Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
File:                     E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json)
Hash identifier:          YSvKD8IcknRoO2pl5oWPAc/bpLvrX6EdZuLz/iIq5Es=
Subject key identifier:   52:88:05:A5:38:48:5E:C4:E5:98:99:B1:CE:0D:92:B0:41:F4:F5:51
Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57
Certificate issuer:       /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57
Certificate serial:       25CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
Manifest number:          25CA
Signing time:             Fri 12 Jun 2026 14:47:07 +0000
Manifest this update:     Fri 12 Jun 2026 14:47:06 +0000
Manifest next update:     Fri 19 Jun 2026 14:47:06 +0000
Files and hashes:         1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: koVrXmSRDjPzUUHQmuLZ1/rQ0QCkOBixTBDF2PpHCSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9674 (0x25ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57
        Validity
            Not Before: Jun 12 14:47:06 2026 GMT
            Not After : Jun 19 14:47:06 2026 GMT
        Subject: CN=6a2c1bea-64c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:26:46:32:e1:17:8c:f7:c7:ec:a4:d8:4b:
                    d6:3a:24:3f:ac:68:2e:19:e9:25:2e:c4:ea:92:9a:
                    cd:3d:e6:4e:0f:ab:a6:93:2b:ff:fe:84:bb:c3:a4:
                    f5:95:51:cb:57:e5:f2:e9:ff:e6:ae:12:d6:db:98:
                    13:fe:3d:ea:ac:b6:dc:ad:2a:aa:2a:06:46:2f:42:
                    7c:3c:71:f7:35:11:99:fe:66:78:4b:34:5b:07:7b:
                    e3:7c:e3:78:d9:25:44:72:fa:f7:aa:6c:e1:9a:4d:
                    e8:b2:c6:01:f2:98:5d:f0:f0:83:d6:10:f8:b0:31:
                    f7:e2:78:d2:76:34:13:3f:6b:63:9e:2e:d5:a0:11:
                    35:66:c7:62:08:6a:f6:da:83:63:5c:71:ba:bc:79:
                    f2:4d:b3:4c:22:db:04:cd:d1:07:36:24:cc:f2:4c:
                    62:08:d4:8f:c5:57:cc:35:e4:ad:2f:58:fb:9a:e2:
                    33:f1:27:51:ca:72:f2:3a:02:3c:0d:fe:40:50:86:
                    d3:12:6e:07:50:56:96:20:31:83:0c:8c:07:f4:47:
                    69:8e:b5:2a:c6:7c:bc:e9:0e:78:29:01:b8:87:7f:
                    f6:95:80:62:52:fa:e3:a9:55:82:5b:dc:d5:0e:72:
                    c5:af:bb:5b:91:f3:74:f4:78:27:d7:f9:d3:3b:1d:
                    dc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:88:05:A5:38:48:5E:C4:E5:98:99:B1:CE:0D:92:B0:41:F4:F5:51
            X509v3 Authority Key Identifier:
                keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:26:97:67:b7:94:6c:d9:29:59:67:bf:38:1d:23:d3:f4:
         35:4b:33:e8:46:17:0a:f7:6a:0d:2b:4c:b8:1c:5a:ba:dd:7d:
         4d:8e:9f:0c:91:dc:6a:8a:ab:95:16:37:de:5c:48:82:2c:de:
         49:d7:c3:4f:22:d6:4b:91:d1:89:4c:8f:8f:56:62:14:6d:8f:
         2f:75:c8:ab:0b:f4:24:b9:7f:3f:71:14:2e:bb:ea:60:a8:ce:
         31:fe:93:e2:e9:d2:78:b3:8c:35:6d:2b:0a:25:7a:0f:5c:8e:
         65:4c:31:16:18:e1:29:ae:8b:f1:48:48:18:ac:0d:e4:9f:a7:
         81:6e:e8:53:09:5b:ee:f7:dc:5d:61:2a:9f:6e:f0:3d:45:1a:
         41:cc:d5:ee:3e:b7:e1:a1:32:38:4b:2d:4b:28:be:d7:33:0b:
         fd:b6:86:94:99:61:07:3b:94:af:4f:84:be:c2:1e:33:31:5b:
         42:53:25:0f:93:7f:6b:b6:56:fb:ae:24:70:e9:37:af:65:5c:
         94:d9:59:17:4a:e8:2b:3b:3b:5e:8d:67:84:b9:da:e1:74:18:
         81:50:04:56:88:2f:98:b0:84:1b:38:46:75:95:b9:da:65:eb:
         bb:31:75:6d:1d:26:6b:02:0b:81:bf:ef:c5:22:d7:a3:ee:8f:
         37:81:b3:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy
NjA2OTNBNTcwHhcNMjYwNjEyMTQ0NzA2WhcNMjYwNjE5MTQ0NzA2WjAYMRYwFAYD
VQQDEw02YTJjMWJlYS02NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlFkmRjLhF4z3x+yk2EvWOiQ/rGguGeklLsTqkprNPeZOD6umkyv//oS7w6T1
lVHLV+Xy6f/mrhLW25gT/j3qrLbcrSqqKgZGL0J8PHH3NRGZ/mZ4SzRbB3vjfON4
2SVEcvr3qmzhmk3ossYB8phd8PCD1hD4sDH34njSdjQTP2tjni7VoBE1ZsdiCGr2
2oNjXHG6vHnyTbNMItsEzdEHNiTM8kxiCNSPxVfMNeStL1j7muIz8SdRynLyOgI8
Df5AUIbTEm4HUFaWIDGDDIwH9EdpjrUqxny86Q54KQG4h3/2lYBiUvrjqVWCW9zV
DnLFr7tbkfN09Hgn1/nTOx3cRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKIBaU4
SF7E5ZiZsc4NkrBB9PVRMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5
MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE
a2E2MGJFTjFRUUFtQnBPbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ/Uml2e3lGzZKVlnvzgdI9P0NUsz6EYXCvdqDStMuBxaut19TY6fDJHcaoqr
lRY33lxIgizeSdfDTyLWS5HRiUyPj1ZiFG2PL3XIqwv0JLl/P3EULrvqYKjOMf6T
4unSeLOMNW0rCiV6D1yOZUwxFhjhKa6L8UhIGKwN5J+ngW7oUwlb7vfcXWEqn27w
PUUaQczV7j634aEyOEstSyi+1zML/baGlJlhBzuUr0+EvsIeMzFbQlMlD5N/a7ZW
+64kcOk3r2VclNlZF0roKzs7Xo1nhLna4XQYgVAEVogvmLCEGzhGdZW52mXruzF1
bR0mawILgb/vxSLXo+6PN4Gz+g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:40 2026 by rpki-client