Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
File:                     N2LeNhaqS6BLeurLVIuGpi5vFw4.mft (raw, json)
Hash identifier:          nbIO3d2oDlPQWObEH3QRa1VYHUlGDHpCxB0LdXVy7pg=
Subject key identifier:   B5:EF:C1:5A:BE:69:B0:47:F4:8F:A0:10:D1:F6:CF:95:37:40:A5:E7
Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
Certificate issuer:       /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
Manifest number:          4C
Signing time:             Sat 13 Jun 2026 08:29:53 +0000
Manifest this update:     Sat 13 Jun 2026 08:29:53 +0000
Manifest next update:     Sat 20 Jun 2026 08:29:53 +0000
Files and hashes:         1: N2LeNhaqS6BLeurLVIuGpi5vFw4.crl (hash: t1hbIVTZOym1IuMt8JShgou6oRl8DgKnSHht29YRLw4=)
                          2: 3A8D72EC50E511F1B3C6CC42C3833773.roa (hash: 5UipJ4+NR1gmwBU9u4POViONi8ldwVxPixTIJgWqppg=)
                          3: 3B91F0E650E511F1B3C6CC42C3833773.roa (hash: pdQ7ogtc0OuHjN8nJXSLfEsn91VaxjO1B4iSxidpvWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
                          rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
        Validity
            Not Before: Jun 13 08:29:53 2026 GMT
            Not After : Jun 20 08:29:53 2026 GMT
        Subject: CN=6a2d1501-17fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:9f:85:77:67:b8:5b:38:ad:bb:34:3b:0d:
                    ca:d3:78:71:65:08:8e:7c:df:e9:32:73:cf:20:b8:
                    52:91:78:8c:13:c9:11:94:8d:5c:02:4d:18:c1:42:
                    cb:b4:0c:e5:75:f6:17:48:12:1e:e6:ba:30:78:a4:
                    95:53:d2:8c:b6:b2:4e:45:75:db:11:d8:cc:55:97:
                    e2:ec:42:7e:a2:a9:84:ac:e2:cd:48:84:9b:7e:c7:
                    eb:aa:c5:1c:e2:5e:eb:26:2e:10:17:89:8f:9f:a9:
                    5a:f5:02:18:ea:88:0d:4c:9f:03:9c:00:d3:5e:fe:
                    c4:28:f5:18:01:08:78:ab:f6:2b:39:f0:18:f4:37:
                    48:47:3a:11:f1:28:e2:6f:86:90:5d:51:9f:b4:41:
                    0b:8f:37:7d:95:b0:fb:59:fc:5b:99:b5:6d:cc:86:
                    15:6b:b5:b5:d2:c4:af:13:93:86:ab:57:5d:89:f9:
                    54:cb:cd:1e:95:55:33:3a:f4:00:1e:72:4d:50:6e:
                    89:43:68:cf:c8:13:b9:d8:e7:ad:21:59:8b:b1:46:
                    c2:3a:9a:13:76:1b:93:d9:92:8a:8f:b3:12:5c:1c:
                    88:1d:fa:f2:c2:2d:9a:3b:2c:cc:a0:6d:08:2e:56:
                    cc:e9:d3:83:3a:14:50:35:cb:fc:1f:a6:b0:63:30:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EF:C1:5A:BE:69:B0:47:F4:8F:A0:10:D1:F6:CF:95:37:40:A5:E7
            X509v3 Authority Key Identifier:
                keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:4c:d6:e6:18:3a:ec:14:ef:45:e6:7b:7b:50:95:49:52:17:
         cb:32:63:40:5b:12:62:3f:f0:88:e8:19:04:ca:12:84:ea:ec:
         bf:02:54:df:81:ae:9d:9a:e4:75:b3:82:c9:b1:c0:6a:68:4d:
         b6:5a:d5:71:62:8b:09:25:70:93:8d:28:25:47:07:4e:30:a7:
         b6:1f:b3:9b:a3:3e:4b:5a:fd:54:2c:76:0f:92:d6:68:15:41:
         a7:91:b2:16:e9:e3:06:70:cd:75:5c:f9:5f:19:ac:6a:00:26:
         05:03:80:53:8c:a4:da:34:ac:7a:e1:55:6e:f9:ec:42:2f:5a:
         76:5e:67:a8:2c:ca:37:10:53:d0:2d:db:0e:cb:ce:f3:f5:c5:
         39:94:81:d2:ff:67:a7:d3:b8:72:1e:36:52:14:1f:9d:6f:dc:
         01:4b:92:54:bc:2d:58:04:9b:36:e1:57:82:af:2d:2e:6d:ba:
         a3:25:0c:cc:07:02:d7:0f:bc:d9:b0:e4:fe:87:25:8e:9e:35:
         f4:90:d8:a8:53:7f:3c:72:f9:55:93:a6:0f:34:89:a4:35:2b:
         c9:cd:43:f6:93:bb:6f:4a:5c:11:fd:52:6b:71:74:10:ee:22:
         0e:c6:b2:b6:ee:be:e5:df:12:f7:a7:05:17:91:26:a9:bc:7b:
         2b:2a:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:41:06 2026 by rpki-client