Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
File:                     pOlXbOhgyP9flyr1k7QFTngj5kI.mft (raw, json)
Hash identifier:          1LAcvV08a8N9zccGamstJHonLzIZ/68XnNuzuf91qQU=
Subject key identifier:   6C:17:6B:C8:23:F4:EF:2B:4D:0E:6C:49:5B:D0:9C:C2:DF:85:29:4B
Authority key identifier: A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
Certificate issuer:       /CN=A9117E4D/serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Certificate serial:       2CFD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
Manifest number:          2CFA
Signing time:             Thu 04 Jun 2026 14:26:36 +0000
Manifest this update:     Thu 04 Jun 2026 14:26:35 +0000
Manifest next update:     Thu 11 Jun 2026 14:26:35 +0000
Files and hashes:         1: pOlXbOhgyP9flyr1k7QFTngj5kI.crl (hash: KLX7+VogfoJGEMBds51x+cAB8WUS1U56FgyuCBzSs4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
                          rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 14:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11517 (0x2cfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117E4D, serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
        Validity
            Not Before: Jun  4 14:26:35 2026 GMT
            Not After : Jun 11 14:26:35 2026 GMT
        Subject: CN=6a218b1c-228e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:56:bf:40:b7:5e:f3:30:1d:fb:81:15:09:
                    f7:0b:ff:af:1a:2b:99:87:75:68:90:b4:fe:07:79:
                    fd:ef:4c:a3:4c:2c:cd:d1:e1:a6:82:68:47:c4:fe:
                    22:89:a3:03:fc:29:1e:6f:aa:72:d5:99:53:5e:f1:
                    a5:87:b7:04:11:7d:80:da:a8:34:9d:b5:5a:d8:98:
                    91:53:d8:c2:7b:e7:14:db:e4:eb:03:3e:4a:68:25:
                    01:cb:09:47:b7:78:6b:ec:b4:2d:32:2a:e8:a5:5a:
                    f1:ca:62:9a:79:1c:07:36:17:30:dc:eb:dc:57:6c:
                    87:31:af:af:e4:70:f0:69:1a:e1:49:45:19:57:ec:
                    3c:51:8c:c0:a5:dc:8f:64:14:06:bc:2c:b3:c5:f3:
                    30:f9:17:d7:9c:67:9e:40:b0:75:5c:40:82:d1:db:
                    6e:2d:39:e3:53:8a:9e:84:69:b2:68:7a:a8:43:74:
                    d3:32:9d:e8:a2:e3:83:81:19:73:4a:e6:92:70:52:
                    e5:61:3c:f1:45:32:f1:4a:17:70:96:15:47:cd:39:
                    43:2a:ed:77:2d:69:71:63:f4:b9:0e:9f:82:44:32:
                    4d:7a:29:ad:f3:c7:4e:d0:a6:b9:32:5a:0c:67:57:
                    5b:38:78:b9:d5:b8:13:75:da:a8:13:24:f1:a7:92:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:17:6B:C8:23:F4:EF:2B:4D:0E:6C:49:5B:D0:9C:C2:DF:85:29:4B
            X509v3 Authority Key Identifier:
                keyid:A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:29:1a:d4:68:a3:68:ae:1d:f1:b2:8f:b2:a9:e5:28:e7:fb:
         cd:8d:f4:39:5a:a4:16:da:7c:53:ed:01:e1:11:eb:33:1b:2d:
         20:46:70:56:1b:18:ae:71:e5:21:0b:0b:c9:72:c8:84:8a:46:
         68:03:e6:cb:36:55:c5:61:bd:5a:c5:71:14:f4:1d:bc:74:97:
         8a:4c:c3:6a:a0:14:ba:0b:57:c7:2b:8a:31:82:a0:fa:4b:51:
         c1:15:87:a0:f1:11:80:20:c3:d3:d2:2f:c3:aa:9b:c1:9e:fb:
         29:13:0e:ab:cd:61:dc:7e:df:8d:97:f4:0b:c0:18:6e:0a:76:
         14:f9:3f:3a:e6:79:63:1a:04:af:69:4c:34:b8:dd:c5:6d:25:
         03:99:c3:02:da:be:48:14:03:76:4a:74:ac:c8:2a:70:d3:01:
         03:1a:34:6a:01:33:0b:03:1d:86:a0:32:25:b4:96:3d:c7:a4:
         18:8d:90:0e:d3:8f:f3:b7:87:eb:b5:ae:92:9c:b1:a5:35:4c:
         e6:93:47:60:20:01:6f:2f:14:2b:d3:4b:28:09:16:be:86:2e:
         c9:c6:c7:d3:df:31:c7:6a:a3:b1:2e:f8:29:b0:bc:35:75:b5:
         b7:e4:13:79:1e:f5:89:69:98:f3:b6:4c:14:d4:3a:64:9e:dd:
         10:81:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:21 2026 by rpki-client