Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9C95/8FA39C6447A011F1B09F60C1A2833773/p7o1WXEKOkCg9pcIBxf8_b_1dfg.mft
File:                     p7o1WXEKOkCg9pcIBxf8_b_1dfg.mft (raw, json)
Hash identifier:          NH4lIomT7zV74QCK9hSjBssWQyJMygzzW0a3KnoBtw8=
Subject key identifier:   9B:F4:80:75:13:08:66:4A:B0:CB:1A:23:96:00:72:58:80:85:68:BA
Authority key identifier: A7:BA:35:59:71:0A:3A:40:A0:F6:97:08:07:17:FC:FD:BF:F5:75:F8
Certificate issuer:       /CN=A91D9C95/serialNumber=A7BA3559710A3A40A0F697080717FCFDBFF575F8
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p7o1WXEKOkCg9pcIBxf8_b_1dfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9C95/8FA39C6447A011F1B09F60C1A2833773/p7o1WXEKOkCg9pcIBxf8_b_1dfg.mft
Manifest number:          17
Signing time:             Mon 15 Jun 2026 09:04:55 +0000
Manifest this update:     Mon 15 Jun 2026 09:04:54 +0000
Manifest next update:     Mon 22 Jun 2026 09:04:54 +0000
Files and hashes:         1: p7o1WXEKOkCg9pcIBxf8_b_1dfg.crl (hash: 1jQxrqAKGHk4V8LQZwZyOHO2F99d255P9XbEUvphq4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9C95/8FA39C6447A011F1B09F60C1A2833773/p7o1WXEKOkCg9pcIBxf8_b_1dfg.crl
                          rsync://rpki.apnic.net/member_repository/A91D9C95/8FA39C6447A011F1B09F60C1A2833773/p7o1WXEKOkCg9pcIBxf8_b_1dfg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p7o1WXEKOkCg9pcIBxf8_b_1dfg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9C95, serialNumber=A7BA3559710A3A40A0F697080717FCFDBFF575F8
        Validity
            Not Before: Jun 15 09:04:54 2026 GMT
            Not After : Jun 22 09:04:54 2026 GMT
        Subject: CN=6a2fc037-6df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:36:27:a6:aa:5b:c4:ba:93:d0:8b:d6:37:
                    3f:29:6a:86:f9:08:eb:55:8e:d7:4c:85:4e:65:ae:
                    ff:50:91:0e:de:c6:d0:ae:09:57:d6:6d:13:2c:fc:
                    0d:55:a3:61:ae:56:46:d1:d3:b8:2b:57:2a:9a:17:
                    91:4a:8b:c1:2d:5b:fc:6a:bc:bf:db:98:fe:51:f0:
                    8e:d6:59:18:ba:2c:8e:e5:30:bf:7a:43:e2:69:02:
                    16:06:04:92:f0:5c:ee:f4:f3:0d:98:e0:e0:49:68:
                    ff:ca:c9:37:58:c3:94:3f:bd:92:3a:35:4f:ce:b4:
                    63:cc:f9:33:a1:59:51:2e:8a:7f:37:c9:79:5c:ed:
                    e7:83:1f:8d:89:fc:d9:f4:30:36:11:bd:a1:52:f3:
                    81:cb:9d:3c:ca:58:41:df:1f:b2:ba:38:ad:51:5e:
                    8a:e6:7f:b0:51:8b:4c:e4:b3:35:39:e9:bc:b4:c9:
                    92:cc:2c:af:99:71:a6:c4:db:dd:f1:53:12:ed:a8:
                    35:ae:cf:c9:ff:45:f8:02:3a:8f:3d:c4:1a:76:34:
                    0a:88:f2:aa:8c:ea:0c:44:ed:00:3e:d0:e4:c7:f0:
                    15:c7:89:73:f6:55:8b:23:8e:a9:09:09:93:a1:5a:
                    e5:3d:e2:5b:a7:d6:a8:1e:09:ef:21:e4:16:68:25:
                    fc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F4:80:75:13:08:66:4A:B0:CB:1A:23:96:00:72:58:80:85:68:BA
            X509v3 Authority Key Identifier:
                keyid:A7:BA:35:59:71:0A:3A:40:A0:F6:97:08:07:17:FC:FD:BF:F5:75:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9C95/8FA39C6447A011F1B09F60C1A2833773/p7o1WXEKOkCg9pcIBxf8_b_1dfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p7o1WXEKOkCg9pcIBxf8_b_1dfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9C95/8FA39C6447A011F1B09F60C1A2833773/p7o1WXEKOkCg9pcIBxf8_b_1dfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:57:26:fb:4d:b0:5d:6b:83:ea:e7:fd:5e:92:0d:89:d2:3a:
         38:6c:58:f4:dd:e2:97:ec:2a:bc:b7:b5:90:09:1b:6b:2d:9e:
         f2:87:c9:9a:40:bb:6b:b8:88:64:02:7c:92:97:51:aa:94:85:
         79:98:19:2a:cc:78:2d:d6:96:bd:78:ea:71:7c:48:4b:da:3d:
         78:7c:62:d9:c0:5d:14:6d:d8:39:f9:e5:6b:10:4a:71:89:7d:
         8b:cc:30:5f:8a:78:be:51:8d:57:42:c2:58:87:a2:ac:c5:c2:
         24:4a:a0:30:a9:b8:96:38:ff:9b:71:ca:aa:24:d3:5c:19:8c:
         05:e7:34:fd:61:9c:a9:bd:5b:d4:89:28:b9:cd:bf:cb:39:f4:
         4a:03:1a:87:29:5e:53:52:5e:08:47:79:13:6f:b3:59:c1:5d:
         3e:f1:65:3f:4e:ed:54:9f:f5:a5:10:7e:07:78:1f:5c:9d:35:
         0d:d2:1a:90:51:ff:3a:8e:8e:95:c2:51:0d:b8:10:9d:7b:55:
         aa:b1:11:94:f9:09:f6:8e:2a:e6:17:1e:98:40:71:80:bc:e1:
         15:30:cc:1c:9b:aa:1e:e2:20:03:3b:99:20:43:3d:c9:a9:a7:
         ee:4f:d7:c8:d8:84:4a:1d:4f:78:e7:0b:94:d9:4e:61:6c:a8:
         26:b9:ed:f1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OUM5NTExMC8GA1UEBRMoQTdCQTM1NTk3MTBBM0E0MEEwRjY5NzA4MDcxN0ZDRkRC
RkY1NzVGODAeFw0yNjA2MTUwOTA0NTRaFw0yNjA2MjIwOTA0NTRaMBgxFjAUBgNV
BAMTDTZhMmZjMDM3LTZkZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4jDYnpqpbxLqT0IvWNz8paob5COtVjtdMhU5lrv9QkQ7extCuCVfWbRMs/A1V
o2GuVkbR07grVyqaF5FKi8EtW/xqvL/bmP5R8I7WWRi6LI7lML96Q+JpAhYGBJLw
XO708w2Y4OBJaP/KyTdYw5Q/vZI6NU/OtGPM+TOhWVEuin83yXlc7eeDH42J/Nn0
MDYRvaFS84HLnTzKWEHfH7K6OK1RXormf7BRi0zkszU56by0yZLMLK+ZcabE293x
UxLtqDWuz8n/RfgCOo89xBp2NAqI8qqM6gxE7QA+0OTH8BXHiXP2VYsjjqkJCZOh
WuU94lun1qgeCe8h5BZoJfwJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUm/SAdRMI
ZkqwyxojlgByWICFaLowHwYDVR0jBBgwFoAUp7o1WXEKOkCg9pcIBxf8/b/1dfgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5Qzk1LzhGQTM5QzY0NDdB
MDExRjFCMDlGNjBDMUEyODMzNzczL3A3bzFXWEVLT2tDZzlwY0lCeGY4X2JfMWRm
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcDdvMVdYRUtPa0NnOXBjSUJ4ZjhfYl8xZGZnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5
Qzk1LzhGQTM5QzY0NDdBMDExRjFCMDlGNjBDMUEyODMzNzczL3A3bzFXWEVLT2tD
ZzlwY0lCeGY4X2JfMWRmZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAUVyb7TbBda4Pq5/1ekg2J0jo4bFj03eKX7Cq8t7WQCRtrLZ7yh8maQLtruIhk
AnySl1GqlIV5mBkqzHgt1pa9eOpxfEhL2j14fGLZwF0Ubdg5+eVrEEpxiX2LzDBf
ini+UY1XQsJYh6KsxcIkSqAwqbiWOP+bccqqJNNcGYwF5zT9YZypvVvUiSi5zb/L
OfRKAxqHKV5TUl4IR3kTb7NZwV0+8WU/Tu1Un/WlEH4HeB9cnTUN0hqQUf86jo6V
wlENuBCde1WqsRGU+Qn2jirmFx6YQHGAvOEVMMwcm6oe4iADO5kgQz3JqafuT9fI
2IRKHU945wuU2U5hbKgmue3x
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:32 2026 by rpki-client