45:4a:34:f2:fd:0b:6e:ea:fa:e2:1f:f6:4a:
                    c5:ff:fe:46:e2:5d:74:cd:18:03:77:7f:52:4e:d1:
                    a6:b6:fb:aa:e3:7e:5b:4b:6c:25:86:46:cc:1a:74:
                    0f:2e:2b:82:8b:2f:7d:13:69:03:01:97:2e:a6:bf:
                    ff:ad:01:7b:db:a1:76:3b:47:24:8b:84:61:25:fd:
                    66:a3:3a:79:7b:77:ab:75:a5:85:59:b7:8a:5b:5c:
                    01:01:a1:48:a5:30:63:d0:4d:e9:ff:27:41:d3:b0:
                    64:58:6f:f7:fc:af:a6:8b:0b:07:f5:9c:aa:6a:a7:
                    bf:c6:2f:ae:2b:4b:b2:cc:eb:0e:d5:a9:2d:a0:a0:
                    37:ce:98:6a:f4:02:e6:42:35:d9:31:4a:c7:ae:3f:
                    15:39:f0:7c:d0:03:be:3e:97:dd:bf:ac:1b:df:86:
                    23:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E2:FE:01:A8:F7:60:C6:F0:2F:DC:0E:5B:81:90:2B:C9:E8:43:B0
            X509v3 Authority Key Identifier:
                keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cb:a9:66:60:7c:dc:e8:0a:3d:a0:c1:0e:51:1d:6c:a7:08:
         dd:7e:e0:f1:d2:fc:6e:62:2e:74:60:d8:90:62:ef:3e:0b:ec:
         31:14:d6:af:d7:d3:1b:ac:b9:c5:48:04:77:c1:57:9e:ac:b1:
         17:be:0b:a2:e7:19:07:da:bd:31:61:18:49:18:af:2b:43:f2:
         46:35:9b:03:5c:6d:68:e3:cc:6c:56:4e:0c:6f:43:5a:a5:40:
         4c:2e:b9:f8:0f:4d:24:bc:9c:9b:ea:cb:f8:00:87:9b:e4:02:
         c8:dd:c9:78:a0:f8:32:21:c5:db:88:67:36:6d:38:9a:07:5e:
         f4:0a:0c:87:f9:80:00:b7:5e:94:d9:f9:ce:8f:e5:56:39:6f:
         28:78:49:4e:20:cd:71:68:83:e8:cd:a6:21:67:3a:46:de:cd:
         b1:ea:1e:93:f9:1a:88:4c:68:99:06:cf:56:0b:e3:04:3e:6f:
         5e:5d:e8:f2:78:b4:81:33:21:45:0c:cf:87:6b:9a:5d:00:7e:
         0a:cd:12:0a:1a:14:3b:c1:12:09:d7:d2:88:38:df:2d:53:c6:
         12:a1:3e:ab:0c:09:c0:58:aa:0c:d8:7b:ac:70:3b:f0:3b:cb:
         08:88:78:76:79:f2:d8:12:2a:96:f8:1b:05:2d:f8:dc:1e:ad:
         d9:16:9d:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZEQzAxMTAvBgNVBAUTKDExN0MwRDZEMTlCRkJBNDhCNUZBOUU1MTdEMEU2OTI2
NTVDOThDNDQwHhcNMjYwNjEzMDcyMDUxWhcNMjYwNjIwMDcyMDUxWjAYMRYwFAYD
VQQDEw02YTJkMDRkMy03MDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IFcg5yThZPE0GBeiN3cOqHjYcqt4aTB5hv1KjOt/tExe/omsRY7LO7nTXoU
SCumB9jFdgjnWjWOSpiDnrSVImT54WImTDPEefdQDKK9yKCR+KL+Pt5+FqPbfkVK
NPL9C27q+uIf9krF//5G4l10zRgDd39STtGmtvuq435bS2wlhkbMGnQPLiuCiy99
E2kDAZcupr//rQF726F2O0cki4RhJf1mozp5e3erdaWFWbeKW1wBAaFIpTBj0E3p
/ydB07BkWG/3/K+miwsH9Zyqaqe/xi+uK0uyzOsO1aktoKA3zphq9ALmQjXZMUrH
rj8VOfB80AO+Ppfdv6wb34YjjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIPi/gGo
92DG8C/cDluBkCvJ6EOwMB8GA1UdIwQYMBaAFBF8DW0Zv7pItfqeUX0OaSZVyYxE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkRDMC8zMzExRjBFRTY5
RTkxMUYwODFCNjVCNjdDNEY5QUUwMi9FWHdOYlJtX3VraTEtcDVSZlE1cEpsWEpq
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkRDMC8zMzExRjBFRTY5RTkxMUYwODFCNjVCNjdDNEY5QUUwMi9FWHdOYlJtX3Vr
aTEtcDVSZlE1cEpsWEpqRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoMupZmB83OgKPaDBDlEdbKcI3X7g8dL8bmIudGDYkGLvPgvsMRTWr9fTG6y5
xUgEd8FXnqyxF74LoucZB9q9MWEYSRivK0PyRjWbA1xtaOPMbFZODG9DWqVATC65
+A9NJLycm+rL+ACHm+QCyN3JeKD4MiHF24hnNm04mgde9AoMh/mAALdelNn5zo/l
VjlvKHhJTiDNcWiD6M2mIWc6Rt7Nseoek/kaiExomQbPVgvjBD5vXl3o8ni0gTMh
RQzPh2uaXQB+Cs0SChoUO8ESCdfSiDjfLVPGEqE+qwwJwFiqDNh7rHA78DvLCIh4
dnny2BIqlvgbBS343B6t2Radwg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:41 2026 by rpki-client