Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
File:                     kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json)
Hash identifier:          8qI+a7b/15QF44seNDwDi6Zm5G9soF0lhTz5tNT4BCQ=
Subject key identifier:   A8:D0:58:5A:CE:8F:AB:3B:16:D8:01:F7:C0:03:A9:7B:F1:B1:3F:EB
Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1
Certificate issuer:       /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
Certificate serial:       0615
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
Manifest number:          0615
Signing time:             Tue 02 Jun 2026 14:18:06 +0000
Manifest this update:     Tue 02 Jun 2026 14:18:06 +0000
Manifest next update:     Tue 09 Jun 2026 14:18:06 +0000
Files and hashes:         1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: OFLdg2C3ku/SeD/fE0CxVJ4jvExH5fggDaiArGjlu+A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl
                          rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 14:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
        Validity
            Not Before: Jun  2 14:18:06 2026 GMT
            Not After : Jun  9 14:18:06 2026 GMT
        Subject: CN=6a1ee61e-9fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:8d:1d:38:07:a4:24:36:55:00:be:e2:4f:
                    59:0b:cd:ae:bd:53:76:4a:51:45:22:c1:b0:07:4d:
                    b7:18:0f:89:e3:5f:fc:e6:b4:49:ea:49:93:1d:e4:
                    d1:d1:2c:46:46:73:c4:83:2c:c8:58:af:e4:00:b2:
                    24:cf:36:35:7d:7f:c3:e6:2c:73:2c:e6:d5:c7:50:
                    89:1b:6b:70:bf:d4:6c:15:e2:b7:16:fe:f4:05:7a:
                    65:10:31:7d:f0:13:25:1e:38:04:0e:0b:53:d7:c2:
                    57:2c:1d:d5:ce:7c:f5:1d:bc:53:65:16:18:1b:20:
                    78:6b:99:9c:3b:f1:19:68:5d:30:0f:24:82:12:0d:
                    3f:d1:8c:87:97:5e:62:51:7e:6a:3e:5b:22:45:fc:
                    13:f9:71:c5:a9:c1:a7:93:ff:f7:91:7f:0b:58:a2:
                    f5:15:32:a1:fc:c3:38:c6:47:09:fa:1c:dd:55:4e:
                    4e:e7:ab:b6:e3:24:ca:0f:f8:db:95:0f:61:15:e5:
                    a7:bc:e1:34:4a:80:0f:ff:3f:ca:0c:fa:ae:52:8c:
                    56:83:16:24:7a:03:0d:cc:87:96:74:04:54:6c:f5:
                    76:81:3a:f3:97:5b:8b:f7:93:a7:3b:4e:a7:54:26:
                    80:bb:df:d8:76:83:39:9d:ea:0c:7b:c1:69:c8:85:
                    0e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D0:58:5A:CE:8F:AB:3B:16:D8:01:F7:C0:03:A9:7B:F1:B1:3F:EB
            X509v3 Authority Key Identifier:
                keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:75:15:74:da:05:f8:62:06:ba:87:91:07:d4:43:45:d9:9a:
         4c:ca:b4:92:45:08:84:dc:74:27:98:b1:ea:ca:c5:eb:3c:d2:
         f8:d2:7b:91:e3:c9:14:c7:f7:64:df:c2:1a:c7:dc:99:28:9a:
         89:e0:db:59:f9:9c:0b:bc:4b:12:9e:ff:62:0c:9f:26:fd:ec:
         2a:11:6e:16:8b:a0:50:4c:9c:d1:4d:59:40:fc:8e:e7:20:2e:
         88:de:b2:5f:1f:ec:43:e9:24:3a:c4:ca:f9:03:5c:03:c3:ef:
         62:cf:27:3a:74:76:a1:73:05:7f:6c:0c:89:1f:50:bc:8a:c5:
         14:75:e3:aa:81:c8:e4:92:f4:cc:c9:7d:2d:80:91:cd:e2:c7:
         4c:f8:fd:d7:87:3f:62:3f:64:9c:20:aa:d3:86:9d:ee:41:f3:
         0a:da:fe:6c:7b:85:40:1b:cc:df:1f:aa:dc:19:68:f0:37:f5:
         1a:f1:36:94:66:6a:26:8e:47:3b:8e:33:44:03:cc:bc:9a:d0:
         bf:c7:2c:2c:ef:ef:e9:a3:72:c6:48:d9:ce:82:8a:03:36:e6:
         b0:31:73:35:29:48:95:61:da:1c:40:51:79:e6:8b:ab:92:87:
         2a:fa:c8:43:13:4b:22:37:5c:2f:64:69:54:0b:85:27:94:48:
         e5:fe:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:25 2026 by rpki-client