Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
File:                     5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json)
Hash identifier:          xxmxY6DFtcTZw17jR1Pp3lGmI+jgKr7V8Ipo1eFZ0u8=
Subject key identifier:   F6:D5:54:9F:F6:D6:A6:CC:5C:EF:71:A8:B5:90:AB:80:FB:1D:49:20
Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Certificate issuer:       /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Certificate serial:       355F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
Manifest number:          355F
Signing time:             Wed 22 Jul 2026 14:44:07 +0000
Manifest this update:     Wed 22 Jul 2026 14:44:06 +0000
Manifest next update:     Wed 29 Jul 2026 14:44:06 +0000
Files and hashes:         1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: d43TnaBecMFni2whjSpNQezONQcTTxlt2b6b/s/kiP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
                          rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13663 (0x355f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
        Validity
            Not Before: Jul 22 14:44:06 2026 GMT
            Not After : Jul 29 14:44:06 2026 GMT
        Subject: CN=6a60d736-c6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:72:d4:03:23:44:35:e6:c9:66:67:e5:dc:
                    5c:02:a8:98:3d:07:8b:c6:5d:d4:0a:49:f2:8d:83:
                    36:f0:33:34:e3:c9:af:50:95:50:b1:28:e2:bb:1e:
                    56:2f:00:4e:6e:9d:62:ad:16:a7:87:82:e9:0b:e9:
                    11:2f:4b:0b:c4:7a:35:e0:d8:3e:4a:7e:60:d7:3b:
                    19:91:ac:04:fc:33:35:de:42:45:a9:bb:a8:e2:34:
                    f3:b0:12:26:7e:c5:29:c7:16:7c:50:0c:20:70:68:
                    6e:ce:42:99:7c:d1:b5:1f:66:f1:7b:bd:20:c5:46:
                    f7:34:30:6e:21:da:99:bf:d3:55:12:39:f0:b1:da:
                    d1:90:5d:73:d6:98:2b:fa:91:aa:61:a1:e2:51:1d:
                    28:ed:7e:51:59:66:15:e9:cf:26:82:82:8a:b0:9c:
                    f9:e7:2f:be:9a:9c:ba:d7:40:02:66:43:ff:88:55:
                    eb:52:b5:6d:ae:52:04:22:95:50:cf:ed:e8:72:a7:
                    3b:fd:ce:a6:1e:2e:4b:3d:57:9c:19:d7:d8:56:df:
                    d1:37:a4:fd:7a:79:e6:e8:6d:5f:74:f8:7e:31:e8:
                    20:d4:29:9c:7c:4f:17:32:00:62:cc:e8:21:e9:ff:
                    e0:5b:bf:48:c6:61:5c:24:20:d5:7d:96:59:97:f7:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D5:54:9F:F6:D6:A6:CC:5C:EF:71:A8:B5:90:AB:80:FB:1D:49:20
            X509v3 Authority Key Identifier:
                keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d4:69:79:bc:94:96:49:2f:f3:a3:ec:5a:39:d1:97:53:04:
         7f:f9:5d:97:c2:8a:cc:d0:70:ec:b4:a5:bd:8b:75:b6:6c:a5:
         d8:56:7e:a9:c5:6f:a7:8b:78:28:2d:ba:63:29:4d:24:ca:b5:
         e4:f1:ec:13:67:4a:7b:95:a4:72:ad:8c:5c:e7:fe:db:b1:ab:
         f8:0e:f9:08:75:7a:6f:6e:95:39:ee:02:7b:50:21:fe:de:d5:
         ee:04:25:b0:75:f0:84:63:db:ac:6f:c4:d5:cf:82:22:70:aa:
         4b:a3:52:98:7c:78:b1:d7:ec:ec:a5:5e:5b:81:0a:c3:80:41:
         3d:ec:5f:50:c7:55:34:b5:56:6d:06:41:8a:30:47:7d:3a:3e:
         b1:dc:b2:77:06:8f:51:b7:79:07:b6:b6:7e:2e:18:b4:61:f4:
         5b:c2:bf:63:b8:15:c0:44:b5:69:d0:52:7c:26:7f:0e:84:de:
         d7:f2:53:a1:ad:9b:83:18:85:98:76:82:a2:81:cf:24:55:b3:
         3c:07:34:28:1b:92:f1:13:ce:53:52:e6:73:eb:ca:01:37:fd:
         5d:d3:81:16:3d:c5:60:14:88:e1:47:d5:a5:9f:59:48:5e:6e:
         4d:cd:ca:ab:5e:f4:9f:e7:71:58:8b:ee:e9:b1:75:18:b2:0d:
         83:4e:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:21 2026 by rpki-client