Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
File:                     nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json)
Hash identifier:          ZlqP/gqjWMU44wudir5zvgwHMaTisUm7r/PbjakvJRI=
Subject key identifier:   C4:59:44:9C:B2:50:33:4D:CA:D3:8D:16:43:35:2F:0C:6B:8A:8D:81
Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48
Certificate issuer:       /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
Certificate serial:       3546
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
Manifest number:          5263
Signing time:             Fri 12 Jun 2026 15:13:29 +0000
Manifest this update:     Fri 12 Jun 2026 15:13:29 +0000
Manifest next update:     Fri 19 Jun 2026 15:13:29 +0000
Files and hashes:         1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: 0JnIi1SGTvSPLBSqLqx1i1IBlteAWgIOyNKXsRkTIvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13638 (0x3546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
        Validity
            Not Before: Jun 12 15:13:29 2026 GMT
            Not After : Jun 19 15:13:29 2026 GMT
        Subject: CN=6a2c2219-5f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4c:48:38:8a:1c:2d:7e:4e:33:f0:6d:64:18:
                    29:04:f0:fc:6c:fe:ef:5e:c4:93:bb:06:be:94:8e:
                    73:05:0f:9e:96:bd:5e:e8:b0:89:35:e9:1f:33:89:
                    9b:77:76:29:0f:6e:9c:ea:18:9a:0e:26:2f:2f:20:
                    e0:96:1b:c0:82:32:dc:e7:db:06:ba:29:ae:da:f7:
                    f4:36:75:47:8f:a0:86:a6:39:28:cf:87:c2:3d:04:
                    c5:c4:2b:fc:33:d9:23:d4:f6:f1:4c:f0:fd:ce:97:
                    a8:de:b6:5f:e9:5f:0a:d3:67:25:30:a2:5a:20:26:
                    06:cf:f7:9c:f1:d5:f9:27:af:2f:38:7e:ac:03:0d:
                    d9:f6:86:38:cc:16:3e:83:0b:42:46:b6:ed:1a:24:
                    39:07:2b:6e:15:19:ad:92:f7:58:30:9e:83:fb:1c:
                    ba:17:17:f2:c6:99:1b:7a:b7:d3:c2:74:84:2d:35:
                    a7:19:f4:d7:a9:92:26:c6:88:a9:48:ed:a0:6e:ba:
                    a3:5e:b6:bc:97:5a:be:14:f8:0c:c2:97:b1:40:f0:
                    eb:ff:1c:da:d5:9c:7c:72:9e:58:ad:d7:b0:76:e9:
                    d2:a1:f2:2d:43:8b:c1:99:7d:70:0f:35:46:a0:5c:
                    60:fc:0f:7d:f4:c6:79:38:7a:23:48:ec:73:3b:e0:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:59:44:9C:B2:50:33:4D:CA:D3:8D:16:43:35:2F:0C:6B:8A:8D:81
            X509v3 Authority Key Identifier:
                keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:62:1d:3f:83:73:bf:37:26:20:23:b6:dc:f5:42:9d:45:d0:
         97:75:42:5e:9f:7a:05:13:92:3a:f1:21:a4:30:c0:68:6f:da:
         9d:23:ea:69:3c:de:58:5e:84:f3:06:e6:ba:16:82:af:bb:e9:
         cc:c1:51:f4:63:59:2d:e0:5f:c8:b1:a7:30:a5:4b:4b:21:ce:
         cd:19:c0:60:bc:be:f3:36:c8:6d:eb:55:5c:50:08:46:26:2f:
         89:dd:28:5c:d8:fa:8d:0f:a3:21:2b:10:e3:14:8a:57:69:13:
         d1:d7:11:01:23:3a:f8:d2:52:d8:9e:ee:9c:70:6d:56:5a:2b:
         05:36:5d:b3:c1:99:33:1c:65:cb:46:bb:7f:d1:3b:dc:94:dd:
         3d:1b:76:5f:a3:43:22:85:0a:7c:1f:37:e9:a9:51:07:0c:15:
         59:62:61:55:83:c3:f1:a9:93:2d:85:08:a6:2f:c8:f3:68:1f:
         00:37:7d:90:e1:6a:9b:1d:67:0e:03:a4:27:72:54:77:6d:3e:
         63:57:e4:90:b7:60:05:21:0b:cb:c2:6e:8c:d3:0e:e0:9a:97:
         f4:2a:0c:54:62:4b:cb:81:72:68:c9:20:12:e8:4f:b0:5c:e9:
         e9:c0:8e:40:db:74:cc:0e:01:c9:82:10:38:cf:44:e7:fa:4e:
         01:d2:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:12:27 2026 by rpki-client