Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
File:                     qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json)
Hash identifier:          tX2HmyrpysOoGEvXaOVcYB69w/v+sw0v7nz7FNoUkq8=
Subject key identifier:   71:53:19:FE:09:25:AF:00:2F:39:78:7E:F5:BE:E3:C8:9A:9D:10:45
Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Certificate issuer:       /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Certificate serial:       354A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
Manifest number:          354A
Signing time:             Fri 12 Jun 2026 15:13:58 +0000
Manifest this update:     Fri 12 Jun 2026 15:13:57 +0000
Manifest next update:     Fri 19 Jun 2026 15:13:57 +0000
Files and hashes:         1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: mUAkT5tLD5Ed+vEOp2uwDfIp64UqfQzpRiTNzpQKbOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
                          rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13642 (0x354a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
        Validity
            Not Before: Jun 12 15:13:57 2026 GMT
            Not After : Jun 19 15:13:57 2026 GMT
        Subject: CN=6a2c2236-6890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:d1:47:64:9e:b0:2e:3d:fe:b9:60:cc:d4:
                    8c:15:2b:79:8a:30:dc:a0:f2:d8:6f:3f:c9:c7:3d:
                    8e:69:cb:b8:45:77:89:c6:21:f1:d4:a2:c1:6b:77:
                    a4:7c:b9:67:02:b9:f3:d8:01:69:6b:21:9a:c3:01:
                    ff:99:77:57:56:bc:70:bb:d2:4c:e3:00:bf:31:fc:
                    d0:92:39:27:f4:ef:d7:61:b8:48:80:9b:21:4e:f1:
                    92:f2:ee:82:b3:d9:3f:8a:50:77:4f:c0:0a:0b:74:
                    ed:bb:29:6a:4a:ed:a2:96:fd:2a:39:1c:5f:74:87:
                    58:61:07:86:27:cb:11:b4:99:c8:7f:7b:f0:1a:a0:
                    0a:f5:ea:b3:77:6e:a3:ef:ee:f5:ca:a2:d1:f6:e5:
                    71:cd:48:62:27:20:d0:d6:18:06:3b:9f:c1:a7:b7:
                    78:55:07:bc:86:52:df:6f:6a:12:2f:95:8e:77:54:
                    3a:4e:0c:6e:de:de:c0:21:d9:1b:37:e7:b2:ed:79:
                    ca:58:2f:72:e3:b6:23:b8:3d:b7:36:4d:cf:a4:33:
                    1d:df:f4:d0:dc:b2:75:f9:7c:39:80:c7:68:b7:55:
                    17:24:72:8d:da:c9:bb:de:9d:3e:6e:ff:72:42:b1:
                    15:c3:99:3f:01:94:86:9b:65:7f:e1:b2:c3:85:4a:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:53:19:FE:09:25:AF:00:2F:39:78:7E:F5:BE:E3:C8:9A:9D:10:45
            X509v3 Authority Key Identifier:
                keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:56:58:9b:1e:31:89:4d:41:6d:71:1c:b6:38:c6:a4:ab:50:
         8c:6c:74:e3:f9:ae:d5:77:cb:30:06:52:ee:a1:75:e4:56:be:
         68:31:c1:1a:24:e1:cc:03:78:3b:6a:31:5e:f1:c9:bc:e0:73:
         14:36:38:e6:22:6a:34:27:65:03:3a:ee:ba:e2:16:ed:01:2f:
         dd:6c:28:3e:92:53:e4:0c:e1:ce:fa:7d:9f:91:10:70:d2:89:
         3b:ab:6d:38:41:9d:b0:30:b3:87:a0:d7:44:d0:63:70:d3:36:
         a2:ac:53:05:5c:2f:b2:24:ce:61:d2:d4:96:8f:27:3f:6a:a7:
         6f:08:41:4c:a5:b5:e8:e5:82:0a:9b:b9:50:d5:de:1f:b5:c1:
         64:1f:5f:e0:80:05:36:e1:73:39:05:dc:25:8f:c7:83:b8:c1:
         ca:9e:58:6d:f2:d9:7a:41:cd:b1:b2:58:91:e1:05:b5:67:65:
         40:0c:ff:db:82:ca:80:57:b2:10:4a:16:77:84:fc:b8:71:31:
         79:0f:b1:31:19:56:c2:a1:02:f3:16:d3:81:89:1c:88:2e:91:
         e6:65:92:30:d9:fc:81:74:a4:b1:43:94:bd:c0:a2:0f:79:57:
         ce:e8:31:6b:5f:22:97:85:89:90:79:d5:01:c3:28:1a:f4:11:
         34:f6:13:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FDQ0ExMTAvBgNVBAUTKEE5OUY2Njk4NjkyNzIwMTE1NDk2Q0I0NTk3MDJDNDNB
REM0OEQ2QUQwHhcNMjYwNjEyMTUxMzU3WhcNMjYwNjE5MTUxMzU3WjAYMRYwFAYD
VQQDEw02YTJjMjIzNi02ODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr3nRR2SesC49/rlgzNSMFSt5ijDcoPLYbz/Jxz2Oacu4RXeJxiHx1KLBa3ek
fLlnArnz2AFpayGawwH/mXdXVrxwu9JM4wC/MfzQkjkn9O/XYbhIgJshTvGS8u6C
s9k/ilB3T8AKC3TtuylqSu2ilv0qORxfdIdYYQeGJ8sRtJnIf3vwGqAK9eqzd26j
7+71yqLR9uVxzUhiJyDQ1hgGO5/Bp7d4VQe8hlLfb2oSL5WOd1Q6Tgxu3t7AIdkb
N+ey7XnKWC9y47YjuD23Nk3PpDMd3/TQ3LJ1+Xw5gMdot1UXJHKN2sm73p0+bv9y
QrEVw5k/AZSGm2V/4bLDhUot4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFTGf4J
Ja8ALzl4fvW+48ianRBFMB8GA1UdIwQYMBaAFKmfZphpJyARVJbLRZcCxDrcSNat
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUNDQS82MDg2RDc4MjFE
QTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklCRlVsc3RGbHdMRU90eEkx
cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FaOW1tR2tuSUJGVWxzdEZsd0xFT3R4STFxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUNDQS82MDg2RDc4MjFEQTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklC
RlVsc3RGbHdMRU90eEkxcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFFZYmx4xiU1BbXEctjjGpKtQjGx04/mu1XfLMAZS7qF15Fa+aDHBGiThzAN4
O2oxXvHJvOBzFDY45iJqNCdlAzruuuIW7QEv3WwoPpJT5Azhzvp9n5EQcNKJO6tt
OEGdsDCzh6DXRNBjcNM2oqxTBVwvsiTOYdLUlo8nP2qnbwhBTKW16OWCCpu5UNXe
H7XBZB9f4IAFNuFzOQXcJY/Hg7jByp5YbfLZekHNsbJYkeEFtWdlQAz/24LKgFey
EEoWd4T8uHExeQ+xMRlWwqEC8xbTgYkciC6R5mWSMNn8gXSksUOUvcCiD3lXzugx
a18il4WJkHnVAcMoGvQRNPYTNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:32:33 2026 by rpki-client