Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
File:                     MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json)
Hash identifier:          3rHLPL7dGi/X+09smyoZ+H/aw000IHJljiH61N68kTo=
Subject key identifier:   54:7D:D0:E1:63:77:37:A4:2C:D1:5A:8E:7D:D9:59:B7:56:98:8D:14
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Certificate issuer:       /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial:       150D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
Manifest number:          14EF
Signing time:             Fri 12 Jun 2026 16:48:21 +0000
Manifest this update:     Fri 12 Jun 2026 16:48:20 +0000
Manifest next update:     Fri 19 Jun 2026 16:48:20 +0000
Files and hashes:         1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: pUNKNaWtkfGPzDu53IHY+oeoIS75Id8zRFfNYBgBObY=)
                          2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: ri400EEfSt1Zr4saG3aAHE5et+UN5EhiVulgcbMnm8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
                          rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5389 (0x150d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
        Validity
            Not Before: Jun 12 16:48:20 2026 GMT
            Not After : Jun 19 16:48:20 2026 GMT
        Subject: CN=6a2c3855-0399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:53:b0:b9:fd:f5:5f:b8:ce:09:70:45:91:9b:
                    8e:56:9a:b8:93:6f:03:de:56:1b:55:7e:24:d6:96:
                    c5:fe:88:78:69:80:89:6e:48:13:a5:09:f6:88:ce:
                    2b:b3:a3:98:1d:82:2b:c9:28:c0:e3:fe:ff:04:90:
                    0d:4d:f2:6f:e6:06:11:e6:c5:70:e5:71:70:d7:ff:
                    ae:70:5e:43:d4:84:cb:60:f9:86:e6:da:11:cd:e1:
                    65:88:b3:8b:27:92:5c:ff:67:41:cb:08:d7:29:be:
                    09:59:1e:f8:7a:b2:08:9d:86:15:30:2a:d3:67:af:
                    b0:3e:f8:c9:86:a6:93:69:32:ee:15:2d:cd:52:bc:
                    7e:29:fe:a2:3a:24:94:ac:c2:55:b6:98:10:36:be:
                    fc:30:3c:0e:1c:d1:70:6f:48:68:85:fb:82:d6:0b:
                    fa:6d:a8:1c:2a:e1:5f:41:7a:1e:c5:33:80:64:e8:
                    6c:b6:81:dd:f9:de:38:db:b4:a3:4d:b0:75:b7:47:
                    07:ba:88:5b:2f:61:8f:68:17:9d:46:1a:f5:94:0d:
                    94:2b:87:e1:c5:2b:54:f9:ed:92:c3:42:fb:c9:9d:
                    79:e8:ee:03:f3:d7:77:53:85:04:28:fc:22:0b:39:
                    fe:cd:0d:70:c8:fb:9c:d1:fe:1c:21:db:87:c5:b0:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7D:D0:E1:63:77:37:A4:2C:D1:5A:8E:7D:D9:59:B7:56:98:8D:14
            X509v3 Authority Key Identifier:
                keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:19:61:41:10:ae:5b:54:7d:b3:af:bf:ce:8a:ba:41:a3:8f:
         1a:14:60:c0:f2:95:16:63:05:ad:2f:8f:03:7c:b6:08:77:dd:
         cd:bf:a7:a9:58:4e:99:a3:69:ca:75:58:44:58:1e:41:a1:a7:
         35:74:98:30:8e:c1:c9:6d:cb:5b:26:3a:97:4d:11:b5:7a:39:
         d1:30:b3:0f:56:de:3f:f4:25:9c:44:90:39:9f:6a:db:fb:ce:
         56:18:a3:16:4a:c3:1c:f1:b1:de:4b:67:af:37:16:c7:5c:a9:
         69:94:a4:36:09:d3:90:6e:3c:24:60:a8:63:e8:4d:d7:b6:74:
         20:f3:4a:66:95:79:a8:e6:bc:38:e1:05:94:49:2d:e4:9a:3d:
         d1:86:65:8c:76:9b:98:f3:7e:dc:3a:db:55:04:12:80:d1:0f:
         13:95:90:11:da:d2:9b:26:06:75:8d:32:1e:ac:81:9d:c1:88:
         e5:bb:9c:22:d4:75:f2:3f:88:78:94:da:f3:b1:e3:66:13:58:
         a1:9f:0e:b3:7e:ca:39:f3:ce:2a:5a:a7:c9:4c:83:26:c5:19:
         1c:86:79:c5:42:f1:80:e0:0d:28:9a:56:9e:88:89:29:f3:d7:
         5f:a6:7d:31:63:25:c7:52:59:a0:26:6f:e6:c3:5e:2c:c8:f5:
         e2:a8:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:23:41 2026 by rpki-client