Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
File:                     L71gGUYMdo4C0QZloGiN0flxhG8.mft (raw, json)
Hash identifier:          ySR6VNS95CCn5vWaSiSMLvL0d/RU8yMtUIIhUitm+pM=
Subject key identifier:   72:52:12:CD:13:59:61:33:58:8A:F9:DB:11:07:F9:B4:6C:C5:E8:BB
Authority key identifier: 2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F
Certificate issuer:       /CN=A9110C8B/serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
Manifest number:          51
Signing time:             Tue 23 Jun 2026 08:31:21 +0000
Manifest this update:     Tue 23 Jun 2026 08:31:20 +0000
Manifest next update:     Tue 30 Jun 2026 08:31:20 +0000
Files and hashes:         1: L71gGUYMdo4C0QZloGiN0flxhG8.crl (hash: GKZRnQHqD+dgascNSaK0200OFa4qRzyGPABSXqjChiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl
                          rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 08:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C8B, serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
        Validity
            Not Before: Jun 23 08:31:20 2026 GMT
            Not After : Jun 30 08:31:20 2026 GMT
        Subject: CN=6a3a4459-6d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:c1:95:62:6c:4c:27:70:54:f4:0d:ee:16:
                    20:e9:84:c7:73:6f:bd:73:31:0e:54:13:18:38:8f:
                    d0:01:8f:1d:57:63:4a:86:25:c9:77:18:30:ce:13:
                    70:7c:c2:d1:9e:8f:fb:39:12:c8:67:5e:78:2d:c3:
                    21:ae:e3:7a:a4:cc:27:f5:4f:8e:31:cc:4f:02:5a:
                    60:ad:ad:86:4c:d9:e9:b5:51:80:2e:a5:c3:44:4f:
                    b5:50:33:e5:73:91:34:21:58:6e:77:59:64:83:63:
                    82:7d:57:32:58:69:df:53:2d:17:00:1a:6c:dc:7f:
                    14:3a:db:7c:ec:f9:0b:aa:b8:67:2d:1d:c2:1a:91:
                    59:92:21:e7:45:09:4c:72:57:72:ce:a9:da:d1:ed:
                    e1:c2:23:5c:09:ce:47:5d:cc:68:4c:39:0f:fb:4d:
                    e8:eb:60:64:b0:bd:c9:8a:0b:be:fe:7b:8c:b7:2a:
                    91:08:98:6b:f6:68:1a:46:f3:a2:ed:6a:fa:89:08:
                    4d:05:ae:1e:9f:6f:21:dc:7e:58:7e:7a:3b:b2:05:
                    9c:4e:c3:93:4a:42:7b:34:4c:f2:1c:22:09:1d:a1:
                    8e:3f:8e:94:d3:40:b8:a9:a4:7a:dd:af:e6:90:d4:
                    31:31:70:24:75:83:03:e8:fe:5a:b4:0b:bf:4d:79:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:52:12:CD:13:59:61:33:58:8A:F9:DB:11:07:F9:B4:6C:C5:E8:BB
            X509v3 Authority Key Identifier:
                keyid:2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:db:86:cd:c5:d5:90:28:91:53:b0:49:9e:69:e9:f4:81:
         71:04:2b:16:d2:6d:9a:f6:37:a3:20:ff:26:43:2d:9c:1d:50:
         84:5a:2e:51:e7:31:0e:b9:2b:bd:0b:e3:1c:5b:6d:33:fe:a2:
         86:b3:bb:59:07:a9:b0:2c:0a:70:0e:29:8e:bd:26:a9:06:cd:
         55:91:40:4a:9c:b4:f3:22:8a:69:d9:fa:08:69:8d:35:b2:98:
         e1:84:84:49:f8:d4:dc:d9:81:8a:89:8c:ce:50:30:98:09:f6:
         b6:44:af:64:b1:0f:01:8d:53:53:9d:ae:d0:d9:d0:67:73:67:
         53:b3:6d:ac:c4:93:3c:b4:90:78:42:95:60:9f:fd:eb:ab:3b:
         cd:82:5e:40:ca:ab:c6:b5:2f:c5:55:c0:53:2b:e5:44:52:3b:
         f1:90:89:fe:db:29:c9:0a:45:24:0f:97:a3:f1:91:9f:eb:0d:
         d9:e2:4d:2f:50:bd:27:cc:c7:0b:c6:9c:ce:20:fe:6e:53:f8:
         09:79:7d:61:f6:25:30:68:8c:22:3f:36:17:66:fb:35:ab:e6:
         64:7d:27:2a:2a:22:85:be:17:14:cb:78:f2:d8:47:44:a3:36:
         bf:24:53:29:d1:6c:e8:67:d8:f9:a8:15:ff:58:12:71:8a:c3:
         26:9f:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:09 2026 by rpki-client