Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
File:                     1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json)
Hash identifier:          UJRnWgQup/IjitI7AhBQF6UeC4yGyfYhQZoRZaeEhic=
Subject key identifier:   7D:71:21:C2:67:EC:17:50:6C:BB:23:43:5F:74:9B:73:D8:1E:2E:8C
Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12
Certificate issuer:       /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
Manifest number:          0215
Signing time:             Sat 13 Jun 2026 02:54:01 +0000
Manifest this update:     Sat 13 Jun 2026 02:54:01 +0000
Manifest next update:     Sat 20 Jun 2026 02:54:01 +0000
Files and hashes:         1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: AhUBsqntC6cNj+wc0tfYyjUpsRCpVhsfEvBrIhbe3dI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl
                          rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0A98, serialNumber=D61D782482E2548D225D1BC888836393DEE39812
        Validity
            Not Before: Jun 13 02:54:01 2026 GMT
            Not After : Jun 20 02:54:01 2026 GMT
        Subject: CN=6a2cc649-7468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8a:4d:a3:08:08:e5:e0:7d:2e:ca:f3:16:fd:
                    ab:e2:94:2a:51:30:01:5c:da:c9:49:7a:21:66:87:
                    76:92:ec:69:de:bc:76:1b:4f:d4:23:16:02:ac:35:
                    5d:03:0a:60:cf:01:ca:de:4c:b3:72:70:eb:6b:87:
                    d0:29:74:cd:6e:43:fe:49:3f:be:e7:42:74:50:18:
                    02:fb:9e:79:7f:f4:aa:83:39:05:94:a5:11:d7:e9:
                    49:3b:a6:b8:de:0d:54:66:97:12:53:88:46:7a:f5:
                    ff:9c:c7:91:b7:b1:1e:8b:93:bb:14:11:01:3b:54:
                    89:37:98:ee:6e:e4:cb:7b:34:ed:d6:be:ee:61:3b:
                    81:01:e2:2e:69:3d:3c:1c:d6:d8:3b:59:f2:52:7f:
                    fa:d8:5e:08:08:48:b5:fb:6f:67:e0:64:70:0f:b5:
                    40:39:16:ab:5a:53:91:83:84:51:b7:98:7d:50:90:
                    19:6a:1f:f5:2d:2e:28:1a:34:b5:21:35:52:89:25:
                    ef:92:96:d2:f7:3c:04:b1:c4:96:c9:a9:15:2d:49:
                    75:c9:17:83:64:8b:59:4a:97:83:f8:71:43:bc:42:
                    57:bf:bb:53:a3:60:9b:95:65:2a:b8:3d:f4:58:83:
                    3c:1c:f0:6c:29:c7:97:82:d6:c8:3c:61:e6:cf:d5:
                    e0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:71:21:C2:67:EC:17:50:6C:BB:23:43:5F:74:9B:73:D8:1E:2E:8C
            X509v3 Authority Key Identifier:
                keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:ef:e3:2d:41:f2:95:22:65:ee:c0:4e:5b:9e:0b:91:cd:
         19:ff:be:5e:0a:c4:03:b3:80:c7:ad:8d:d9:1e:20:70:bc:ec:
         84:5f:6a:a2:21:e8:e1:21:ef:ec:8e:f7:ff:a8:13:0e:d5:e7:
         30:75:b5:cd:57:f9:a8:66:76:f7:b0:c7:e8:c4:fa:a4:d4:38:
         b8:b5:8f:94:10:4f:b6:b0:1c:16:e6:5a:72:4e:d6:7b:56:9a:
         d4:41:bc:11:5d:db:9d:03:87:99:63:46:56:cc:2e:0b:8b:54:
         81:0b:4d:26:59:de:42:b1:0d:53:a6:99:97:68:f4:83:4c:24:
         02:12:46:5f:3b:d1:64:fa:df:88:7c:e2:66:b1:54:7c:e7:ed:
         ac:4b:5b:cc:6d:cf:80:cf:b7:98:33:6e:f6:05:eb:b8:55:05:
         d1:79:12:b7:f7:9c:e9:d0:d7:67:56:fe:98:dc:b6:b1:59:74:
         11:c3:ee:c6:45:f6:1a:9a:e8:2c:79:1d:4d:38:02:b8:39:d1:
         81:28:1d:ad:b8:48:71:4a:04:ae:bc:ed:a4:1e:f7:bb:1c:ea:
         37:9e:25:c2:93:b2:fe:42:52:d3:a8:0c:19:22:55:f8:2b:67:
         e8:60:fb:89:11:19:0b:99:b1:5a:fb:3a:1f:0f:d3:86:2e:bc:
         01:eb:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:16:46 2026 by rpki-client