Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
File:                     cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json)
Hash identifier:          t9671c4isVHyabXDaPWgxYBAra4fI66+pWF6mDf9x6Y=
Subject key identifier:   6A:B4:80:40:26:3B:32:77:AB:85:CE:76:9F:05:FC:E8:8E:73:BD:E3
Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
Certificate issuer:       /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
Manifest number:          015A
Signing time:             Fri 19 Jun 2026 05:08:44 +0000
Manifest this update:     Fri 19 Jun 2026 05:08:43 +0000
Manifest next update:     Fri 26 Jun 2026 05:08:43 +0000
Files and hashes:         1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: 4te6BSeaI1QTrlyPNwWqijb/c1hASzdJYHnqIUL0Xkc=)
                          2: D93EF164ABF311F0BBF66516C4F9AE02.roa (hash: 2kOeP60myM1mAUly5SCWYSaPMPRSRG8lPF8mhNDgtQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl
                          rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Jun 2026 05:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
        Validity
            Not Before: Jun 19 05:08:43 2026 GMT
            Not After : Jun 26 05:08:43 2026 GMT
        Subject: CN=6a34cedc-91c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:68:e6:20:fd:aa:31:40:85:47:12:61:26:
                    aa:ab:da:fa:93:c3:64:90:42:1c:bb:a0:1d:d7:96:
                    98:bf:7a:a3:05:3f:2c:e4:11:29:cc:56:4c:9c:19:
                    81:cc:dc:94:c4:2c:7d:e9:9d:94:cb:80:b7:b0:b1:
                    39:6d:00:c2:ea:38:3d:25:86:d0:09:eb:3c:d2:cf:
                    84:2b:f6:cc:41:54:5c:ab:e2:6b:84:aa:54:f8:f4:
                    40:ff:19:5d:77:bf:56:8f:9d:01:96:ae:28:99:c1:
                    df:0a:e0:35:d5:5d:f2:29:7a:e7:8b:2d:06:b2:cf:
                    e4:7f:26:24:89:ff:4d:82:2f:e5:4a:08:e1:2c:64:
                    61:1d:10:0f:9e:92:f6:04:2e:10:65:db:67:0d:fb:
                    da:8e:17:42:c3:7f:ce:6d:98:1a:da:a3:85:69:5a:
                    bf:63:45:9b:ce:4f:16:2b:be:f2:84:a0:9f:c5:75:
                    c0:3b:27:67:76:09:75:90:78:c5:bf:94:b4:3d:74:
                    56:8c:0b:6f:5b:af:a1:16:df:a0:03:9c:6d:a3:b8:
                    9a:8b:0c:42:e8:10:f3:6e:f6:65:e4:1d:4b:8a:2c:
                    7e:ef:ae:43:ef:a9:29:4f:7d:02:63:fa:3c:40:e0:
                    9c:bb:4b:fd:09:a4:f8:54:4d:9e:8a:21:5f:10:f2:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B4:80:40:26:3B:32:77:AB:85:CE:76:9F:05:FC:E8:8E:73:BD:E3
            X509v3 Authority Key Identifier:
                keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:49:9c:18:b2:cc:77:06:3a:b7:69:61:e2:27:39:2f:7f:0e:
         84:21:ed:e7:98:2b:3c:0b:46:16:49:8c:01:2b:55:d8:a3:74:
         c7:51:dc:6b:9e:bd:74:30:77:ea:94:24:88:5a:f9:0b:1f:99:
         90:1e:24:0c:1d:81:78:16:43:83:6f:04:0c:dc:58:af:55:6d:
         27:bf:eb:77:9a:6f:f2:a0:59:ef:ba:56:1a:8f:18:87:ba:15:
         43:a3:6c:13:0a:0b:62:72:53:66:a1:99:e9:b2:c3:cb:5e:2f:
         8f:25:04:c5:ef:3a:05:9d:f6:55:ba:92:8e:c1:a2:68:9e:62:
         cf:ff:a6:8a:b1:0c:36:5e:59:cd:eb:45:a5:d0:41:4a:44:4d:
         66:81:af:fe:e8:07:8c:6a:8f:7c:71:35:2a:66:b9:a4:a0:7e:
         6f:24:d7:fd:f9:7d:96:d4:37:77:5d:3c:8a:03:e3:38:9a:80:
         d8:cf:7e:81:3e:5b:b1:fd:d6:74:64:c2:09:95:6a:1a:d2:25:
         88:d9:38:5a:ac:95:0d:76:83:d9:70:50:47:6d:af:4a:8a:ba:
         3b:72:2b:a8:86:76:0f:e3:de:01:93:5d:05:95:6c:3c:9a:25:
         28:83:10:13:e3:e9:d4:9a:d6:da:02:70:d1:cc:ed:ee:43:72:
         af:77:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:21:35 2026 by rpki-client