Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
File:                     mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json)
Hash identifier:          iRgOUiBdwD3J/Ze3ZE+VVoG+VyBAUJYRP4fWYv7cMy8=
Subject key identifier:   29:9E:0F:75:11:C6:AB:DC:25:BF:EF:05:03:B1:51:1E:70:84:D7:B1
Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
Certificate issuer:       /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Certificate serial:       355D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
Manifest number:          355D
Signing time:             Wed 22 Jul 2026 14:56:05 +0000
Manifest this update:     Wed 22 Jul 2026 14:56:05 +0000
Manifest next update:     Wed 29 Jul 2026 14:56:05 +0000
Files and hashes:         1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: 2atYsNFRyMRF87JWsLTiauyLaMg/gJGwoM2d9U6Zb5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13661 (0x355d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
        Validity
            Not Before: Jul 22 14:56:05 2026 GMT
            Not After : Jul 29 14:56:05 2026 GMT
        Subject: CN=6a60da05-3aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:49:1d:57:82:ae:23:a8:bd:a9:4e:3c:db:
                    00:9e:aa:d9:cb:b7:c9:ae:ab:69:10:5e:d3:12:9b:
                    ae:4e:02:ab:2c:a8:39:94:51:e7:25:8d:8d:6c:ca:
                    fa:b0:d7:a4:5e:80:8a:b8:18:1b:21:ab:a7:07:d9:
                    d5:7a:9e:d4:0f:39:fb:ba:1f:bd:da:67:a5:b3:e6:
                    52:38:da:28:f1:ca:7d:fb:b5:8f:d3:bb:ff:d1:51:
                    5f:a0:2f:6d:32:a0:6f:f4:f9:1c:f1:e6:9e:a4:1e:
                    ca:51:91:0c:16:16:fe:b8:a0:1a:bd:68:c8:c7:f8:
                    63:0c:7b:36:eb:f7:75:1c:3c:29:4e:db:ce:1b:ee:
                    74:7f:96:7c:ef:d9:1e:83:e1:17:40:8d:4d:0a:a7:
                    c4:c1:5e:c8:1b:15:7d:9b:2b:6f:b3:1d:21:66:aa:
                    4e:a1:b2:16:ca:67:00:a4:72:3d:5c:56:4f:2d:eb:
                    32:c2:7c:3c:52:0f:4a:ed:a0:09:13:c1:1c:82:e9:
                    b4:bd:f5:cb:02:78:76:4d:08:db:db:f1:07:09:3b:
                    48:6f:54:ea:43:41:3a:e8:ef:5b:73:44:84:46:ea:
                    29:42:79:07:ab:63:2b:6c:06:18:1e:25:61:dc:19:
                    11:64:81:75:93:17:cc:b8:f4:b8:c4:16:8c:98:be:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9E:0F:75:11:C6:AB:DC:25:BF:EF:05:03:B1:51:1E:70:84:D7:B1
            X509v3 Authority Key Identifier:
                keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ab:91:52:ac:bb:61:45:81:84:f0:be:23:72:ea:7a:ff:1e:
         80:90:2f:b5:9e:c2:11:a1:ba:d9:12:55:88:ea:c4:ff:3b:59:
         86:f3:bc:f4:c2:11:6f:63:90:b5:3a:6e:f9:e3:86:9f:03:89:
         b7:75:9c:a1:3d:20:2f:7f:7c:c1:8a:92:03:49:8b:1e:78:d0:
         31:5d:48:74:c8:37:7c:15:86:d5:2a:33:a3:47:f8:1c:6a:48:
         2a:11:66:4d:28:21:51:17:87:c3:b3:d8:db:9b:64:9b:40:4f:
         fe:63:0e:63:a1:0b:bf:3a:8d:09:1f:78:16:4c:99:1a:87:4d:
         af:4d:cd:2d:0b:cc:46:22:78:7f:ef:02:0b:e6:dc:34:6a:d7:
         59:0c:48:fa:d5:8b:9c:8d:20:4d:7b:f3:30:f7:8e:5f:b6:d1:
         50:a5:3e:05:39:b4:32:68:1d:e9:2d:a0:1b:22:47:1a:4a:ac:
         cf:a4:d7:4e:8c:94:7d:31:f9:45:a7:e9:49:f3:8d:e7:36:00:
         83:3c:37:2a:d3:48:46:3f:6d:d0:09:91:29:e1:58:12:c5:10:
         89:7b:81:87:a0:b4:a5:3d:8e:26:f5:5f:c4:f6:98:36:49:74:
         a1:3b:19:34:b4:52:c4:76:d6:04:06:68:5c:69:05:57:e8:d5:
         da:31:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:01 2026 by rpki-client