Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
File:                     lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json)
Hash identifier:          SuGa47S4JfCOpVnWqxcOQlHx7rjswLKo0GRi32+5vZU=
Subject key identifier:   85:20:64:EF:86:F9:1D:F6:1E:3B:4C:59:F9:35:BA:24:34:51:44:AF
Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
Certificate issuer:       /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
Manifest number:          0102
Signing time:             Sat 13 Jun 2026 06:15:20 +0000
Manifest this update:     Sat 13 Jun 2026 06:15:20 +0000
Manifest next update:     Sat 20 Jun 2026 06:15:20 +0000
Files and hashes:         1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: aGMSjKY+kZz4nA6ai9BgAmYmlVspBepV8PUMBETpwqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
        Validity
            Not Before: Jun 13 06:15:20 2026 GMT
            Not After : Jun 20 06:15:20 2026 GMT
        Subject: CN=6a2cf578-dae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:6d:82:19:38:09:6c:84:58:cd:e3:74:a0:
                    a1:ae:34:a1:0a:d8:c5:e4:c9:2e:68:6c:e1:f2:d7:
                    92:56:8d:71:b0:74:a4:a9:92:ab:e8:a1:92:b3:d8:
                    a3:99:9c:cf:82:f3:ee:d2:19:29:58:b0:4c:42:60:
                    df:07:0f:7c:e1:b8:34:be:85:3b:6c:9f:5b:e8:62:
                    52:2d:28:ac:13:18:fe:3e:66:a2:0c:a7:20:e9:25:
                    20:08:ae:69:cf:f6:8b:1b:60:2a:dc:a8:74:de:5e:
                    1d:ee:79:e8:df:ce:97:78:28:8f:d9:66:67:65:c8:
                    c0:c2:ef:5a:0e:38:13:ee:43:dd:23:13:68:bc:79:
                    31:34:39:46:8e:5b:72:6c:3b:3e:65:87:26:5d:e9:
                    81:58:e0:79:80:0a:b5:39:54:74:6a:22:cc:b9:70:
                    91:4c:d4:07:d8:fe:ef:9b:4c:2c:c9:28:b7:03:9c:
                    67:95:a3:e3:8c:5d:9e:cd:bc:14:0a:ac:f5:8a:26:
                    81:d0:c3:3d:b6:53:5e:19:b6:c3:4f:7c:65:87:f4:
                    b9:bb:80:85:81:8c:eb:23:9a:bc:1c:cb:47:17:59:
                    d8:b7:da:71:33:00:20:74:e5:d8:21:05:39:9d:8e:
                    af:19:66:93:14:93:3f:7a:06:33:14:99:8d:20:1c:
                    fa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:20:64:EF:86:F9:1D:F6:1E:3B:4C:59:F9:35:BA:24:34:51:44:AF
            X509v3 Authority Key Identifier:
                keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:62:2d:bd:93:4e:64:8c:8b:28:b9:73:c0:ed:d1:5e:01:9c:
         2b:81:df:37:15:5b:97:2d:53:b5:e4:21:e9:a4:b4:18:84:70:
         69:7d:19:e5:f2:36:c5:f0:11:88:9d:39:ce:87:b7:72:33:af:
         b3:34:3d:96:01:cd:49:0a:63:96:44:fe:34:ee:1f:be:bd:d4:
         2f:ec:b5:7e:19:a7:ec:2b:e0:f2:da:1c:68:90:a3:9d:9f:ee:
         7e:ce:5f:bf:55:17:e8:3a:f6:57:e2:89:49:2f:ee:14:4a:f3:
         01:69:d8:2c:dc:0c:6f:72:a5:09:2f:3f:e3:66:1a:6a:76:1b:
         fb:3c:1f:2f:70:79:16:77:0d:bd:a4:f1:bb:24:59:ca:5c:dd:
         d5:77:4d:2a:69:df:46:57:60:eb:7c:a2:44:84:44:2f:8f:8c:
         1e:8b:6d:8d:ea:99:b6:cb:03:14:35:0b:72:05:26:0b:66:fd:
         96:7b:20:87:e4:de:78:37:82:1f:d1:58:ad:7e:aa:7d:1e:46:
         06:0e:26:09:46:98:7b:3f:71:93:92:1c:28:12:5c:c8:68:94:
         e0:f6:c5:88:f6:dd:23:ca:d4:5d:05:2a:2d:06:92:20:f1:75:
         1e:4e:43:c5:39:cb:9e:b6:95:f2:82:e7:ed:a4:b0:9d:5a:fd:
         fd:f8:2d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:47:51 2026 by rpki-client