Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
File:                     l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft (raw, json)
Hash identifier:          zaWDk5i0z76FYSXoGKcmd7vhDyi2c/qWxEY7UOkWPEs=
Subject key identifier:   B8:17:12:A0:B0:22:0F:7C:AB:C1:19:DA:21:D9:92:76:EB:91:3A:FD
Authority key identifier: 97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8
Certificate issuer:       /CN=A91161EB/serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
Manifest number:          56
Signing time:             Fri 25 Sep 2026 08:18:57 +0000
Manifest this update:     Fri 25 Sep 2026 08:18:57 +0000
Manifest next update:     Fri 02 Oct 2026 08:18:57 +0000
Files and hashes:         1: l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl (hash: n6/lZyoFlX35IW14inFsx0xqGl7Rtxzmb1bS50oxrPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl
                          rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91161EB, serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
        Validity
            Not Before: Sep 25 08:18:57 2026 GMT
            Not After : Oct  2 08:18:57 2026 GMT
        Subject: CN=6ab62e71-9fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:71:54:ea:e3:0d:92:54:6c:8a:eb:20:32:ff:
                    e2:06:4a:1f:14:5e:2f:e4:08:10:07:f2:25:3e:88:
                    1e:f8:b5:ba:1c:e3:ce:3d:fe:c6:d9:7d:b0:ac:29:
                    9c:6e:a7:e4:5a:9d:8b:a6:25:96:1c:18:82:fc:5e:
                    ae:1a:9a:52:fa:11:7f:50:33:c8:5f:bc:64:91:ea:
                    80:2e:cc:7e:20:8c:86:fa:b4:f2:c8:2c:87:e2:32:
                    c5:20:c4:78:e1:74:21:e3:46:bf:7d:ad:82:25:6b:
                    ac:a5:df:7c:26:e0:92:45:20:31:40:32:94:20:f2:
                    66:a9:d5:f2:e3:48:28:c8:e8:e7:8e:67:3d:e2:d5:
                    43:b8:0b:5a:33:07:bb:ae:66:08:2e:c6:dc:e9:fe:
                    1f:9c:7c:51:44:a9:aa:2f:bc:75:a2:e6:f2:be:a1:
                    47:f1:90:b7:d9:e3:86:5a:5d:4a:94:78:74:cc:b6:
                    dc:91:f2:e5:7c:61:53:0c:4e:1a:78:b8:a8:96:e5:
                    02:5e:a7:a8:5d:fe:21:ca:a9:8f:6d:e8:7a:26:d4:
                    b3:6a:1f:af:ad:45:96:32:37:79:d0:b6:ec:fd:1f:
                    a8:5c:c9:d8:75:41:a2:70:df:80:9f:52:3a:db:15:
                    68:6f:3c:2f:13:ae:45:f7:58:8d:71:2a:76:e0:81:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:17:12:A0:B0:22:0F:7C:AB:C1:19:DA:21:D9:92:76:EB:91:3A:FD
            X509v3 Authority Key Identifier:
                keyid:97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:cc:cc:72:02:5a:cb:db:af:0b:2d:cf:82:8b:20:5f:92:9e:
         83:e4:bb:6d:9b:46:a7:b5:54:73:fe:e1:59:30:56:cd:e2:11:
         61:3b:12:8b:67:a3:e5:90:e0:82:d7:13:94:2a:e8:ed:2b:6b:
         0d:f6:70:ee:6d:27:be:0b:ed:c9:5f:3c:3c:97:a1:b7:8a:78:
         13:d4:63:21:e8:1e:3d:b7:5e:4c:6b:2e:d3:68:62:72:d1:fc:
         cb:ca:17:97:55:6c:87:de:3d:32:5e:0f:85:9a:07:2e:93:ca:
         3a:56:0c:3b:1b:eb:cd:b7:e1:b4:a1:22:06:ed:6d:b4:9c:46:
         4c:06:7a:21:9e:55:a0:d1:09:c6:44:51:c1:a6:44:49:2f:69:
         84:af:23:c1:82:42:c5:b3:64:a5:ec:d2:8b:c3:13:d8:34:52:
         1e:96:b8:89:03:7e:d7:6e:87:2a:85:42:f9:e1:2f:ad:e2:28:
         78:84:af:ce:c3:09:f0:51:6e:73:c8:be:f4:b5:47:2d:98:86:
         34:d8:b9:6b:08:d4:d8:ed:5b:ef:08:27:f8:30:37:45:7e:90:
         cf:bc:92:c8:f3:d8:76:99:70:56:6e:4b:6f:fa:d7:e9:fd:24:
         44:9d:47:7f:ca:68:ec:39:7b:ba:df:57:a3:1e:2a:2c:5b:b1:
         f5:a6:4a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:31:22 2026 by rpki-client