Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft
File:                     afotkTN0HoMAQ-tA5A0ivzU4684.mft (raw, json)
Hash identifier:          mEidgI0qHVj2eZJmX//czcw/Z3vZaysWsAwlVo7PdcU=
Subject key identifier:   76:81:1B:9B:AB:53:8C:66:B6:6C:6E:B5:43:7D:6D:B4:78:C7:9E:BA
Authority key identifier: 69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE
Certificate issuer:       /CN=A91CCB81/serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft
Manifest number:          4F
Signing time:             Sat 13 Jun 2026 08:24:57 +0000
Manifest this update:     Sat 13 Jun 2026 08:24:57 +0000
Manifest next update:     Sat 20 Jun 2026 08:24:57 +0000
Files and hashes:         1: afotkTN0HoMAQ-tA5A0ivzU4684.crl (hash: 4Hd4KHDmgmpomGpH7HIywQRiLfxLJbUVOIDSrmHL0dE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl
                          rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCB81, serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE
        Validity
            Not Before: Jun 13 08:24:57 2026 GMT
            Not After : Jun 20 08:24:57 2026 GMT
        Subject: CN=6a2d13d9-6d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:96:01:13:8a:9b:6d:32:dc:11:22:f0:2f:24:
                    11:b4:bb:46:b1:8d:20:a1:b7:57:ca:44:e1:53:05:
                    80:09:cd:de:79:1a:b6:83:fc:a4:ad:75:b5:75:61:
                    89:5f:f6:1b:3d:a6:7f:95:e7:64:35:af:e3:26:7d:
                    8b:21:f1:0d:dc:4f:6d:4c:74:87:5f:68:c8:3f:7e:
                    15:08:9e:fa:51:01:ef:a7:4f:77:35:f8:0a:0e:aa:
                    45:9f:5f:c1:5c:25:80:f0:c8:7d:af:07:8e:3e:d4:
                    17:8f:aa:64:38:12:d2:3e:5a:f5:f7:6d:c3:8c:50:
                    a9:cd:4e:8f:5a:9d:bd:a6:5c:1b:a5:74:71:fa:8c:
                    0f:77:f4:33:2c:33:b6:cb:02:6e:9d:56:cb:27:84:
                    2f:86:f4:2e:7b:d8:98:92:de:6f:2f:b0:69:bb:3c:
                    8d:18:90:43:1d:37:63:e9:84:ce:65:ec:e9:60:b7:
                    98:22:48:d9:81:60:1a:65:9a:b3:49:f2:14:58:29:
                    f8:35:8b:e5:cc:9c:82:6a:a8:b5:d5:a3:9e:af:97:
                    b7:de:6e:7c:00:bd:af:d1:8a:7a:a4:29:7b:33:cb:
                    55:6c:19:5d:43:5d:5c:59:98:d9:2c:d3:5d:33:40:
                    cd:2a:4f:c6:d3:7b:c9:43:b2:bf:8b:10:c0:30:98:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:81:1B:9B:AB:53:8C:66:B6:6C:6E:B5:43:7D:6D:B4:78:C7:9E:BA
            X509v3 Authority Key Identifier:
                keyid:69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1f:a7:51:49:f9:45:29:cd:a2:cf:c0:a4:9b:ec:e2:1a:70:
         dc:8f:61:c2:b1:47:c1:0d:f4:ce:4c:17:be:3f:1f:01:fd:49:
         7c:21:33:8b:a4:ab:a8:33:30:8a:3b:a1:42:43:4d:17:ea:28:
         ca:fe:d6:61:27:e5:54:fd:04:cd:e6:23:f1:80:a2:c9:fc:be:
         7e:86:a2:7d:f9:7b:f1:c3:68:3b:b5:14:1b:39:c4:4c:2b:10:
         09:8d:a3:07:68:13:32:c8:66:59:6c:8e:e3:64:49:83:76:1b:
         60:a7:ec:30:fc:b9:d5:ec:50:1d:02:12:83:5f:11:2f:69:83:
         73:1d:79:1f:57:a7:c0:26:f8:aa:e1:0f:1a:05:dd:e0:16:a5:
         1f:21:a0:e5:8a:0c:ae:56:12:c4:dc:e8:29:ed:31:7e:df:ed:
         bf:db:88:15:0f:f2:7a:02:5e:88:55:71:05:8d:64:79:81:a6:
         b9:6e:75:97:20:a0:b5:a6:f5:c5:78:00:24:57:8a:d9:06:db:
         5e:33:45:64:8b:f8:8e:8e:9a:e2:38:28:02:8a:07:84:29:86:
         f7:0b:68:61:fb:f6:b8:d7:9d:1d:27:92:f8:c6:f2:7e:d0:47:
         c5:d5:39:69:ef:18:20:15:ff:9c:1b:cc:91:27:b6:b6:05:d6:
         98:24:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:30:22 2026 by rpki-client