Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
File:                     Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft (raw, json)
Hash identifier:          w64UQoqbQvYjFn/DzF15N23v+uuCq+Bszs5ahLalND0=
Subject key identifier:   9F:14:4E:A4:F0:FD:FC:F3:5F:AA:E5:E9:36:A9:9D:2D:F1:37:27:A1
Authority key identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5
Certificate issuer:       /CN=A91E585B/serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
Manifest number:          4F
Signing time:             Sat 13 Jun 2026 08:22:30 +0000
Manifest this update:     Sat 13 Jun 2026 08:22:29 +0000
Manifest next update:     Sat 20 Jun 2026 08:22:29 +0000
Files and hashes:         1: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl (hash: RhR6Q2VEo8zbKaWq32d2e12DeVVbYTzOv3FkRwd9Jro=)
                          2: F526FD64F20611F0B4D6054A4A6F56BC.roa (hash: Gbi/liXaTJ25LBNVoW8OXNj5S66g3SHNzd+jBQM9W+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl
                          rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E585B, serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
        Validity
            Not Before: Jun 13 08:22:29 2026 GMT
            Not After : Jun 20 08:22:29 2026 GMT
        Subject: CN=6a2d1345-a1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:00:95:43:76:f3:2f:43:8e:8e:e7:2d:03:
                    94:01:c4:ba:46:2e:fe:55:25:e4:4e:e7:3a:17:cc:
                    20:d4:ec:d0:ec:1d:91:9b:b7:03:91:ba:7a:12:6b:
                    f1:75:9b:e6:74:fd:1e:4f:d7:0e:e9:6f:a3:00:2b:
                    c6:fa:f6:96:75:3f:b3:b1:24:ee:3a:f6:bd:1d:af:
                    92:8f:ad:ba:fd:e3:21:4e:a2:04:fc:ed:87:b6:4c:
                    71:cc:a4:f4:dc:74:7c:21:25:74:30:03:31:e9:83:
                    20:0a:bc:ce:c4:95:48:57:19:e4:f9:cb:95:54:34:
                    d7:df:5d:aa:72:d2:c2:42:e3:13:bf:98:ce:13:aa:
                    f8:34:71:c7:c7:9e:3b:40:6e:b4:c3:75:ec:d8:0e:
                    55:c9:f4:a1:65:71:6c:26:c9:4d:db:14:b4:b6:b7:
                    a4:15:ed:c6:23:71:77:bc:55:e3:01:98:c9:46:05:
                    46:3f:4e:22:6c:55:25:94:fe:58:26:14:cd:2f:e3:
                    90:5c:a6:a6:c5:33:3d:c3:47:2d:5b:1b:29:33:5f:
                    70:96:a0:91:28:03:73:9e:79:ff:95:b0:9d:30:93:
                    10:87:ac:99:c5:b4:ec:b5:3e:c4:57:8b:26:73:ab:
                    eb:e9:52:17:bc:cf:79:50:db:6a:d9:51:1e:88:41:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:4E:A4:F0:FD:FC:F3:5F:AA:E5:E9:36:A9:9D:2D:F1:37:27:A1
            X509v3 Authority Key Identifier:
                keyid:31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:15:4d:0c:00:84:30:cb:55:94:6f:38:93:1e:d0:b3:97:50:
         4e:db:30:ce:c8:c9:db:13:37:d4:7b:d0:c1:ea:3e:62:81:23:
         1e:fa:cb:8a:c4:a7:f6:76:bf:10:e6:f1:cd:28:69:26:9c:9a:
         6e:d1:c4:e5:da:eb:ca:3f:3d:12:68:e1:21:5c:5f:36:06:6e:
         d2:03:cf:8e:68:fa:4c:03:a9:53:8e:31:49:b9:08:f2:03:e4:
         54:14:76:fe:f5:d3:71:f9:15:81:3a:6a:7f:82:9c:9b:6d:47:
         20:e5:ef:d8:e9:8a:45:dc:18:94:a5:24:b0:df:ed:8b:51:aa:
         4a:8b:f8:24:6b:1a:6d:4b:24:10:56:97:9f:6b:c3:49:e2:e3:
         12:0c:35:4f:c8:de:9d:1b:fb:a9:8f:cf:75:5b:42:56:05:e0:
         11:df:9e:d3:b6:50:37:e4:65:fb:66:cb:ed:fb:3b:75:9e:5f:
         15:f8:8d:73:51:76:bb:a3:78:a9:ee:a0:e5:64:d8:bd:9d:e6:
         bb:e8:c4:a7:5c:5b:65:9d:c1:0c:6f:b4:47:d1:6f:32:c6:74:
         c9:21:21:27:64:bc:e4:a9:29:9e:c3:f1:01:bf:15:d9:0c:19:
         c4:69:39:79:05:dd:5f:2b:1c:72:26:5c:7a:9a:a5:f0:38:a2:
         53:81:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:11:26 2026 by rpki-client