Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
File:                     L71gGUYMdo4C0QZloGiN0flxhG8.mft (raw, json)
Hash identifier:          6uyBzIR5/wPNnLgklioaa9AMZCUrp8efGTV/J+Nr3go=
Subject key identifier:   CC:10:D5:66:E6:19:39:3F:F0:F0:74:94:AD:43:F7:B1:CC:26:36:BA
Authority key identifier: 2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F
Certificate issuer:       /CN=A9110C8B/serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
Manifest number:          3D
Signing time:             Wed 13 May 2026 08:39:12 +0000
Manifest this update:     Wed 13 May 2026 08:39:12 +0000
Manifest next update:     Wed 20 May 2026 08:39:12 +0000
Files and hashes:         1: L71gGUYMdo4C0QZloGiN0flxhG8.crl (hash: LbFTixEDq0xt6QouoBJPECzME92Xd/3wjJwIlB3vs6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl
                          rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C8B, serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
        Validity
            Not Before: May 13 08:39:12 2026 GMT
            Not After : May 20 08:39:12 2026 GMT
        Subject: CN=6a0438b0-82d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:93:aa:69:13:9e:5e:4f:37:2b:ae:a3:1c:
                    af:ae:9d:44:20:a6:d3:f6:f0:1d:5c:99:8f:87:ed:
                    36:b6:93:29:50:e8:6f:ef:96:f8:e1:1f:13:75:55:
                    b0:16:4e:93:4c:8f:27:0b:82:cc:18:31:ec:96:5f:
                    6c:a7:16:3e:99:42:93:a7:c8:70:65:8c:f5:14:5b:
                    22:79:93:0f:dd:d8:7d:65:08:81:58:ce:e7:ca:98:
                    c0:b6:97:33:8d:56:b0:06:96:c9:17:07:56:3a:60:
                    ff:c2:ae:c1:c6:68:eb:4c:6e:0e:48:5c:4d:56:ae:
                    9c:d8:23:b5:13:79:96:d0:24:0e:ba:a9:41:22:95:
                    9b:c0:b5:15:f5:f0:3e:5f:43:00:a6:4b:94:b2:d5:
                    23:10:cf:d1:3d:62:11:6a:06:f4:32:8d:d5:03:17:
                    4c:0e:28:d5:06:75:14:bf:8a:41:b4:92:af:87:f3:
                    0e:0f:ea:bc:72:72:3c:20:26:13:0b:1c:d3:f3:d1:
                    81:f2:3c:71:2b:34:0d:f3:3f:a5:e8:c9:b0:73:18:
                    13:33:6d:ad:b9:4c:91:30:c5:89:fa:3e:c2:9d:4a:
                    40:2f:fc:33:87:d9:a5:d5:9d:cb:3b:b7:e2:d7:2e:
                    d8:a6:52:04:de:23:6d:a4:2f:be:01:e6:0e:ae:fe:
                    68:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:10:D5:66:E6:19:39:3F:F0:F0:74:94:AD:43:F7:B1:CC:26:36:BA
            X509v3 Authority Key Identifier:
                keyid:2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:dc:6b:92:f4:1a:56:fe:11:69:bf:66:81:d6:d5:ad:91:da:
         5e:37:3d:05:e1:97:b5:b3:70:a1:24:6d:2e:88:9b:19:cf:44:
         c2:6b:b1:7e:e5:61:7d:a0:1d:e2:95:a3:10:24:0f:db:96:c6:
         76:53:a7:43:0a:3a:2c:d9:c0:e6:53:81:ff:c0:0c:13:f9:18:
         d0:90:3a:0c:4b:fb:47:78:23:b0:f7:a5:95:27:58:31:dc:81:
         51:b2:35:fb:15:f0:6a:3b:08:13:f1:0a:83:e6:38:bc:37:1d:
         8b:96:31:c5:20:91:16:23:d3:05:94:e0:bf:42:6a:16:6f:17:
         e1:03:f1:6c:10:cb:d9:88:3d:b2:d9:cb:58:05:d3:7c:42:14:
         09:30:6d:76:09:2a:c1:5a:d5:a5:5e:41:a0:64:fa:f7:7d:86:
         8c:60:b7:4e:94:3c:d1:8b:e5:1c:af:45:b0:e0:0b:67:79:9b:
         ce:76:46:04:74:79:40:46:23:90:e2:be:4b:e2:0d:7f:73:b6:
         64:dd:d2:97:dc:27:f7:6a:c4:45:25:f5:af:47:ff:97:bf:76:
         5f:1c:0e:96:45:55:0f:f1:0f:3b:c6:88:0d:df:62:d0:5e:0d:
         b9:8a:30:a6:d7:60:c8:3b:00:b5:de:04:38:23:0c:42:67:be:
         f7:38:9f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:42 2026 by rpki-client