Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
File:                     D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft (raw, json)
Hash identifier:          UyWV5yoWFJVhAP0z9UDUUTtEIt9aptOIqXU7GSTN+OA=
Subject key identifier:   D5:65:C6:67:5F:11:FD:E6:E7:7D:AF:2D:32:0B:B0:7D:70:45:FB:FA
Authority key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2
Certificate issuer:       /CN=A918306F/serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
Manifest number:          65
Signing time:             Mon 01 Jun 2026 08:44:16 +0000
Manifest this update:     Mon 01 Jun 2026 08:44:16 +0000
Manifest next update:     Mon 08 Jun 2026 08:44:16 +0000
Files and hashes:         1: D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl (hash: TK7RiNSeOoSLC31uGrzD26bfWLOykxJf8T02iSSN7QY=)
                          2: 970D44E2C54F11F0A154DD09C4F9AE02.roa (hash: HyMt0B+pOhVMNXH2gY84/5yQW/j0O4deZoiKvpL1EJk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl
                          rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
        Validity
            Not Before: Jun  1 08:44:16 2026 GMT
            Not After : Jun  8 08:44:16 2026 GMT
        Subject: CN=6a1d4660-4770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:b8:a1:f7:20:18:aa:df:a2:7c:1c:28:e3:
                    33:b7:17:a4:21:a9:fc:64:5b:5e:e0:53:f2:bb:32:
                    a6:0e:59:de:d7:d6:59:d8:eb:37:e5:81:8d:37:17:
                    c2:d7:66:43:24:2c:16:60:47:1a:db:24:8b:a9:56:
                    da:8b:00:a6:4c:61:8e:28:95:5b:6e:38:fb:2a:14:
                    99:30:57:58:c3:c0:50:40:37:01:87:2d:5f:59:02:
                    0e:f7:54:10:88:bf:c3:24:72:e3:da:df:22:c8:45:
                    9d:df:03:b2:55:2c:59:54:49:0e:2b:d8:04:b6:fd:
                    42:70:2d:4c:f8:c0:a0:3c:45:24:61:6a:cb:ba:93:
                    f7:b8:e8:0f:eb:bb:14:e0:44:a3:17:37:c5:23:f2:
                    44:ef:ac:b2:ed:e9:61:f8:5d:5f:dd:3d:83:f2:ff:
                    3d:d8:cc:81:8f:ae:ed:29:5e:47:7d:e8:38:12:b9:
                    3c:cc:b3:81:41:4f:04:ac:39:9e:4a:2b:e1:e1:ec:
                    0a:5b:48:70:86:22:1a:aa:10:3a:fe:1c:21:ed:b5:
                    f6:45:32:f8:39:ab:8d:4f:8e:1e:04:aa:bc:5f:c9:
                    13:46:6c:3f:d6:98:4c:6b:0c:1f:2a:76:fc:2f:a7:
                    c8:0f:a9:fd:c1:12:79:10:a0:18:87:ee:ab:34:69:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:65:C6:67:5F:11:FD:E6:E7:7D:AF:2D:32:0B:B0:7D:70:45:FB:FA
            X509v3 Authority Key Identifier:
                keyid:0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c6:28:3b:4f:05:3a:a6:29:70:dd:74:06:fd:08:c6:39:c4:
         4e:7d:a8:59:1d:8c:9e:af:28:0f:75:af:c1:c4:ec:3b:90:6e:
         c4:4a:7c:aa:b6:58:23:6a:2c:71:34:5b:53:e1:dc:92:79:23:
         14:06:d6:88:23:1a:70:35:3b:c2:a9:82:0b:63:36:d6:25:6f:
         88:a4:9f:41:e0:ed:c5:a1:45:dc:81:5a:7d:e9:2d:0c:6b:da:
         0a:c2:80:6b:36:da:2c:56:8c:bc:aa:1f:99:5c:82:cb:c9:a9:
         5b:b9:0c:7f:c7:50:09:65:c6:92:be:21:90:e5:cc:86:9f:ff:
         4f:58:0a:bf:63:ad:3f:eb:55:dd:59:eb:2e:ce:9d:af:98:1c:
         8a:42:ea:b3:59:71:1e:13:3e:b8:36:42:55:dc:af:a4:ca:87:
         a4:e9:d9:a3:cc:d5:86:e8:8e:f8:49:ed:9c:55:00:59:e6:5f:
         46:bf:54:c4:83:05:be:c3:47:e6:a6:ef:92:78:3e:63:7d:f3:
         7e:20:e6:68:b7:ca:30:17:02:e7:69:3d:c8:47:f8:7f:f8:45:
         e0:f5:8c:e7:2b:d2:9d:ce:b7:8f:74:f7:b1:5b:c7:ef:8e:a8:
         fe:c9:26:75:34:23:a7:39:b6:de:1b:84:8f:64:0e:c4:22:05:
         6f:27:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:34:15 2026 by rpki-client