Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
File:                     z8CATaxP_3oipAThDphkpxHeGck.mft (raw, json)
Hash identifier:          c3WOsQlNUoU5TUyuQaY+pI9nilTJzVsCl2VqeXJV4IA=
Subject key identifier:   FB:BA:1B:04:60:01:E0:56:84:D6:87:61:EF:0D:93:8C:31:97:BB:91
Authority key identifier: CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9
Certificate issuer:       /CN=A91A12C4/serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
Manifest number:          014C
Signing time:             Sat 13 Jun 2026 05:11:39 +0000
Manifest this update:     Sat 13 Jun 2026 05:11:39 +0000
Manifest next update:     Sat 20 Jun 2026 05:11:39 +0000
Files and hashes:         1: z8CATaxP_3oipAThDphkpxHeGck.crl (hash: qRlM7/3YgGV8FPH3/TGK7ewi3LmXU1KTXjR9WqMtIlE=)
                          2: BCA395126C1811EFAFBE6B0FC4F9AE02.roa (hash: YuQff5ZM6ktoeLhGQjtDQt4j9brqyCXl9qvUHGQ/W6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl
                          rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A12C4, serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9
        Validity
            Not Before: Jun 13 05:11:39 2026 GMT
            Not After : Jun 20 05:11:39 2026 GMT
        Subject: CN=6a2ce68b-1c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:91:2a:47:08:12:0f:07:f3:45:39:ce:ef:c8:
                    53:59:3c:4e:0e:db:ce:0e:da:8a:4e:c8:80:b5:a1:
                    ba:69:87:99:5b:80:06:e8:0f:d3:82:a0:2c:88:8c:
                    4e:c8:50:3a:1b:57:02:3a:fb:50:b5:16:85:60:c5:
                    a1:29:d9:a8:8b:6b:5c:82:9a:16:6f:ff:09:22:f7:
                    76:bb:21:b9:d6:0e:36:97:64:64:9d:17:59:09:37:
                    21:12:83:98:42:ed:6b:cc:87:7b:24:fd:97:af:fb:
                    88:4c:fa:52:ca:c5:11:f3:83:c1:25:22:1d:cb:7f:
                    25:13:a4:bc:aa:e1:3d:92:6b:aa:27:9c:e3:ce:08:
                    b3:32:73:48:3a:f6:63:2b:ed:a6:e2:92:7e:2b:49:
                    47:67:84:8d:e7:02:06:e2:12:25:4b:8e:5a:97:01:
                    9e:e3:01:d0:cf:61:1f:55:8d:0f:d1:6c:2f:2c:96:
                    d7:c2:e1:00:d7:37:30:a2:92:48:c4:d1:a7:d3:72:
                    90:4a:48:28:50:86:84:83:60:5f:51:ca:15:73:08:
                    51:b1:cd:2f:4a:b1:c6:29:ce:14:d5:c9:25:c5:da:
                    31:45:46:34:04:8c:42:9c:e8:82:f2:3f:79:40:3c:
                    35:77:a5:66:c4:71:41:20:52:0b:86:1d:f8:88:6d:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BA:1B:04:60:01:E0:56:84:D6:87:61:EF:0D:93:8C:31:97:BB:91
            X509v3 Authority Key Identifier:
                keyid:CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:23:1f:30:37:df:7b:57:85:7f:3b:a1:17:f9:8c:ec:76:
         58:19:4b:24:db:cb:9b:33:31:3f:6d:4b:f3:3c:86:e7:9d:62:
         cb:fd:87:06:76:72:25:62:fe:cf:7b:05:fb:fd:1d:be:4e:83:
         49:09:76:33:3d:ef:0a:5f:fc:74:55:d4:78:da:45:46:09:8a:
         a7:3f:f5:67:a6:a0:5f:58:32:01:af:69:3a:ba:69:32:ac:35:
         7c:87:7b:74:c7:e2:b0:15:92:9f:89:2a:ab:b8:30:4a:bf:6e:
         ec:9c:9f:da:5f:a4:b8:17:dc:88:77:d4:a2:f8:f3:13:e1:a0:
         b8:e0:45:09:52:dd:39:f3:76:ed:cc:53:ff:8a:23:b3:c2:59:
         a7:7c:90:b2:4c:68:8e:6e:1d:84:0f:f1:f6:f7:9e:a9:44:2d:
         b7:74:fc:7a:78:92:2b:a2:87:31:bb:e4:61:eb:2c:a5:60:62:
         fa:60:66:89:f5:dc:34:27:6d:b0:15:11:7f:72:83:f1:81:3e:
         69:f8:b0:30:c3:27:d0:77:1c:49:1b:02:18:82:cb:4a:df:bc:
         49:d9:35:2a:dc:dc:16:4d:f7:9d:b5:b5:e3:57:d6:9d:ee:2c:
         ae:44:47:1c:92:f4:9f:1f:65:c0:08:c6:6d:fd:4d:4d:5d:22:
         07:c6:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:50 2026 by rpki-client