Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
File:                     h2JAwXQl4PPi4Vds30t527-rVe4.mft (raw, json)
Hash identifier:          r2PSkJ9ALOOvp+Tm20NAu1OSRZw33CNryMK19iLNixA=
Subject key identifier:   C7:66:8F:C9:CE:21:8A:B4:02:78:45:97:3C:F9:33:1E:0F:7B:1D:11
Authority key identifier: 87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE
Certificate issuer:       /CN=A918FE4B/serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE
Certificate serial:       0290
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
Manifest number:          0359
Signing time:             Tue 23 Jun 2026 01:56:15 +0000
Manifest this update:     Tue 23 Jun 2026 01:56:14 +0000
Manifest next update:     Tue 30 Jun 2026 01:56:14 +0000
Files and hashes:         1: h2JAwXQl4PPi4Vds30t527-rVe4.crl (hash: rmOZ28E6j49qGIw/rv4dU3EZKObhCGu6zY83CEBfQSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl
                          rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE4B, serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE
        Validity
            Not Before: Jun 23 01:56:14 2026 GMT
            Not After : Jun 30 01:56:14 2026 GMT
        Subject: CN=6a39e7be-f3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:34:f4:a6:c3:a6:e5:e7:db:48:b3:cb:23:
                    45:73:ee:58:3c:55:4b:27:6b:ce:7a:d3:9b:52:12:
                    f7:db:7c:4c:4f:5d:8f:71:4f:7b:2d:64:c0:cb:07:
                    91:7c:42:e7:3f:eb:a6:b6:da:fa:74:1c:50:67:c0:
                    8a:07:a2:47:2d:35:6f:7a:dd:55:14:ae:80:1a:53:
                    e7:36:19:e1:70:71:fa:c5:5f:8a:33:db:dd:02:1c:
                    03:18:2b:73:c3:ac:00:24:97:c5:be:f0:ea:a0:2e:
                    76:3b:7d:d2:7b:48:23:1e:18:f2:eb:68:d5:89:a5:
                    19:2b:55:d0:c7:79:d8:ba:5e:10:cd:29:0d:7f:5b:
                    34:81:85:bc:6c:33:87:a7:27:12:5b:ab:a9:af:0f:
                    c5:10:ae:61:97:9b:18:c3:38:fb:44:dd:35:45:e8:
                    2c:34:a7:6a:82:8f:fc:2a:ba:0b:1e:86:8d:a1:11:
                    a3:71:f6:85:0c:f7:82:c3:1f:ed:e6:7a:4d:94:ff:
                    50:8f:73:3b:43:cb:6b:08:f7:32:04:b2:2a:ac:0e:
                    b8:75:15:49:4c:23:59:b8:5c:64:52:0c:ad:27:06:
                    20:01:13:e5:92:e9:2f:0c:b6:6c:7c:b1:53:79:a6:
                    0e:ac:e4:6e:62:3d:55:de:30:1b:77:7e:7c:a3:7b:
                    4d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:66:8F:C9:CE:21:8A:B4:02:78:45:97:3C:F9:33:1E:0F:7B:1D:11
            X509v3 Authority Key Identifier:
                keyid:87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:86:c6:05:6d:bd:69:f5:e3:30:35:d6:b0:aa:45:91:1d:f2:
         0b:d9:43:8d:d4:e3:7d:6f:88:e2:c1:93:1d:d8:6f:b1:cf:74:
         77:06:7f:d7:81:cf:27:bb:04:38:fa:b8:75:8e:a2:16:eb:ec:
         7a:df:56:e9:00:d3:36:15:ab:e1:fe:97:ff:3c:13:29:2f:14:
         fb:a3:4b:48:52:9c:66:bf:57:9e:d8:cc:55:85:f1:43:51:45:
         be:be:61:0e:7a:15:0e:4a:2f:4e:cb:fd:09:ef:26:75:6a:01:
         9c:ab:07:b5:37:18:aa:bd:2c:e0:b8:5b:0b:50:e7:de:5a:64:
         3b:86:f2:99:8b:52:82:27:44:8a:34:7e:2a:23:ac:b7:60:e9:
         cd:7c:cd:dd:c3:3b:b4:db:e9:69:79:10:cb:37:94:3b:c3:95:
         e2:9b:24:b1:9f:74:ad:30:ab:b5:e0:10:2b:45:0b:ef:07:bf:
         aa:75:67:b6:30:f3:fd:cd:ba:4d:bb:63:38:ac:b2:19:4f:2f:
         f2:9b:20:66:2c:15:a0:b2:17:3a:fc:b1:12:a1:38:ca:b2:30:
         d7:af:e4:9f:85:59:4a:6c:f4:0c:46:8f:8a:47:9c:2e:75:fb:
         23:69:82:1a:27:35:b5:11:6d:20:7a:a4:59:fb:48:f5:d7:6c:
         3f:29:da:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:39 2026 by rpki-client