Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
File:                     mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json)
Hash identifier:          7uWCpwIHgWnaX0PPeloGDjsBN6TMU/gM7OBwhncVBBs=
Subject key identifier:   61:49:0F:08:D2:E0:62:24:E4:9E:4C:A5:DB:12:B8:80:98:E1:5D:AC
Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
Certificate issuer:       /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
Manifest number:          01A4
Signing time:             Sat 13 Jun 2026 04:14:12 +0000
Manifest this update:     Sat 13 Jun 2026 04:14:11 +0000
Manifest next update:     Sat 20 Jun 2026 04:14:11 +0000
Files and hashes:         1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: HGzi6u0SFmo7lLxJa+r1oFO+dcYTO2gvLi/UxkqU/y8=)
                          2: 56C9937C28C911F086331776C4F9AE02.roa (hash: JxwdiP8Pc7CiVQDzrJXTJybxsA7vxegE08o3FUjWbHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
                          rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
        Validity
            Not Before: Jun 13 04:14:11 2026 GMT
            Not After : Jun 20 04:14:11 2026 GMT
        Subject: CN=6a2cd914-28da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ac:14:0a:e1:90:5c:26:0a:96:a5:fa:a5:aa:
                    8e:70:13:1d:6f:66:2a:2a:b5:4f:a8:92:4c:b8:8b:
                    9d:29:af:03:44:aa:01:f2:4c:74:84:7a:b5:84:35:
                    a7:31:d0:b7:09:fa:7a:1c:07:5f:a1:77:61:00:16:
                    9a:f4:fd:22:84:2b:73:f3:d4:ad:d3:65:f1:bf:d9:
                    8b:62:c4:c3:d8:11:34:cd:3b:7b:3b:83:82:e0:bb:
                    4b:e3:e6:0e:b4:a5:56:78:6b:fe:7c:92:2c:52:d7:
                    0e:db:22:fc:e3:70:f6:a4:23:35:eb:36:21:e6:88:
                    21:dd:d6:b3:21:ab:63:c7:7f:a2:10:f0:94:d8:de:
                    a8:f4:7b:f3:0f:58:35:77:c7:24:50:89:3c:04:75:
                    7a:04:8f:f3:b3:48:33:6a:83:76:60:cd:59:78:ad:
                    fc:d5:23:27:8a:a4:30:9e:a4:77:e3:ae:7e:a9:2e:
                    09:54:fb:63:5c:c3:57:2b:11:7c:85:ee:bf:93:6d:
                    3c:2d:2a:6f:b4:c7:6a:7b:a8:62:f5:0b:72:f7:91:
                    6b:0b:1f:0d:73:81:3b:37:de:5d:29:07:a4:e2:a8:
                    61:97:b2:5b:c7:23:52:89:75:20:c9:d0:cf:fe:63:
                    86:b9:c4:ad:2c:3b:b9:76:49:fa:ce:70:c5:2a:64:
                    01:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:49:0F:08:D2:E0:62:24:E4:9E:4C:A5:DB:12:B8:80:98:E1:5D:AC
            X509v3 Authority Key Identifier:
                keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:98:bc:e6:e6:95:7f:cb:e4:2d:0b:10:d0:95:f9:4c:c6:
         db:9a:15:4c:e6:82:d9:af:31:20:64:f2:01:12:bb:49:85:09:
         2c:a8:96:0b:d5:56:71:0a:18:31:9e:46:cb:df:07:1c:76:1b:
         7e:f8:c1:56:81:e6:75:9f:53:10:73:51:d0:80:65:d2:85:39:
         b1:8b:b4:ea:86:75:3f:38:06:1d:84:00:06:aa:d8:5e:61:32:
         b6:f5:31:7f:79:2a:19:64:24:0b:d1:8a:51:b2:c5:c9:cd:7f:
         65:8f:b3:a5:71:e4:f6:17:5a:05:97:87:a7:b6:c6:70:61:95:
         98:a9:d2:f2:68:e5:9b:05:3a:0e:27:8a:9a:09:46:5d:5e:1a:
         df:0b:41:83:4e:0f:0d:fd:91:c7:94:c3:e0:75:04:2a:74:62:
         f3:58:38:4e:b9:a8:c0:3f:20:f2:f1:5b:f8:3c:58:51:bf:d8:
         48:0c:f2:e2:d5:4a:41:f6:33:2e:da:20:1d:80:d7:88:3f:5a:
         33:18:2d:2c:36:c1:50:27:d5:e8:a2:ae:c8:31:b6:4a:b3:12:
         5b:fd:77:0e:6f:f7:d0:88:3f:f9:99:99:ce:e9:27:fd:4a:94:
         ec:98:2a:d4:ce:d2:ff:fa:ca:3e:05:4d:97:d7:c7:06:58:65:
         1e:d9:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:41:17 2026 by rpki-client