Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
File:                     CqAPpYxAjQbIlNjrrzidTFAQVEM.mft (raw, json)
Hash identifier:          plVAkLwp7+caJqGKLTD1O+JZ+hJr5xozdHOPtNpzVf8=
Subject key identifier:   37:37:CD:91:37:FA:B5:18:F1:B1:4B:57:CF:F8:AD:87:AE:9C:8B:96
Authority key identifier: 0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43
Certificate issuer:       /CN=A91D9C95/serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
Manifest number:          15
Signing time:             Thu 11 Jun 2026 11:21:06 +0000
Manifest this update:     Thu 11 Jun 2026 11:21:06 +0000
Manifest next update:     Thu 18 Jun 2026 11:21:06 +0000
Files and hashes:         1: CqAPpYxAjQbIlNjrrzidTFAQVEM.crl (hash: HciigFHR0j5sAgTynnhD+F8cOLqOpmcf3V2AwGExSC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl
                          rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9C95, serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
        Validity
            Not Before: Jun 11 11:21:06 2026 GMT
            Not After : Jun 18 11:21:06 2026 GMT
        Subject: CN=6a2a9a22-fca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:b1:de:c3:54:91:a3:d0:6b:70:00:82:99:
                    91:68:f2:f5:da:50:90:1e:3d:5d:c5:78:1e:d1:f6:
                    e4:7c:3a:5a:f2:e7:a2:ba:1b:43:1a:df:83:bf:59:
                    72:ac:f6:8b:8b:6e:8d:e2:85:d8:b3:33:bd:90:61:
                    74:86:55:b4:27:78:4e:6b:f4:ab:ee:4a:66:c4:a5:
                    82:75:2c:9e:1f:d6:3e:b3:6a:a5:e4:ed:6d:4a:ae:
                    4d:83:1d:6f:36:99:7f:6d:16:ab:d9:f8:30:6e:9c:
                    56:d1:f0:7a:20:b2:14:ad:3e:a1:7a:a7:97:5a:58:
                    32:61:93:d5:a1:22:ac:cc:95:94:e1:45:93:c9:5d:
                    36:f0:16:eb:ef:97:17:41:1a:4e:ba:71:5f:a4:ec:
                    35:c7:7c:98:fc:50:22:28:81:0d:7d:87:25:48:b5:
                    02:65:69:7a:e8:c1:cd:62:33:19:24:b2:db:12:6d:
                    fd:e5:df:b3:c5:19:93:c0:09:9d:d2:20:3b:13:49:
                    bb:66:87:d1:52:68:b4:f2:fe:81:69:50:54:cb:7e:
                    4d:f8:47:79:23:3c:bc:9c:ab:ea:66:98:1b:50:68:
                    f8:ea:39:e1:7c:c7:79:53:c8:6d:2f:12:35:ce:10:
                    18:2c:65:6e:a0:4f:fe:1e:00:7f:05:3d:b6:58:41:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:37:CD:91:37:FA:B5:18:F1:B1:4B:57:CF:F8:AD:87:AE:9C:8B:96
            X509v3 Authority Key Identifier:
                keyid:0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5d:d2:ea:8e:ba:1b:a4:ee:81:d7:1b:cf:ac:8b:0b:b4:b3:
         92:35:20:a5:f6:6e:7a:c7:eb:c9:2f:47:9f:6e:d2:ef:e9:bf:
         cf:57:8b:e0:d3:87:9e:8e:59:79:ad:48:f8:3b:b0:39:92:a7:
         d9:c6:01:ed:e9:75:8a:a5:d3:1c:15:63:b0:91:9c:29:80:67:
         4b:5a:d4:70:c2:a9:17:9c:72:cf:51:ec:89:19:21:c3:06:5d:
         4a:d7:6b:7a:63:a1:30:31:50:7c:39:1d:b4:50:8f:31:ee:df:
         a8:bb:ee:c4:1c:d4:72:97:db:7d:f6:d2:20:fb:01:f5:44:49:
         71:65:70:df:56:66:b7:63:0c:0d:b7:88:e8:73:5d:6b:d0:dc:
         6a:4b:20:32:9f:cd:10:36:78:70:7b:6e:ac:38:2c:fb:14:40:
         cb:d2:a0:b1:3e:89:e5:cf:1c:79:3c:93:da:85:2f:8d:36:37:
         aa:79:5f:ad:b3:de:9b:24:75:20:ce:95:51:d1:2c:17:d5:35:
         a6:38:3d:7b:67:94:fe:18:7c:44:b1:1c:6d:9a:d5:4c:7d:0e:
         86:5b:28:22:af:ef:8e:42:b0:56:d0:b1:e7:21:0a:23:c1:bb:
         fc:ac:7d:fa:a3:d5:e1:49:7f:07:1d:c1:6b:0f:78:11:f8:6f:
         f9:18:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:26 2026 by rpki-client