Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
File:                     dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json)
Hash identifier:          tAXP7xl48aWtP1vx9DRN3E2dWl/hxj4YyRjX6Yf/9dc=
Subject key identifier:   CB:F4:93:9B:CE:85:88:76:DF:2A:CB:CA:5C:B2:AA:E8:DC:11:23:C2
Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0
Certificate issuer:       /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
Certificate serial:       071A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
Manifest number:          0719
Signing time:             Mon 22 Jun 2026 14:47:02 +0000
Manifest this update:     Mon 22 Jun 2026 14:47:02 +0000
Manifest next update:     Mon 29 Jun 2026 14:47:02 +0000
Files and hashes:         1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: asKf+zlkTpunk69mmbq+zuNN6THtP4inFnUd3fi9Ecc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl
                          rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 14:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1818 (0x71a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121E13, serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
        Validity
            Not Before: Jun 22 14:47:02 2026 GMT
            Not After : Jun 29 14:47:02 2026 GMT
        Subject: CN=6a394ae6-664a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9e:81:c6:91:dc:a0:46:c8:e3:86:67:08:1f:
                    a7:9a:a4:69:6a:77:bf:f4:91:e6:9d:37:81:6a:53:
                    a7:ba:09:35:98:c9:9e:4b:de:33:3f:e3:d8:0f:eb:
                    e1:f4:48:bb:46:35:54:6f:00:b9:c8:54:60:67:fb:
                    79:3d:4d:ca:12:25:cf:0c:b3:39:90:df:d5:b5:cc:
                    e3:b9:73:28:57:29:62:b0:bc:26:c3:87:d1:00:95:
                    94:2f:ab:9e:73:ed:81:cd:04:88:48:18:b7:41:b0:
                    f4:54:a9:5e:9d:54:a4:76:fa:fa:6f:2a:9c:5c:7b:
                    7c:ab:5c:1f:d8:4d:34:07:ea:6d:7f:d6:f2:a8:ae:
                    2e:e3:75:ea:47:bd:88:cb:ee:c0:50:f2:7b:4a:23:
                    cc:d0:b9:4c:bd:2d:5e:c2:0a:a2:7c:1f:59:7c:cd:
                    24:19:f3:40:67:49:37:ad:b3:a6:81:23:12:47:6d:
                    bc:32:89:a4:62:9f:10:01:b2:03:d7:8a:91:0d:2c:
                    0c:38:66:72:37:06:ed:c1:4f:3c:02:4f:e3:d3:5e:
                    9d:ed:27:68:68:c0:ca:8a:a1:bf:7a:57:5c:b6:a5:
                    cb:92:8d:68:44:b0:ea:5d:33:79:11:9f:fb:8e:e8:
                    13:cc:a8:11:a4:63:92:ca:96:f3:ba:1c:23:87:c5:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F4:93:9B:CE:85:88:76:DF:2A:CB:CA:5C:B2:AA:E8:DC:11:23:C2
            X509v3 Authority Key Identifier:
                keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6d:84:f2:c5:b8:76:15:e2:be:e9:21:63:d8:39:2c:4c:c7:
         16:c3:76:86:da:c5:c9:9d:2e:e7:ab:d5:4a:2c:51:5a:1f:cd:
         32:73:6a:69:26:8c:be:e4:89:b2:32:10:f2:a1:59:4d:31:98:
         25:db:3e:7a:ea:bf:41:86:76:74:71:ae:dc:b4:4c:1b:12:fe:
         a5:dc:60:99:a3:78:4e:b6:73:73:c3:f2:35:c1:66:d3:6a:a0:
         a2:84:46:82:ef:12:b1:86:a7:4c:55:43:17:59:01:a7:ac:c7:
         9c:54:73:e6:65:1e:48:4f:8e:75:9d:ab:34:30:b9:29:92:22:
         01:9b:a6:10:37:04:11:a6:6a:00:35:fc:ce:bd:00:9e:a1:29:
         6c:99:69:2b:1a:6f:0f:12:97:86:26:20:a2:1f:e0:1f:f3:1f:
         76:17:8b:29:7b:5f:94:c0:5c:80:c3:6d:b9:99:f7:bd:48:01:
         c2:1b:21:50:da:6a:01:70:c5:5e:42:1f:ca:7f:f1:18:14:f9:
         ae:9f:9a:37:7a:36:3c:b3:2a:1d:17:de:e3:fe:da:cb:0f:cd:
         c7:f5:20:e4:47:ec:37:93:0e:e3:d4:6c:1b:33:56:f9:b0:e1:
         2f:a1:d2:22:b6:7a:28:d3:c9:00:71:65:42:59:a0:5e:aa:fc:
         c8:59:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:27 2026 by rpki-client