Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
File:                     tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json)
Hash identifier:          zhrOnTwmRH4Ac1FVRtP8FGMFH3QYus5ctoZAeTYCY/U=
Subject key identifier:   F0:EF:EA:52:BB:5C:4A:95:58:40:D9:60:15:8B:BA:D8:F9:B2:66:15
Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Certificate issuer:       /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Certificate serial:       0FCE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
Manifest number:          2DF3
Signing time:             Mon 22 Jun 2026 16:42:26 +0000
Manifest this update:     Mon 22 Jun 2026 16:42:26 +0000
Manifest next update:     Mon 29 Jun 2026 16:42:26 +0000
Files and hashes:         1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: fE4LqBmzPjSS/peew+4FSR36/OSMDXwGrD7+LmcIZJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
                          rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 16:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4046 (0xfce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658EF, serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
        Validity
            Not Before: Jun 22 16:42:26 2026 GMT
            Not After : Jun 29 16:42:26 2026 GMT
        Subject: CN=6a3965f2-7066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:3d:13:77:7b:5f:05:cb:f2:6f:50:15:35:
                    2d:9d:b5:ce:28:c2:e9:60:c0:e5:50:c3:03:03:04:
                    f9:fb:be:96:84:64:09:c2:6f:bf:2b:e5:9d:15:80:
                    e9:1c:d4:f2:2b:87:31:10:cb:c0:2d:f0:73:e1:d8:
                    d2:94:68:54:5b:00:73:55:85:0b:3f:c4:5c:df:c6:
                    be:08:2b:38:af:f7:29:67:cb:0d:02:88:8c:c1:c0:
                    31:83:d0:01:1c:f3:57:5f:4a:f9:7f:39:a0:d3:68:
                    49:97:da:7d:f7:5d:b0:e9:e7:24:07:de:f9:25:e6:
                    72:0c:77:bf:78:6a:72:86:f4:e8:62:f9:5c:9e:0e:
                    37:ce:5a:6f:73:86:14:13:7a:37:fd:99:44:52:5f:
                    e7:81:d0:05:34:1c:60:92:64:a3:40:41:c5:ae:05:
                    ac:e8:23:93:dc:6c:ee:4d:5b:8a:00:3c:08:e8:82:
                    13:89:52:42:ac:c0:d8:cd:38:db:30:94:7c:a7:f5:
                    2c:04:26:6c:2f:98:65:a0:23:7f:5d:fd:cd:0c:e2:
                    e3:d3:70:72:4c:ab:a3:62:48:9b:77:9b:f6:3b:b8:
                    75:35:73:7f:09:90:94:29:eb:ce:e4:51:04:96:06:
                    cb:94:c9:42:c0:7f:e8:12:4b:8a:00:54:08:2c:a8:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EF:EA:52:BB:5C:4A:95:58:40:D9:60:15:8B:BA:D8:F9:B2:66:15
            X509v3 Authority Key Identifier:
                keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:6c:e8:b0:03:1a:f6:97:b3:23:49:2f:99:a0:b2:b6:4d:b7:
         98:3a:9e:78:c2:3c:cb:8d:97:38:82:f5:56:ed:1e:2d:14:37:
         da:12:84:12:f5:af:bd:70:38:ca:8e:e6:b0:c7:24:b3:b0:29:
         11:9c:a1:4b:09:5a:d7:f8:6f:d3:3c:0b:45:b8:99:6d:3d:44:
         59:d5:8b:b9:b2:73:6a:43:9f:b8:d4:c7:53:89:58:c4:45:91:
         02:af:34:33:0b:b3:db:61:b8:ce:18:e2:a7:f7:b2:d0:67:4e:
         16:59:3b:26:39:76:25:ca:b8:86:f4:44:30:19:e3:e3:95:95:
         7d:74:23:95:0b:a5:6c:e0:e0:50:d8:c3:63:07:76:08:97:50:
         46:28:f2:91:98:0d:36:ac:ff:6a:82:ae:e4:47:06:f8:a3:f3:
         e6:df:a1:1f:73:22:5f:db:8b:46:d5:3f:96:85:51:96:fb:43:
         37:a4:7b:fd:ba:e6:6f:13:e4:12:70:bc:ae:21:b1:67:19:49:
         b7:3d:71:62:9a:be:3e:86:94:9d:57:44:a2:e7:81:2a:39:53:
         59:5b:f2:17:a3:ad:96:65:10:5c:e0:fd:b5:0c:3c:c6:f7:a9:
         6a:bb:25:36:bd:8b:89:a2:b2:a1:89:20:ca:d0:a0:72:e5:86:
         56:fd:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:18 2026 by rpki-client