Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
File:                     MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json)
Hash identifier:          UDm0vhwvh3auysVckdKDGxpZQJG4DmaROl50qSVu+68=
Subject key identifier:   06:69:C7:B1:94:03:17:34:BC:B6:11:45:57:AB:BE:14:2A:5E:E8:8A
Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC
Certificate issuer:       /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
Certificate serial:       052A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
Manifest number:          052A
Signing time:             Tue 16 Jun 2026 23:38:50 +0000
Manifest this update:     Tue 16 Jun 2026 23:38:50 +0000
Manifest next update:     Tue 23 Jun 2026 23:38:50 +0000
Files and hashes:         1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: x/c0BG3oVnN/COUo0tl2sKYEYmUQUr+Cvy+W3ur7ffo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
        Validity
            Not Before: Jun 16 23:38:50 2026 GMT
            Not After : Jun 23 23:38:50 2026 GMT
        Subject: CN=6a31de8a-d02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:de:10:b3:80:bb:92:85:30:44:9b:07:33:
                    87:9d:6a:4a:5b:ab:fe:fa:90:2a:33:23:77:2c:5b:
                    32:74:06:5b:6c:5f:85:88:97:93:09:5e:8f:12:e7:
                    a4:cc:57:bc:10:b3:a6:44:05:ae:b9:b0:fb:02:22:
                    79:4f:3c:c1:5d:ec:62:e5:7a:50:60:90:f0:ad:b0:
                    c5:f7:bf:77:60:5f:6f:8e:1d:b7:ce:f5:68:55:ce:
                    28:b5:40:61:41:c6:60:18:68:29:f4:04:ee:ea:45:
                    67:7c:10:62:2a:ba:14:28:20:34:e5:b2:2b:68:86:
                    bc:9c:56:91:6a:8f:9a:b1:34:1d:c8:10:09:ab:c3:
                    41:a1:25:0e:05:8f:45:ca:87:76:62:ce:53:85:42:
                    9c:c2:f6:9c:7c:f2:c6:54:91:c5:ad:64:0d:03:82:
                    78:c4:a0:41:2c:a2:a0:ea:c3:d8:5d:ea:c5:cd:fe:
                    33:c3:e4:e8:ee:00:67:8d:ee:99:79:9f:37:a1:30:
                    7b:b8:02:28:f8:1f:d3:c5:3a:77:84:c8:2d:b8:62:
                    3b:31:62:0f:6e:0c:33:aa:2d:34:bf:62:15:ab:74:
                    72:e4:a2:b0:51:d3:41:f1:e1:fd:3a:df:dd:e5:48:
                    bb:c2:4c:28:a0:5c:79:b5:80:e2:76:a6:d6:14:ff:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:C7:B1:94:03:17:34:BC:B6:11:45:57:AB:BE:14:2A:5E:E8:8A
            X509v3 Authority Key Identifier:
                keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:3c:65:b3:81:22:50:79:ec:04:78:46:76:5f:72:5a:d2:
         85:c4:49:91:6c:20:0b:da:9a:ec:25:1f:2c:63:cf:8d:f4:a3:
         81:29:af:7a:50:52:7e:32:86:84:8f:48:45:9b:f1:36:fc:94:
         b3:64:44:f4:9b:2d:3f:bc:88:d7:99:9e:24:5b:dc:c8:b7:61:
         f2:2b:36:e4:4c:1e:96:22:9a:6c:fc:0e:e3:a0:ba:6b:a8:39:
         1a:0c:61:30:02:c3:57:fe:c2:cf:4d:cc:65:31:08:b8:3f:72:
         0a:d3:d0:72:ea:45:e5:af:43:a9:cb:e3:f3:34:7d:dd:6f:19:
         99:6f:99:a6:b2:f3:17:1c:c7:1d:c2:bb:ae:40:a0:2b:aa:83:
         ec:9d:85:36:fb:a8:69:fb:2b:2a:62:c0:1d:94:f5:5b:b5:46:
         f8:e2:6d:05:51:2a:aa:95:af:34:ac:26:29:97:76:f0:05:0b:
         0b:78:63:50:65:fb:f9:cc:63:a8:a4:d9:e7:eb:ee:74:c6:cc:
         67:28:b9:b5:3c:2c:dd:4a:ac:73:43:05:9f:42:ff:19:14:61:
         f1:ad:69:a9:57:92:d7:80:c1:03:11:a8:69:e1:ff:a0:d7:2e:
         3d:a8:b8:a7:11:f5:ee:54:08:f5:d2:46:7a:18:c2:9d:a5:9a:
         9b:ba:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:13:21 2026 by rpki-client