Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft
File:                     MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json)
Hash identifier:          ivd+VnHWrn+p64lY+gsqRzzIwyhG2gnfeP+yTSaDKxA=
Subject key identifier:   8A:6E:24:9F:A0:02:13:3F:B3:E9:04:25:38:34:A3:87:3A:62:D6:90
Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D
Certificate issuer:       /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D
Certificate serial:       354C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft
Manifest number:          354C
Signing time:             Fri 12 Jun 2026 15:10:13 +0000
Manifest this update:     Fri 12 Jun 2026 15:10:13 +0000
Manifest next update:     Fri 19 Jun 2026 15:10:13 +0000
Files and hashes:         1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: jf4Nm1CgrkT9EDrDjsoQHM41t2t9QZBJgaIT9VNJHmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl
                          rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13644 (0x354c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D
        Validity
            Not Before: Jun 12 15:10:13 2026 GMT
            Not After : Jun 19 15:10:13 2026 GMT
        Subject: CN=6a2c2155-f138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d3:e0:94:c3:5c:67:33:fe:79:3f:0a:ec:18:
                    97:ee:1d:89:cd:90:02:2b:40:38:6c:f2:01:8d:19:
                    5d:17:74:86:e2:17:1a:5b:63:82:c5:27:4a:e6:fa:
                    2d:1b:97:ed:ae:64:54:77:80:c0:8a:c9:d8:dc:67:
                    af:66:4e:34:54:fb:26:c3:31:7b:a6:9b:a2:ab:a2:
                    ae:3b:53:a1:10:50:27:b5:ef:62:b6:bb:44:9b:a9:
                    ba:f3:68:1b:37:13:2c:b2:f4:25:2e:cf:d7:0f:e3:
                    81:7e:53:6d:55:a6:fe:19:7d:d0:3d:08:61:7c:d4:
                    e1:b2:f4:19:c3:46:11:32:68:bd:84:1f:cd:16:61:
                    16:00:9a:59:67:e0:c8:ed:fe:c5:23:4b:a5:53:b4:
                    db:42:1f:12:40:6a:a2:64:37:61:02:a0:a1:3e:d3:
                    26:eb:e8:f0:2e:a1:f8:ef:2a:9b:12:f5:fe:f7:fa:
                    a8:9e:f2:ec:d9:ab:8a:8a:0f:99:54:0c:4e:39:9c:
                    92:f9:02:59:4c:98:5c:64:32:19:fc:cf:b7:b6:0f:
                    d3:f3:9f:88:a5:0b:ad:dc:4c:06:02:81:b5:c6:f6:
                    f4:5f:fb:5c:0e:ed:e8:e8:04:30:68:87:83:6a:67:
                    6d:2c:77:c5:4a:b2:5c:d7:39:46:94:ee:4c:42:44:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6E:24:9F:A0:02:13:3F:B3:E9:04:25:38:34:A3:87:3A:62:D6:90
            X509v3 Authority Key Identifier:
                keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:37:d6:8b:6d:a9:32:fd:43:75:8c:d2:e6:3a:49:f6:9c:b8:
         9e:ea:ad:b6:04:b9:b1:92:55:f0:29:23:8f:9c:94:5b:3e:c0:
         c5:46:8e:d2:a8:f9:ff:f0:89:1e:60:97:6f:45:2c:34:8a:45:
         2b:83:42:68:4c:b2:58:a2:ad:f4:be:a9:8c:9d:ac:c2:f6:ce:
         e7:13:c4:45:f6:9b:ed:63:83:46:1f:cd:08:79:56:2c:0a:8e:
         be:b1:4f:9f:0b:77:18:6a:0b:67:25:40:0a:b7:88:45:e0:a0:
         84:e9:f9:40:8c:11:0d:45:9d:a6:cb:fc:6e:11:5a:cf:4b:2a:
         fb:49:56:e1:70:d1:a8:58:5e:68:a5:34:95:dd:67:cb:99:25:
         0f:7f:67:14:f1:62:e0:14:cb:4c:cd:3d:47:96:ca:8e:9c:3a:
         f2:28:0d:0a:0d:6f:0d:6d:ea:d9:63:0b:94:2c:a5:ca:ea:56:
         82:a7:bc:ab:c3:fe:72:8a:56:d1:e0:a4:db:88:63:89:8c:ac:
         0a:da:c2:a3:91:d6:4c:2d:db:82:3f:00:15:3c:0c:bf:9e:ec:
         83:71:40:89:7a:5b:a7:62:bd:39:b6:df:95:89:51:20:6b:8a:
         36:9f:a1:e6:5b:f7:e1:f7:8a:20:92:39:b5:c6:58:91:f9:e7:
         2d:95:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:05 2026 by rpki-client