Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
File:                     148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json)
Hash identifier:          FTdmCCp5fGhWPOPoEEEMdViYr0oAdK29vHgeo68Lbec=
Subject key identifier:   6A:82:B7:67:B7:49:8B:0D:7A:7B:19:49:CD:CB:2A:16:A4:78:D1:10
Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62
Certificate issuer:       /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
Manifest number:          018D
Signing time:             Tue 23 Jun 2026 04:39:05 +0000
Manifest this update:     Tue 23 Jun 2026 04:39:04 +0000
Manifest next update:     Tue 30 Jun 2026 04:39:04 +0000
Files and hashes:         1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: gH5m6ylXfuTzjTWFoP+9Yjcq2UMqiaXz1mdGwtFvTw4=)
                          2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: i7+K6StkhEeeezuH07nFABJ4+D7tgTloR83xwjCdBu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl
                          rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 04:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
        Validity
            Not Before: Jun 23 04:39:04 2026 GMT
            Not After : Jun 30 04:39:04 2026 GMT
        Subject: CN=6a3a0de9-8c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:dc:37:63:1a:fb:ae:de:55:c7:47:53:ff:
                    25:43:c8:93:b3:9a:cc:f6:28:7a:56:dd:32:6d:8b:
                    2a:0d:ef:bd:74:2e:e0:9a:6a:9b:7a:28:35:06:e6:
                    85:db:ff:16:81:22:43:74:dd:85:7b:98:f7:f4:18:
                    66:5d:4e:47:6c:2a:cf:ca:a1:85:44:aa:7f:8b:0a:
                    f8:f5:9d:a9:5a:85:9f:cb:b0:7a:e9:f8:e9:38:f5:
                    dd:f0:28:b1:fd:e5:78:b0:3d:01:21:9d:35:a6:fd:
                    2b:7b:3b:61:a8:a0:7b:b7:35:27:ab:9d:39:0f:80:
                    4c:5b:ee:7b:d7:d7:96:0b:d4:9a:00:61:bd:90:3b:
                    06:15:00:af:e8:67:a8:ff:ae:b7:bb:8b:81:4e:62:
                    05:86:97:36:6c:83:f1:65:25:3b:c5:5e:ef:1e:dd:
                    25:2f:c0:ec:bb:16:29:11:9b:65:02:ea:88:8e:f3:
                    e6:4d:a0:78:8f:25:e6:ac:3d:7b:32:07:ae:b9:f9:
                    f0:70:8d:c6:0e:a3:81:98:79:1f:ec:2a:e2:06:b5:
                    34:a9:aa:c3:47:5c:f6:af:e8:6f:ff:87:a8:36:eb:
                    95:ea:c6:df:9a:f2:b8:8d:f0:f0:c5:d5:53:7a:db:
                    45:4d:83:e5:c8:32:cb:24:c0:66:da:c1:59:45:b5:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:82:B7:67:B7:49:8B:0D:7A:7B:19:49:CD:CB:2A:16:A4:78:D1:10
            X509v3 Authority Key Identifier:
                keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:60:90:1b:75:9d:84:67:2b:15:7a:46:98:5a:e2:09:72:7e:
         2c:15:b3:9c:8e:f0:0f:80:35:e8:e5:c2:95:4c:0d:d9:a5:e3:
         65:24:1c:de:be:d7:fd:f1:8d:05:2c:b9:03:85:5e:dc:bb:56:
         7f:54:11:df:65:ea:b8:01:e7:c5:a7:e8:21:7b:61:7d:42:7f:
         87:0f:6b:83:eb:7e:36:09:8d:2e:90:83:57:ad:3f:55:72:41:
         0e:8b:72:2c:85:3d:1e:83:b9:56:7d:0e:09:3c:a4:90:ed:0e:
         35:eb:41:41:a7:56:32:b7:1f:0b:33:10:4e:d6:25:92:a4:2a:
         7d:ee:49:25:6d:50:b2:c2:4b:c6:26:08:de:7e:87:b9:41:bf:
         13:0b:46:b8:74:f7:a0:fc:a1:be:d8:92:47:69:f8:f2:1f:94:
         bd:b3:72:b2:b7:4a:0e:12:5d:a5:a6:35:07:a2:43:d8:f0:4c:
         58:fa:35:12:76:81:fe:0e:9b:18:36:75:ef:a2:69:a5:f7:09:
         1c:c0:86:b9:ec:81:95:99:65:e1:59:d5:88:9e:d0:62:3f:49:
         12:57:69:57:93:f1:aa:47:c1:ec:3f:b3:23:93:7e:34:8a:29:
         c0:a4:fd:3d:35:08:d9:96:f7:92:1e:8b:54:01:0f:04:7e:99:
         20:d6:90:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:14:54 2026 by rpki-client