Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
File:                     tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json)
Hash identifier:          BoF79+OH3tswxPhOvLQxdvuyQlWaH9linZa3zNfsWU8=
Subject key identifier:   AC:D3:22:25:B2:AD:52:60:64:F8:AA:F9:88:C2:27:FB:0C:3A:3A:C4
Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
Certificate issuer:       /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
Manifest number:          0245
Signing time:             Tue 02 Jun 2026 18:39:57 +0000
Manifest this update:     Tue 02 Jun 2026 18:39:56 +0000
Manifest next update:     Tue 09 Jun 2026 18:39:56 +0000
Files and hashes:         1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: gIeIYLHneydx55NR+P6uFrSjs32rQs59tTNlueLLY7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
        Validity
            Not Before: Jun  2 18:39:56 2026 GMT
            Not After : Jun  9 18:39:56 2026 GMT
        Subject: CN=6a1f237d-0671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:7b:a2:1d:91:d2:eb:4d:ca:57:ea:50:73:
                    8d:21:f4:b8:80:5b:37:a4:59:1e:de:25:e9:1a:f5:
                    86:a1:91:6c:95:26:34:e2:2e:fa:9c:db:80:2e:9e:
                    58:7d:0a:bd:64:c1:4f:8c:10:63:9e:c1:66:47:43:
                    c6:7e:0d:4a:89:0f:20:37:02:3b:e4:8d:c3:09:b6:
                    b8:c3:9c:c2:8f:18:fb:0d:ad:99:e1:69:1f:a6:38:
                    44:d2:78:20:c7:71:52:1a:bf:59:a7:5c:fa:f5:f2:
                    72:df:b9:a0:43:1c:93:8b:5a:aa:7a:6d:14:7b:95:
                    42:4e:9d:d1:85:e1:d3:7c:e0:95:a3:11:c3:3e:7e:
                    9c:f4:1b:9b:1f:08:be:d7:e8:65:a2:73:11:cd:94:
                    b6:e9:7b:61:07:0b:45:89:76:50:e1:82:11:67:10:
                    c9:38:27:bd:a5:64:33:66:89:fb:c0:35:fb:32:1f:
                    ff:ef:50:b6:5f:61:2f:68:53:74:6a:92:1d:51:38:
                    9e:7c:b5:1d:2b:4d:10:5c:cf:ec:b1:22:c1:19:ae:
                    a1:d8:c1:cf:6d:c6:8c:12:af:37:18:ea:a0:18:db:
                    10:03:1e:0b:72:62:f1:4d:5e:d0:a5:86:88:e9:95:
                    ab:db:73:20:ac:f8:ef:2b:f0:db:12:a7:e9:ed:56:
                    53:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D3:22:25:B2:AD:52:60:64:F8:AA:F9:88:C2:27:FB:0C:3A:3A:C4
            X509v3 Authority Key Identifier:
                keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7e:46:c9:ed:0e:62:ce:77:28:e4:27:d0:7d:b9:39:87:16:
         59:31:f4:1d:67:c5:50:3f:89:1d:4a:fa:31:09:c9:35:bf:49:
         d7:40:1d:ab:39:61:6c:05:8f:8c:3e:d7:83:ff:f4:7f:90:be:
         be:0e:45:8a:e4:ac:38:50:13:0c:06:07:fa:0c:cf:af:0c:ea:
         e6:10:f9:96:57:47:89:d0:af:31:89:ad:0d:99:dd:98:0d:87:
         a4:cf:32:4b:3f:b9:a3:6e:f3:aa:d7:5c:1c:76:2a:d7:f4:23:
         41:98:45:55:f4:17:a4:84:41:ee:6e:b4:11:62:f9:b1:73:f8:
         64:ec:67:fd:ed:a2:64:58:9a:28:e7:e1:b3:47:8d:5e:03:a2:
         e0:82:54:5f:c9:9f:6d:c4:eb:82:ed:1a:0f:9c:58:3e:01:59:
         f2:fa:fe:f9:77:ed:bd:21:2d:bc:2c:70:b3:36:31:87:4e:d9:
         f9:a6:c5:95:a9:18:e8:2e:41:58:1a:8b:b9:fc:72:3b:75:1b:
         dc:11:3e:7a:09:7a:bb:e9:ba:11:95:54:2a:e3:bb:df:6e:7a:
         15:25:24:2f:b9:e8:bb:94:17:69:56:ae:f1:df:46:da:4d:83:
         75:7c:2b:4b:e5:d8:eb:83:fd:cd:2e:f0:a9:76:a2:9e:93:e4:
         38:38:ca:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:41 2026 by rpki-client