Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
File:                     7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json)
Hash identifier:          7H2Tkek18ppliDY8xv58kinZ8XYWBz36Q/XTJD4bAGs=
Subject key identifier:   55:5B:7E:E8:E4:BD:CD:BD:49:0D:D0:08:01:92:68:67:E3:D9:8E:89
Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
Certificate issuer:       /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Certificate serial:       3547
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
Manifest number:          4149
Signing time:             Fri 12 Jun 2026 14:48:50 +0000
Manifest this update:     Fri 12 Jun 2026 14:48:50 +0000
Manifest next update:     Fri 19 Jun 2026 14:48:50 +0000
Files and hashes:         1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: Reeet8NCEc+9/CfQvckD0Z/RWoTh4iXKSvgMunNtNY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
                          rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13639 (0x3547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5AAA, serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
        Validity
            Not Before: Jun 12 14:48:50 2026 GMT
            Not After : Jun 19 14:48:50 2026 GMT
        Subject: CN=6a2c1c52-8bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:67:65:53:a2:3d:c2:d7:8a:67:8e:e4:44:
                    fe:80:d5:e9:a8:f6:9d:cc:21:f2:3f:26:be:73:4d:
                    55:c3:6c:8a:f8:08:2e:48:19:d7:65:1a:ca:8f:10:
                    31:86:a6:50:d5:61:8e:74:a1:89:51:f5:3e:49:cf:
                    ee:20:b7:e3:e5:0e:16:a3:08:a2:66:34:13:1c:83:
                    e9:ef:9e:d9:4d:c0:b7:50:17:e3:3b:6f:cd:46:36:
                    d9:c5:c2:bd:c6:6d:65:17:7f:24:d8:66:e3:0a:03:
                    42:20:09:c3:d7:78:2b:0a:88:e1:77:e8:42:ec:78:
                    92:0c:ef:ae:1b:00:ce:29:6c:34:89:5b:ef:86:80:
                    72:64:92:82:ce:c2:31:ca:e8:ab:a9:bd:fa:5a:40:
                    e8:66:42:72:ac:84:d1:57:70:0e:6b:4c:73:7e:72:
                    ef:fc:3a:21:c3:da:73:5a:21:ca:37:b0:2a:33:fa:
                    23:d2:49:fd:06:ba:88:4a:bf:fc:9a:46:9a:c9:95:
                    39:07:fb:a0:c7:93:fa:75:e5:24:6b:b5:50:53:8c:
                    16:11:11:da:da:16:c3:9d:2d:29:aa:31:8e:31:d5:
                    1b:6d:01:6c:30:12:11:c2:5c:f8:55:1a:ac:9e:b2:
                    71:10:4c:aa:b1:be:ff:95:3a:a1:3f:1f:21:2b:a3:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5B:7E:E8:E4:BD:CD:BD:49:0D:D0:08:01:92:68:67:E3:D9:8E:89
            X509v3 Authority Key Identifier:
                keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:76:81:16:41:dc:7c:c9:50:39:9b:92:ea:55:66:e1:52:0f:
         57:11:72:24:75:0d:a5:3c:e8:7b:fb:2e:43:f8:2e:69:1e:cc:
         fe:f8:5e:c6:77:73:f2:14:6e:3d:b6:bd:4f:ad:fd:4f:18:37:
         79:20:68:d1:6d:b7:e2:1e:8a:23:a2:9d:e9:47:89:f9:a4:8e:
         89:17:6e:a6:f3:31:2c:ca:69:0f:da:dd:78:33:a4:4b:14:f2:
         cc:61:21:d4:42:e1:0e:d9:75:3f:ba:a8:de:f2:99:be:56:ce:
         46:f2:76:70:89:77:3a:bf:94:8c:1d:03:b0:22:15:12:67:7f:
         4b:90:23:2e:aa:8a:91:3e:49:04:a8:2b:7f:e0:de:3c:fc:23:
         23:51:e5:bd:f9:b5:d7:5b:14:05:34:9a:bb:3a:82:02:9b:88:
         74:fc:91:85:e8:79:fe:f2:84:de:65:78:f5:69:1a:6f:c4:8f:
         b6:09:8c:f5:d5:22:c3:dc:69:44:35:3a:b6:2d:29:4c:75:6d:
         e0:1d:a5:2e:d1:8b:87:eb:19:19:3b:3d:47:75:c8:88:40:c5:
         d2:a1:85:3a:df:1d:02:38:e8:94:7e:7f:5e:22:59:1a:62:18:
         7f:47:e4:56:b1:85:ce:c1:da:f6:c3:34:d9:2d:f7:5a:50:64:
         21:78:1f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:02:59 2026 by rpki-client