Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
File:                     CkMWPL6xv3mMnOQcHF50ociDesY.mft (raw, json)
Hash identifier:          IL1IuT1OqogdpjLIQoDBgNbFaX57Uq6RC2H9CC3c+Xg=
Subject key identifier:   62:DB:00:BD:AA:02:05:E3:D9:E7:67:39:D2:B8:AC:05:F6:77:23:80
Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6
Certificate issuer:       /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
Certificate serial:       0343
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
Manifest number:          033B
Signing time:             Sat 13 Jun 2026 01:05:03 +0000
Manifest this update:     Sat 13 Jun 2026 01:05:02 +0000
Manifest next update:     Sat 20 Jun 2026 01:05:02 +0000
Files and hashes:         1: CkMWPL6xv3mMnOQcHF50ociDesY.crl (hash: +bQBjvmejIG7X/hUp7MBEe0WGn0mP/0JY2egnallBZ8=)
                          2: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (hash: QM3TZDb9n+aQx7/1/HX5pDRtbQ+ME0yE/NNbiA3qbqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl
                          rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
        Validity
            Not Before: Jun 13 01:05:02 2026 GMT
            Not After : Jun 20 01:05:02 2026 GMT
        Subject: CN=6a2cacbe-80af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:7c:ab:b8:20:9d:ea:b0:9f:d3:bb:08:0e:
                    f7:9e:85:64:46:48:e1:52:ea:86:61:5e:83:7c:3a:
                    9d:a4:91:f3:ae:2c:3e:bc:01:ea:39:1d:a9:ec:59:
                    54:48:41:33:9c:ac:01:39:20:c4:a6:51:f3:dd:e3:
                    49:d5:e2:fc:77:26:89:a4:78:57:3a:26:68:87:81:
                    e5:99:26:24:a4:4e:db:0f:4e:5a:3c:eb:b8:74:63:
                    87:3e:6c:91:1a:76:ea:10:80:27:60:2f:2e:bf:ca:
                    ec:d9:60:01:42:6e:e2:04:45:dd:e8:2a:91:53:47:
                    62:4a:ac:1b:5f:46:42:6e:18:15:cb:f2:1d:77:b3:
                    10:c3:97:a2:d0:0e:73:14:b8:9d:51:82:92:c1:5e:
                    70:ff:8c:96:00:f8:3c:a8:8f:aa:af:f1:ad:36:a1:
                    3b:3e:99:8d:98:e9:7b:0a:7d:ac:b7:ba:8e:5e:8e:
                    af:3a:e5:80:05:b9:d5:80:c8:9e:d9:fc:cb:1e:8d:
                    34:50:de:de:2a:84:42:32:9a:dd:ba:5f:78:58:63:
                    ce:12:4d:c7:88:73:5a:e8:55:03:2e:65:55:92:75:
                    02:c7:14:8f:f1:ef:36:f5:2a:c3:a4:ff:42:dc:34:
                    12:86:24:1b:59:fb:08:68:33:f6:ed:91:80:b3:84:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DB:00:BD:AA:02:05:E3:D9:E7:67:39:D2:B8:AC:05:F6:77:23:80
            X509v3 Authority Key Identifier:
                keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1a:fc:88:54:27:34:43:d5:7f:af:4f:27:1b:54:20:2e:90:
         d2:e2:75:3c:7f:eb:6b:e9:a0:74:7d:9f:60:b2:88:39:c5:68:
         18:63:ce:96:d8:cf:75:2a:f5:6e:0e:5f:1e:e5:c5:cf:51:84:
         fa:f7:3d:75:26:f4:65:98:14:76:f4:2d:45:a6:68:d3:ce:c9:
         fa:56:2d:ad:98:70:f7:35:f4:c4:ea:a5:ba:d0:49:b7:12:ca:
         60:2a:6f:fb:b1:93:98:0f:85:a6:cd:ad:8a:15:e3:56:04:ca:
         3b:de:0d:ea:8a:ea:51:50:9a:b4:37:00:de:e0:80:b0:c6:d8:
         99:f8:68:e1:17:1a:2a:59:c8:7e:7a:48:3a:b4:9d:19:fb:80:
         b2:2d:11:08:25:7f:fa:19:ed:cd:4e:44:d8:2c:7e:21:31:90:
         bc:ab:8f:a3:c7:d8:a6:59:d7:35:38:5c:c9:b7:6b:52:10:33:
         a7:09:57:18:cb:03:c9:b1:46:3f:62:9b:b8:1d:8a:ba:74:e4:
         36:77:35:04:08:57:53:a6:6d:5c:5d:80:83:5e:fd:36:7a:cf:
         ec:b8:df:e2:23:d7:93:29:87:f8:77:7b:89:76:0f:5a:50:92:
         e2:72:9a:65:18:8a:72:b6:3c:94:3b:65:16:11:ce:e7:9c:69:
         aa:24:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:24:26 2026 by rpki-client