Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
File:                     kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json)
Hash identifier:          zDjwmpgd7rRUkcc0zddGnccIQxYomKYk2YA1fYGdBrM=
Subject key identifier:   4E:DB:C1:E7:BC:5D:57:B4:1E:94:03:B6:F5:B8:00:FB:D7:43:71:E9
Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
Certificate issuer:       /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Certificate serial:       354A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
Manifest number:          3548
Signing time:             Fri 12 Jun 2026 15:16:07 +0000
Manifest this update:     Fri 12 Jun 2026 15:16:06 +0000
Manifest next update:     Fri 19 Jun 2026 15:16:06 +0000
Files and hashes:         1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: VJTh6zZ4u0TJJjkFRP6dqIbh9HXzUDj20VRMqrAejmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl
                          rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13642 (0x354a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
        Validity
            Not Before: Jun 12 15:16:06 2026 GMT
            Not After : Jun 19 15:16:06 2026 GMT
        Subject: CN=6a2c22b7-dfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:87:5c:f5:13:48:72:84:60:bd:45:cb:5b:
                    f0:57:0b:74:69:88:16:1f:65:e6:a6:34:0e:68:c1:
                    57:70:64:2b:f4:f7:37:8d:9e:d4:e1:f2:9b:6f:ad:
                    26:ac:6f:c1:c7:2d:61:53:de:7a:a8:2e:50:c8:f1:
                    d8:11:e4:90:16:54:a5:5a:0f:84:2c:0c:af:bd:10:
                    a2:6a:ea:36:78:5d:1a:66:02:06:3e:b3:b1:2d:f4:
                    21:51:44:31:2b:aa:d0:f4:96:9e:37:34:be:b3:5c:
                    74:cd:01:d4:65:c3:f8:0c:6b:14:59:47:e0:1c:e8:
                    ec:37:a1:97:ff:79:5c:d1:82:dc:24:8f:d9:f4:39:
                    95:93:d0:30:c6:46:3e:7d:29:9f:8f:e3:19:c5:c0:
                    6d:6e:94:b0:05:15:e0:fd:8b:25:16:c7:df:d3:33:
                    78:5f:c7:bd:12:87:f5:81:f5:16:f8:c6:db:ef:19:
                    22:e0:48:42:02:13:44:0b:f5:1c:f3:12:aa:88:12:
                    1f:9a:5e:3d:7c:dc:a5:c7:74:db:5b:9a:ca:46:3c:
                    29:a2:79:f2:20:e2:a8:0f:d8:84:9f:69:29:9f:1e:
                    91:b9:68:05:df:6e:57:84:69:66:71:ad:a7:1e:59:
                    b6:f4:69:e5:9e:68:fd:3e:54:4f:a8:15:2a:e0:89:
                    0e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DB:C1:E7:BC:5D:57:B4:1E:94:03:B6:F5:B8:00:FB:D7:43:71:E9
            X509v3 Authority Key Identifier:
                keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a5:3c:f7:50:9c:74:66:53:35:11:83:72:a3:09:67:b6:ed:
         df:87:71:ec:35:16:e9:67:e7:d1:e4:68:f1:d8:be:52:5f:78:
         7f:e8:38:52:ed:35:21:33:80:8b:7d:51:65:f9:6a:42:72:80:
         65:98:dd:a2:d0:47:27:20:87:91:86:98:9e:79:8c:86:fe:c5:
         fb:f3:51:5a:31:0f:94:b1:0d:bd:14:0f:0b:da:c7:80:69:6e:
         f2:65:38:cb:d8:7d:93:7e:28:41:1c:b7:4e:f0:52:54:56:cf:
         b8:5b:35:35:bb:c3:4c:c7:53:bb:00:25:91:b3:db:c0:bd:d4:
         f0:11:d7:e9:c6:6a:66:eb:84:42:a5:03:97:55:58:4e:26:23:
         c7:e6:c8:03:11:8e:9b:ea:c1:95:5b:5e:0d:90:26:3a:ff:3c:
         74:da:c0:3a:a7:83:25:c6:5d:89:f6:7a:38:83:de:73:f9:8c:
         93:35:67:4e:ee:75:f8:82:97:b2:71:ba:0a:a3:f7:d7:d8:00:
         06:e5:ed:fe:5e:de:c0:25:2c:0c:6d:7f:4a:44:77:89:0b:02:
         96:7d:dc:ea:af:fb:39:45:f7:0d:08:74:4d:8a:21:1d:62:b9:
         36:27:1e:35:e4:0a:51:04:1f:24:1f:b5:10:fb:d6:06:9c:b4:
         ff:64:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:03 2026 by rpki-client