Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
File:                     cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json)
Hash identifier:          LTqMCrJ+oELPnJq5Gz/haT1hr1AGrKAF+hIQegMrdx0=
Subject key identifier:   24:97:0C:70:6A:E8:CC:90:7C:25:CC:95:6C:63:55:FA:6A:8A:34:F5
Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA
Certificate issuer:       /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
Certificate serial:       06FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
Manifest number:          06FB
Signing time:             Mon 22 Jun 2026 22:09:46 +0000
Manifest this update:     Mon 22 Jun 2026 22:09:46 +0000
Manifest next update:     Mon 29 Jun 2026 22:09:46 +0000
Files and hashes:         1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: tmCMLk5jmhcMmV3LkbbWXGXZcmkDHnvpQSBf3S69m7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl
                          rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 22:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918387F, serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
        Validity
            Not Before: Jun 22 22:09:46 2026 GMT
            Not After : Jun 29 22:09:46 2026 GMT
        Subject: CN=6a39b2aa-09fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:a5:9a:7f:91:31:ca:ee:e3:58:4b:c8:b6:
                    9e:4a:1d:d6:eb:a2:0f:5b:0b:6d:48:d6:8b:23:ab:
                    70:c6:6a:85:1c:ee:e4:65:60:20:3a:fe:de:86:6c:
                    11:a2:f6:39:11:ff:6b:fc:f6:22:ad:d4:82:44:35:
                    89:d6:4b:a1:f3:8b:d5:e4:64:d5:a7:66:4e:3a:b9:
                    2d:a2:a7:77:29:08:39:87:4e:b7:b6:e7:98:8d:c9:
                    30:09:39:dc:f7:46:f0:c3:a0:bc:28:08:cc:0b:89:
                    bb:a5:31:44:c3:cd:60:fa:54:22:85:1b:4e:c1:ac:
                    84:39:dc:70:51:ee:ba:3a:8b:b9:ec:88:94:e5:3e:
                    b2:d6:c1:4f:af:31:0e:a9:14:1a:6b:c6:38:50:b1:
                    2d:34:cf:2a:74:38:d0:ed:eb:ed:5d:d2:5c:a6:10:
                    a3:1f:a1:92:6b:6d:d4:ba:15:c4:fd:e5:0e:1f:bc:
                    bb:10:d0:9b:54:ee:09:e5:d5:31:51:f6:d1:2f:79:
                    51:32:77:44:f8:c5:d3:e5:21:08:15:7f:25:ef:7e:
                    e4:43:b0:6c:5e:c7:90:4e:c1:07:d0:9e:2d:bb:ff:
                    53:c4:24:90:78:07:d8:37:46:97:9c:15:df:52:24:
                    4f:e5:3a:5a:19:30:be:32:37:e5:e4:bb:95:6e:81:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:97:0C:70:6A:E8:CC:90:7C:25:CC:95:6C:63:55:FA:6A:8A:34:F5
            X509v3 Authority Key Identifier:
                keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d9:41:91:0b:52:3d:b1:b0:14:56:56:5a:ec:25:dc:43:3a:
         f5:f5:9c:86:89:c5:de:97:61:a0:91:59:bf:9e:45:c5:66:ed:
         b3:fc:14:52:ab:75:a5:bb:c3:ea:f3:4c:e8:87:67:77:97:69:
         b6:8d:9a:9d:07:7c:55:4f:e4:86:ce:eb:d8:d9:65:7a:33:b4:
         38:db:04:3c:2b:d3:4b:c7:3f:e4:95:57:a5:e3:98:52:cd:12:
         e5:e4:c7:7f:c0:0b:da:33:1d:0e:2c:b5:8a:7d:4c:53:bd:90:
         6e:b0:f2:8b:ec:5d:cc:1b:5c:ed:8b:c6:4b:c9:29:50:30:a4:
         03:db:37:3f:39:4c:3a:c0:c0:ea:a3:98:dc:f0:31:cd:4c:d7:
         5a:30:50:5e:bc:4d:56:ea:2e:61:f5:e1:fe:fa:eb:4f:e6:57:
         42:1c:39:6b:db:ef:cf:65:34:31:5b:02:29:86:0d:f5:1f:3f:
         98:a4:82:60:e5:20:f3:b8:25:65:44:b6:fd:bc:06:50:f6:6a:
         4c:72:2d:2d:e4:e1:e2:8c:9b:3e:14:ad:e6:92:0e:ae:8b:5f:
         65:01:50:58:5b:e1:62:aa:a0:f9:f6:7b:38:14:eb:94:13:15:
         3d:16:5d:f3:ce:e5:51:b7:6f:8d:d8:a2:9f:e9:e9:12:07:4f:
         28:6a:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:16:11 2026 by rpki-client