Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
File:                     MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json)
Hash identifier:          jdt9jy/xQIxI3cQgBfCpbPrYPFc+O1nNmMLSDpz9NUE=
Subject key identifier:   82:03:D7:63:97:EE:02:89:1F:CB:EB:EB:69:0B:52:E0:B9:22:5E:91
Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
Certificate issuer:       /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Certificate serial:       1C04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
Manifest number:          1C03
Signing time:             Wed 22 Jul 2026 16:18:37 +0000
Manifest this update:     Wed 22 Jul 2026 16:18:36 +0000
Manifest next update:     Wed 29 Jul 2026 16:18:36 +0000
Files and hashes:         1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: r5crd0W5p2B0tmh994ogXOMfEDxT+nfph43+x7CTUXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl
                          rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7172 (0x1c04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
        Validity
            Not Before: Jul 22 16:18:36 2026 GMT
            Not After : Jul 29 16:18:36 2026 GMT
        Subject: CN=6a60ed5d-55a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:51:40:83:62:ad:0c:dd:7f:63:bb:13:0a:
                    69:b0:cf:3f:f8:15:ec:4d:77:2f:f5:35:f5:8a:5b:
                    fc:0c:c4:3e:61:99:cf:6d:22:22:d0:5f:13:b4:6d:
                    de:9a:52:10:ba:77:9d:39:78:76:89:98:8e:10:8b:
                    78:14:e7:68:30:3e:7b:73:c2:4f:d4:d6:f5:a4:61:
                    01:d2:60:6c:45:a9:e7:7e:c1:6d:d4:21:b6:e0:e7:
                    7b:91:b5:55:6d:b8:1a:f3:5f:44:e1:80:5b:1f:3d:
                    1a:70:f9:84:95:75:a2:2e:bf:45:b4:31:11:14:22:
                    ae:b2:d1:d4:af:71:1c:83:c3:44:bd:60:82:06:40:
                    96:70:46:34:b4:7a:e4:b8:f4:85:ad:a3:ff:b8:8f:
                    37:07:ca:b3:69:0a:85:c2:13:77:8d:28:c0:5d:a2:
                    8c:79:5e:ab:ec:1c:82:74:22:3e:12:79:5a:cf:91:
                    81:83:33:62:b7:1d:e1:8f:7f:46:7e:d8:46:6c:34:
                    7d:d5:8f:f5:e4:aa:1b:19:f2:13:df:e1:3e:9c:e7:
                    9c:94:81:28:8e:31:ab:e5:5b:c1:cc:7d:d1:5f:0c:
                    bf:69:a0:26:97:30:83:8c:27:84:61:6c:dc:35:d7:
                    ba:36:ee:9e:5c:1a:c7:61:04:98:50:58:7b:9f:ef:
                    49:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:03:D7:63:97:EE:02:89:1F:CB:EB:EB:69:0B:52:E0:B9:22:5E:91
            X509v3 Authority Key Identifier:
                keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:12:61:75:be:63:66:6e:d0:3f:58:6e:32:4d:10:34:fa:76:
         4a:d0:27:ad:48:c6:91:98:90:d0:de:7f:63:2a:23:48:97:61:
         23:ff:41:02:de:cd:1b:7a:1b:96:2b:38:53:e9:1b:ab:a6:bd:
         21:29:3f:af:c4:6d:79:da:2b:6e:9c:0a:d1:9e:b4:d3:f4:ef:
         88:c1:b6:ae:d6:f7:25:a2:62:c3:2c:29:74:aa:ed:89:61:d7:
         82:48:b4:1a:55:7d:53:bd:30:39:b9:3e:17:d6:38:83:ad:71:
         e0:f1:48:38:00:f2:3e:6e:94:13:6c:a6:7a:22:5b:bc:33:ec:
         97:31:4c:07:15:0b:1f:57:4c:84:07:09:b4:e5:66:f1:22:ec:
         e1:3d:87:25:54:5b:e7:d9:62:4b:cb:2e:ad:14:58:ce:c4:7b:
         e0:1e:29:0e:42:09:95:c3:e0:27:c2:5f:d1:70:29:1f:16:86:
         a0:b7:96:6f:50:03:03:a9:ea:5f:62:c9:e7:21:44:8e:9b:63:
         05:d0:45:a3:22:8b:22:6b:75:46:86:ac:3f:d7:fb:3b:7b:c8:
         34:03:3a:6e:bc:8b:ce:d8:d2:dd:08:c8:96:b2:8f:c1:fe:56:
         b3:ff:3e:71:e9:f2:28:03:b2:3a:40:79:38:19:f0:20:bf:d9:
         dc:fe:f4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:11 2026 by rpki-client