Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
File:                     jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json)
Hash identifier:          WonbDHOIJlNYwwgvpyTkFy29fjwZjpHr+j9OGO5SKMI=
Subject key identifier:   E7:A7:AB:B7:AE:22:F8:1D:40:01:9F:F8:12:CD:30:7F:67:7F:4A:59
Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2
Certificate issuer:       /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
Manifest number:          0150
Signing time:             Sat 13 Jun 2026 05:07:11 +0000
Manifest this update:     Sat 13 Jun 2026 05:07:10 +0000
Manifest next update:     Sat 20 Jun 2026 05:07:10 +0000
Files and hashes:         1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: 2gyXt+/4pO9s90v7Ka0Fndul5E2O+oR9DB67uEv1D9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl
                          rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2
        Validity
            Not Before: Jun 13 05:07:10 2026 GMT
            Not After : Jun 20 05:07:10 2026 GMT
        Subject: CN=6a2ce57e-78c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:06:64:df:d8:f8:bf:10:72:dd:65:02:ed:
                    95:04:e1:31:39:56:e6:7d:0d:7e:cf:83:9b:c5:c1:
                    c9:cd:97:76:65:fc:21:60:c0:d0:0b:00:f0:a1:6d:
                    4d:96:87:4f:99:eb:18:e4:48:48:b2:9f:7d:99:0d:
                    75:86:50:92:1f:5a:36:98:5e:af:9c:50:00:69:b3:
                    fa:51:fa:b6:d5:61:48:39:0a:ea:de:67:e3:21:99:
                    72:43:6f:d1:ae:8f:ae:bd:60:4f:a4:0d:17:a1:0e:
                    a4:bb:9d:8b:8b:21:39:9d:62:bf:2e:58:f0:a8:f8:
                    84:ee:ea:14:37:91:07:06:9c:d2:50:76:56:20:d6:
                    79:6a:32:4b:3d:24:6f:20:eb:9c:cc:62:cb:2a:a6:
                    26:35:d5:4c:54:a0:f2:88:94:97:42:e4:c1:b6:b7:
                    2e:5c:ac:d6:bf:3f:d8:7c:4d:6f:79:bf:c0:dd:24:
                    52:1c:38:2b:60:c1:d7:3e:7e:32:47:a9:21:b0:eb:
                    8d:80:bc:7e:15:37:90:d9:7b:84:65:38:72:2c:e9:
                    6e:21:e0:1a:78:d9:14:ba:ec:48:10:7a:0b:97:0d:
                    f0:42:c9:92:61:85:25:3e:94:d4:90:fe:a8:49:02:
                    95:f1:57:2c:c5:49:9a:f6:c7:4a:ea:e9:70:d5:eb:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A7:AB:B7:AE:22:F8:1D:40:01:9F:F8:12:CD:30:7F:67:7F:4A:59
            X509v3 Authority Key Identifier:
                keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a4:cf:23:57:68:ff:b5:bb:ee:45:8e:dd:82:53:45:ad:8d:
         70:f3:ee:1d:d1:fe:88:b7:05:b3:98:8a:5f:01:f0:01:ca:e3:
         a8:4a:e6:b8:ab:04:4b:80:02:0a:36:16:1b:70:d5:3d:b3:fd:
         15:e5:0a:be:61:fa:20:a4:24:2d:1c:1a:43:2f:81:c8:c0:27:
         ce:25:84:92:97:a9:b7:4d:c6:41:a1:be:00:c7:d0:46:4c:56:
         33:9d:78:74:6c:c2:8c:1d:e9:03:38:21:33:3f:3f:2c:54:e2:
         a7:cc:80:25:41:53:e7:07:f5:3a:42:7e:b8:2b:a6:9d:c9:29:
         3f:c1:f9:eb:d8:e3:c6:96:dc:10:93:91:6c:79:6d:99:0d:ec:
         da:f9:33:56:d5:9f:11:6f:27:5b:db:41:06:5e:de:48:56:63:
         1e:ed:dd:cb:bb:96:14:48:54:6b:86:aa:9c:35:f9:77:4f:38:
         fc:8c:e0:05:2e:90:ce:bd:4b:9c:c5:75:04:ad:1b:4d:b5:a2:
         f7:87:40:49:68:31:f6:a7:0a:ce:98:35:90:5c:02:76:8a:b8:
         8c:7b:87:d2:50:97:23:f9:26:55:93:01:94:ce:b5:bb:63:60:
         38:73:bb:42:e3:90:9c:50:6c:d4:d8:15:bd:5b:17:32:1e:16:
         7e:26:35:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:45:05 2026 by rpki-client