Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
File:                     48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json)
Hash identifier:          WRTYTgT1CoVz7PuW/EfmDUzrQ1zqKwdyR/H0a2gOvRI=
Subject key identifier:   B3:3B:E3:5D:03:20:75:83:BE:2E:D1:84:63:90:10:BA:6D:59:D4:AC
Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Certificate issuer:       /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Certificate serial:       086A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
Manifest number:          086A
Signing time:             Sun 31 May 2026 21:21:54 +0000
Manifest this update:     Sun 31 May 2026 21:21:54 +0000
Manifest next update:     Sun 07 Jun 2026 21:21:54 +0000
Files and hashes:         1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: APF1sG0ozce/95xkO0dzrM7xSk3+gjidu6eNDkV0DW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 21:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154 (0x86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
        Validity
            Not Before: May 31 21:21:54 2026 GMT
            Not After : Jun  7 21:21:54 2026 GMT
        Subject: CN=6a1ca672-d732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:fd:61:a8:e2:a9:47:5e:42:fa:9d:06:a8:
                    8d:60:82:7e:e3:e2:cf:00:2f:2d:05:c7:fa:ee:d6:
                    dc:ce:88:30:16:83:74:60:6a:17:5e:41:ef:a2:d1:
                    84:a4:28:7d:27:d1:ef:49:db:f5:8f:1c:b4:64:9b:
                    71:b3:1f:f8:bb:7b:fc:44:34:45:71:52:ad:75:1d:
                    f3:0d:a8:46:1a:b0:1c:b4:20:10:40:a0:ba:12:45:
                    43:9c:6b:19:27:3a:63:0c:e8:e3:7b:78:b1:90:8a:
                    46:64:a6:60:3e:5e:0a:d2:48:32:cf:e7:a3:7e:96:
                    78:a4:09:a9:ca:d0:70:a2:4f:21:66:7b:56:fc:b5:
                    d5:fb:55:5b:fa:b3:ca:1d:03:71:a9:b1:04:fc:cd:
                    6c:2d:90:15:90:0e:4d:2b:d3:33:df:1e:d1:25:66:
                    e0:38:35:45:0a:33:66:15:9f:34:4b:f0:f3:4d:02:
                    44:25:b0:d6:a8:88:bb:ea:d7:e2:7d:5d:6b:f3:9c:
                    e0:f7:bc:57:bf:fd:4d:7e:ab:72:8b:8d:8d:dd:90:
                    73:15:1a:8b:cd:b9:fe:5c:84:d0:2f:5a:bf:e5:62:
                    1c:cb:d4:1d:45:55:ee:ae:0a:17:f8:f6:db:df:c7:
                    0c:67:d6:bb:98:c3:8c:11:de:02:bc:a2:2f:b3:fe:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3B:E3:5D:03:20:75:83:BE:2E:D1:84:63:90:10:BA:6D:59:D4:AC
            X509v3 Authority Key Identifier:
                keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:2b:55:26:03:48:94:3a:d5:a4:b2:6e:42:41:73:a4:39:
         be:94:fb:c1:2f:09:cb:7b:33:81:9e:89:aa:60:5a:ea:f1:bf:
         09:bb:b0:0b:57:dc:4d:15:0f:a0:75:2a:24:c9:c0:27:07:7c:
         dd:2d:c2:e3:a7:a2:6d:af:b1:9b:96:e3:87:f5:30:99:e9:1e:
         28:87:57:c5:ce:9b:37:e2:fd:d9:2b:98:b8:da:d1:bd:fa:13:
         2e:9e:1d:80:9f:0d:14:7d:4f:a8:ed:64:38:f4:2a:ba:cb:15:
         2a:7f:f9:b1:5d:ed:9b:d2:70:68:88:31:d0:12:aa:cb:f5:bd:
         d8:91:4c:f9:35:e3:3c:62:83:72:6a:6b:53:ba:68:92:26:2b:
         44:0b:d6:af:5d:75:ab:03:69:29:1b:26:b4:ec:ce:6f:19:bb:
         f8:72:fd:fb:2c:8e:30:d2:7e:a9:63:f8:ad:d7:a1:46:a0:99:
         dd:e5:81:e2:af:ea:e6:c5:82:bf:6c:d7:fd:16:f7:08:a0:d9:
         f4:d0:b0:7c:78:39:2e:71:6f:13:d4:18:4e:d2:bb:ca:a5:22:
         98:70:91:e2:3c:36:2f:f3:1e:5d:3a:d5:17:95:75:5a:d4:10:
         58:e8:16:7b:d8:41:4d:9f:5f:62:a7:f0:36:46:42:05:1d:36:
         08:2e:81:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:57 2026 by rpki-client