Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
File:                     4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json)
Hash identifier:          ukJ+zwwcCRo/PMwHmdUQLBaW8oG/aeatYJHSt3XN0h8=
Subject key identifier:   CA:81:F0:59:2E:F8:CA:19:F9:72:AA:C1:C3:6A:AF:A2:4D:B1:DB:55
Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
Certificate issuer:       /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Certificate serial:       3552
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
Manifest number:          3551
Signing time:             Mon 22 Jun 2026 14:27:34 +0000
Manifest this update:     Mon 22 Jun 2026 14:27:34 +0000
Manifest next update:     Mon 29 Jun 2026 14:27:34 +0000
Files and hashes:         1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: TfT9muus/EdOOk+ntkpXN4xeCxf7rGbE2OOAifF39zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
                          rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 14:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13650 (0x3552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
        Validity
            Not Before: Jun 22 14:27:34 2026 GMT
            Not After : Jun 29 14:27:34 2026 GMT
        Subject: CN=6a394656-d71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:48:7a:e1:99:42:31:81:19:1d:4d:1d:46:
                    c2:41:14:00:f5:90:3d:5b:a3:d0:f2:03:7e:cd:da:
                    ab:02:23:89:a2:fb:f9:76:13:69:94:05:33:4a:bd:
                    7e:e0:12:3a:af:23:fb:3b:19:3a:54:ea:6b:00:30:
                    bb:08:bd:19:9a:59:1b:20:b0:ad:03:12:4f:d5:d8:
                    f6:3a:39:a2:0a:33:83:e2:87:b9:c4:d6:7d:68:90:
                    12:d0:8d:d5:2e:a5:70:cb:c3:8b:d8:68:1e:ab:db:
                    b0:34:62:c6:43:3d:ed:54:b2:67:27:c1:98:37:b7:
                    79:37:28:95:53:18:fd:01:25:09:79:42:60:47:92:
                    3b:e9:f8:aa:54:7c:88:9d:67:cf:39:39:1f:d3:b9:
                    95:6b:2f:08:6f:d8:4f:c4:cf:86:e0:11:e1:c4:99:
                    c0:ab:d7:25:5a:c0:74:40:f0:30:2d:80:15:50:38:
                    56:b7:32:d5:7f:a8:d4:f4:b5:e1:4b:bd:61:84:be:
                    d4:85:f1:20:80:a1:74:55:f2:58:f1:17:3c:6a:38:
                    51:2f:d8:c3:ae:c8:b4:08:e2:c5:30:a1:fd:60:aa:
                    ce:d8:ac:90:3b:61:de:eb:11:02:48:fc:28:6d:ff:
                    34:08:e5:ec:97:33:6c:b3:25:ff:bb:8d:3e:31:a0:
                    a7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:81:F0:59:2E:F8:CA:19:F9:72:AA:C1:C3:6A:AF:A2:4D:B1:DB:55
            X509v3 Authority Key Identifier:
                keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:03:3f:45:f4:fa:13:18:32:6d:ca:82:77:b8:a4:82:c9:46:
         c3:15:3f:8d:29:94:34:2b:0a:eb:01:8f:b0:d9:23:f7:c3:1c:
         75:6c:75:e3:46:33:59:29:9c:67:ff:c5:e0:ac:cd:5d:14:aa:
         60:c7:b5:72:24:86:14:96:7c:6d:1f:ed:f3:28:6c:e6:6c:2a:
         27:e1:e8:f5:bb:d0:0e:3b:86:95:33:9b:a4:2c:38:a9:21:4b:
         09:5f:69:50:91:37:3a:2c:e6:9f:97:96:df:e6:ef:43:de:76:
         dc:aa:44:1f:fa:21:42:fc:dd:8c:e3:48:46:93:6e:af:89:f2:
         39:0b:ef:f0:34:5e:a6:c9:2b:2f:b0:1a:8a:a8:45:7e:c3:01:
         63:16:f2:7b:77:8f:f0:64:d5:ff:af:53:9a:a4:01:9c:ba:cf:
         9a:6e:37:1c:7b:44:53:8b:ab:a1:90:82:7a:de:15:c3:5d:b7:
         dc:a4:6e:4c:f5:1a:12:99:e3:e6:e7:2a:42:ef:0f:c7:b7:64:
         69:b8:7a:49:74:a3:ad:7f:49:ab:31:be:d9:15:4b:75:44:b4:
         35:8f:8d:21:23:27:ab:6e:20:b4:fd:7b:9c:07:61:aa:15:8a:
         82:66:91:4f:16:de:bf:c5:e4:51:ec:75:c5:64:97:18:29:0f:
         8c:bb:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:30 2026 by rpki-client