Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
File:                     G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json)
Hash identifier:          OiVlwq0Om0yPIpLHf+x/3dsqVgysRI7FZSTck9nsUBs=
Subject key identifier:   E6:61:0B:42:C5:83:CF:15:95:1D:A6:2B:B9:AD:D1:A4:0A:6F:84:AC
Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
Certificate issuer:       /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
Manifest number:          024E
Signing time:             Thu 04 Jun 2026 22:59:04 +0000
Manifest this update:     Thu 04 Jun 2026 22:59:04 +0000
Manifest next update:     Thu 11 Jun 2026 22:59:04 +0000
Files and hashes:         1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: qunp0omgqseBd34ekdIBIYs0h/iaqm23Xh22/+YrTug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 22:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
        Validity
            Not Before: Jun  4 22:59:04 2026 GMT
            Not After : Jun 11 22:59:04 2026 GMT
        Subject: CN=6a220338-a73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:88:78:73:2e:27:76:30:6f:3c:c2:57:36:
                    c2:a0:96:2f:05:38:bc:a4:b7:3c:06:b3:d2:2b:16:
                    8c:3b:27:a0:46:83:3e:09:03:59:02:39:93:d1:bc:
                    2d:d4:2c:2a:ed:49:82:4b:69:95:c7:e8:23:50:36:
                    f4:74:10:03:5f:71:1b:62:e8:da:b5:a2:b4:0e:05:
                    b1:2b:3e:03:6a:58:03:a3:06:25:e8:1a:30:1b:90:
                    5f:88:80:72:d2:95:1b:aa:0d:5c:16:5e:be:9e:ed:
                    1b:ba:0f:97:0c:0e:36:bd:53:3f:ba:20:25:20:23:
                    eb:45:28:ab:bd:47:7d:7b:0c:7d:fb:dd:46:e5:db:
                    52:94:2c:7f:09:68:76:ab:8c:96:9d:4c:26:7b:18:
                    84:c3:ef:4d:53:60:97:93:68:86:83:c0:9d:c6:72:
                    66:93:09:e7:01:5c:1b:27:b0:49:78:56:e0:1f:6a:
                    71:05:4c:81:29:c0:62:82:24:0c:71:11:1a:b2:5c:
                    ca:e7:da:62:2d:df:cc:33:3c:e7:64:50:3e:9a:5e:
                    47:c7:24:03:df:99:67:a4:8a:4f:68:a5:e9:16:67:
                    e7:9e:25:a0:3b:15:3a:e1:08:3b:7b:f1:9d:ef:bf:
                    29:82:be:21:1b:24:7e:7b:b4:95:8b:ab:66:36:42:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:61:0B:42:C5:83:CF:15:95:1D:A6:2B:B9:AD:D1:A4:0A:6F:84:AC
            X509v3 Authority Key Identifier:
                keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c3:a9:9f:b5:5a:68:85:5b:e5:94:39:2f:dd:9c:0b:f0:81:
         93:ec:78:6d:0c:33:08:4b:a7:1e:57:5d:36:c0:e7:6c:bd:02:
         e6:67:e5:b2:06:0e:91:fc:3e:12:16:dd:9e:6b:d2:66:81:d3:
         e3:4a:0d:90:ff:f1:98:da:aa:bd:de:47:da:8f:67:d4:82:45:
         05:5a:93:06:90:0b:ca:ee:53:0d:e4:64:15:f2:46:ef:18:08:
         7d:e9:d2:d1:25:4c:75:7c:19:47:98:03:f3:ac:47:b8:54:31:
         37:f2:c2:30:1d:bf:58:ac:20:dd:34:08:1c:df:84:8c:3b:ef:
         20:6d:1a:b0:65:5c:bc:78:55:55:07:99:fb:4b:6c:af:64:1e:
         4d:e1:fb:1f:6c:10:c4:55:97:55:cd:71:35:d8:1d:08:4e:00:
         23:ed:d2:06:92:e9:23:c5:57:3e:95:aa:a7:17:25:3a:f3:e9:
         9b:dc:af:09:41:90:49:8f:ce:01:f8:b7:27:3a:fd:c9:87:dc:
         2e:e8:84:03:47:c4:59:f3:33:95:2e:e5:50:6d:52:93:87:0e:
         5d:9c:37:f0:3e:1d:0f:2d:f8:51:5d:44:ef:fc:95:34:53:d8:
         81:59:0b:b1:6e:b7:0c:f2:a3:cb:c1:12:c6:3d:dc:57:db:36:
         d1:c8:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:56:51 2026 by rpki-client