Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
File:                     foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json)
Hash identifier:          +f3Yv8skYzhEyb1VF3LOZ8bswAkjgh3zXp1/FVnuaHc=
Subject key identifier:   9B:A6:14:AB:15:A2:A9:C1:13:23:8F:09:89:7F:B2:8E:5A:CF:41:CE
Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09
Certificate issuer:       /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
Certificate serial:       35A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
Manifest number:          493B
Signing time:             Mon 22 Jun 2026 14:21:05 +0000
Manifest this update:     Mon 22 Jun 2026 14:21:05 +0000
Manifest next update:     Mon 29 Jun 2026 14:21:05 +0000
Files and hashes:         1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: nGlAZjMykXSle064sojswC5899akhWVAriCo7qh/BUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 14:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13734 (0x35a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
        Validity
            Not Before: Jun 22 14:21:05 2026 GMT
            Not After : Jun 29 14:21:05 2026 GMT
        Subject: CN=6a3944d1-f4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:36:7b:df:ef:96:6a:1d:0a:73:1e:ec:78:
                    1e:99:86:25:53:f4:e3:51:a2:98:5d:12:2c:3e:41:
                    2e:fc:29:17:d1:35:04:9b:de:0f:76:f5:6c:9f:62:
                    e8:a5:19:c0:8c:20:13:32:5c:fc:26:de:6a:d4:f2:
                    d5:03:3f:ac:35:0d:44:19:28:60:d8:df:2e:c5:fa:
                    e6:ad:b1:53:bf:c0:eb:fd:fa:e6:0f:3f:a4:fe:7d:
                    9c:45:dd:0f:75:63:ee:8c:dd:f8:c4:57:bd:bf:10:
                    a8:df:1d:51:9a:02:2d:e3:ec:fc:20:8e:83:49:2e:
                    53:1a:ac:f0:7d:eb:ef:20:a3:59:d9:38:b7:2f:8e:
                    5c:f7:3b:bc:fb:80:9d:d2:1e:4e:2f:cf:23:a5:20:
                    b0:de:4c:cb:4a:a4:1b:46:a5:e1:7b:f5:ce:c0:80:
                    ed:b4:0d:89:9f:73:99:08:55:59:dc:24:6c:14:1f:
                    0a:ce:a1:83:6b:09:66:55:30:d3:94:8c:41:0f:4e:
                    d4:ff:5b:a2:65:ba:95:82:fd:52:5b:12:b5:5a:40:
                    c7:3c:bf:69:c9:6c:3a:cb:53:24:4e:2e:9d:52:4f:
                    c4:df:9a:28:4a:d0:ce:fb:c3:d1:c2:a8:ca:e8:b3:
                    7b:57:af:be:c1:b2:01:53:f2:f5:19:dc:6c:b1:e5:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A6:14:AB:15:A2:A9:C1:13:23:8F:09:89:7F:B2:8E:5A:CF:41:CE
            X509v3 Authority Key Identifier:
                keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c3:85:07:d7:a4:5c:7e:0e:06:f1:32:d6:f9:cf:e9:f6:24:
         54:8f:31:92:b1:20:6f:89:df:e3:27:e0:42:6a:3c:30:40:bc:
         12:f4:fd:59:bf:7b:9f:a1:b4:97:12:7b:bf:d5:a8:51:e7:e5:
         3e:a6:21:8c:c4:27:0c:41:1d:39:0b:fd:54:a2:07:2d:d1:3b:
         b7:14:45:c8:0b:d8:87:75:2b:b0:4b:c6:c3:35:bc:2a:78:90:
         28:e6:79:98:52:0a:5d:b6:7e:bd:e3:bf:e3:13:c9:46:1a:25:
         02:91:14:1e:18:63:4d:95:5c:a9:6f:69:e9:16:e2:66:6c:c2:
         34:3b:53:fd:a4:61:36:c6:be:89:66:47:8e:e1:02:a8:07:2a:
         77:26:bf:fa:c8:e8:25:14:7b:18:4b:d0:ac:16:8b:ef:85:ed:
         5f:7e:96:89:be:d6:88:28:e8:de:f1:c6:5d:8d:65:bd:3e:cb:
         7d:cd:ec:22:a8:43:90:df:39:7f:35:b2:84:31:f0:28:ae:f3:
         6c:cb:87:79:0d:e4:9d:35:39:a2:ad:4c:d6:f6:02:40:37:77:
         84:94:07:37:a1:74:60:16:6a:3a:95:4b:61:b9:27:fd:72:60:
         83:1f:4d:d8:29:d0:fb:eb:ac:75:c7:da:dc:03:f4:cf:41:3e:
         72:7c:b7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:05 2026 by rpki-client