Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
File:                     ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json)
Hash identifier:          EFrkfdX0eDQsywM4uiXWpfWYkm6jBAgKBrToz2Zvcio=
Subject key identifier:   EE:4B:FD:96:45:DF:07:33:FB:8C:EF:3F:64:3D:D6:1C:5D:25:8B:33
Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77
Certificate issuer:       /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
Manifest number:          014C
Signing time:             Thu 11 Jun 2026 07:31:46 +0000
Manifest this update:     Thu 11 Jun 2026 07:31:45 +0000
Manifest next update:     Thu 18 Jun 2026 07:31:45 +0000
Files and hashes:         1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: GJ+dshv1eGdRRlSqRI33qrHbeMC8cXIZdFpe2h0ayAs=)
                          2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: M+cyWKbUFQNlRI1m90KUe0FaVezt/HgotqvoprldJAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl
                          rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 07:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177
        Validity
            Not Before: Jun 11 07:31:45 2026 GMT
            Not After : Jun 18 07:31:45 2026 GMT
        Subject: CN=6a2a6462-2c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:59:31:62:a8:fe:cb:6d:9c:6e:0a:14:a1:7d:
                    3b:2f:ab:47:16:7e:44:6e:96:4a:02:e4:71:61:c4:
                    ba:99:e9:f9:e8:38:e6:2e:f3:d6:83:f9:69:23:ef:
                    41:d3:db:37:3e:52:5e:db:54:19:42:d1:ba:38:c3:
                    05:f2:22:16:d7:ae:f1:0b:f7:eb:fc:37:39:ac:08:
                    84:cb:b4:bc:07:bb:0c:ae:a4:53:ea:80:f2:2b:64:
                    73:2f:75:43:ab:22:88:3c:d9:86:cd:db:f0:6f:e8:
                    77:b6:a0:a9:70:04:94:da:05:6a:ae:bb:58:9a:34:
                    42:72:ef:d4:39:3d:5e:76:44:29:0c:21:d2:b2:2f:
                    a3:7b:d4:76:3a:26:69:15:b7:7b:5a:22:d6:2a:aa:
                    3f:cb:a8:ff:f1:e0:6a:b8:39:04:5f:b1:13:e3:20:
                    31:e5:42:be:56:d3:23:e0:3f:0b:d1:26:1b:4e:de:
                    52:b8:e1:59:9c:ed:de:ae:8c:27:a0:1f:6f:51:f0:
                    33:7f:30:55:16:2f:cd:3c:59:36:bf:08:8a:f5:d5:
                    68:5d:9d:3b:bc:b3:15:44:eb:35:c9:6b:ef:eb:4b:
                    ea:38:b1:ea:c1:96:41:91:b4:71:6a:39:8d:d2:76:
                    44:fc:5b:e3:ee:9d:93:be:b3:6a:80:3b:b6:a1:41:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4B:FD:96:45:DF:07:33:FB:8C:EF:3F:64:3D:D6:1C:5D:25:8B:33
            X509v3 Authority Key Identifier:
                keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:72:a7:b7:5c:ae:1a:35:91:87:da:e2:f6:a6:01:f1:60:fb:
         0a:34:47:d0:e6:d9:19:b0:12:0a:5e:df:81:05:0b:5d:48:33:
         c2:96:f5:be:73:4d:a6:30:d9:6d:81:6d:10:fe:9e:ee:6c:da:
         da:d1:35:bf:b2:c3:e5:3d:68:c8:e8:f9:12:e3:75:98:b6:18:
         62:6e:60:68:c1:ff:94:c0:39:9a:b1:e3:70:62:0e:c8:9c:82:
         dd:78:7a:1f:20:d5:25:5c:32:f7:4a:c9:c7:45:12:e0:ec:02:
         b0:f6:ab:7f:c0:4f:3e:b9:c4:4c:13:b5:a1:b0:81:45:d3:92:
         f3:4f:f2:33:91:7d:eb:f2:f0:f1:35:d2:35:2a:b0:91:14:fc:
         47:5e:94:aa:49:44:e1:32:f8:fc:9f:1b:12:9f:6c:39:0b:01:
         e7:aa:35:0e:05:df:87:95:78:4c:39:71:eb:4b:fd:b5:39:ae:
         cb:04:a3:32:14:7a:e4:36:ba:17:82:30:58:a7:98:a9:e9:7f:
         73:15:41:b7:e6:a5:4d:37:ef:ca:78:d6:ca:f5:6e:7a:0f:c2:
         2b:30:b1:79:2b:00:ea:6e:c5:c8:ec:84:13:84:a0:32:3a:b9:
         b6:12:05:ed:a3:e3:97:e0:41:0d:89:0e:2b:b6:de:4d:07:0a:
         4c:24:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:46:19 2026 by rpki-client