Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
File:                     gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json)
Hash identifier:          06A6Aydl/SVW+0nsDjARNc4DzpJBkNeXOHNTHHDEmHk=
Subject key identifier:   41:9E:91:05:EB:55:E8:92:A5:8A:09:90:7D:04:56:EF:AE:77:18:7F
Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
Certificate issuer:       /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Certificate serial:       357E
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
Manifest number:          357E
Signing time:             Wed 22 Jul 2026 14:22:37 +0000
Manifest this update:     Wed 22 Jul 2026 14:22:37 +0000
Manifest next update:     Wed 29 Jul 2026 14:22:37 +0000
Files and hashes:         1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: E/hK3YWdz0iZkLLqFNyOOfC6fjK3Un+ZTQqw7NIAR94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13694 (0x357e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
        Validity
            Not Before: Jul 22 14:22:37 2026 GMT
            Not After : Jul 29 14:22:37 2026 GMT
        Subject: CN=6a60d22d-990c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:6b:10:0c:3b:ee:48:e4:67:10:2b:50:31:
                    4f:86:4c:df:d6:a6:d1:ed:e2:a1:f6:9c:4b:eb:f4:
                    01:de:27:9d:c9:ab:ea:d7:1c:e2:9b:85:54:68:bd:
                    5a:e6:60:a3:fb:c2:19:3a:ef:57:a3:1e:58:42:3c:
                    a7:fe:12:1f:d1:01:ad:a4:28:06:9e:71:04:ce:6e:
                    fa:e7:b8:de:1c:71:b4:61:a1:ef:72:dc:8e:09:02:
                    f9:a9:85:dc:c4:7d:fe:05:d8:4d:62:18:0e:2b:1d:
                    3f:37:02:ec:3a:01:07:f9:5b:be:18:1e:97:96:ac:
                    3a:a4:a1:78:89:6d:9e:e8:71:09:7a:6b:b8:31:8c:
                    25:ae:27:00:39:b0:c1:56:8d:58:ab:a1:18:ff:89:
                    54:2c:4d:6b:d1:fb:8f:8f:13:7a:66:12:06:e4:42:
                    be:74:77:f8:45:24:0d:e4:db:6b:84:1e:0b:f6:31:
                    50:37:f7:d0:5b:ee:77:78:33:02:ae:28:e5:80:bb:
                    5f:96:0b:ae:52:63:37:f0:3e:ef:40:5c:11:6d:0c:
                    28:e3:c8:42:a8:dc:02:2d:d3:97:67:5c:56:bd:80:
                    27:08:ff:84:c2:ac:6d:b4:29:3e:e0:87:6b:e1:2c:
                    1a:4c:63:2a:de:9f:98:92:74:b8:77:da:c0:19:4f:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9E:91:05:EB:55:E8:92:A5:8A:09:90:7D:04:56:EF:AE:77:18:7F
            X509v3 Authority Key Identifier:
                keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:55:e1:9c:fa:dc:57:0b:a1:1c:2c:6c:3e:da:4a:9b:e8:ec:
         b2:11:94:47:66:00:0e:17:3f:2d:99:07:eb:d6:c5:e7:9f:7d:
         15:85:92:da:9e:2a:ec:76:e1:0b:61:53:79:86:3c:7a:35:ea:
         63:b8:02:b6:70:90:d9:db:66:03:33:d8:1a:e7:af:67:6d:e6:
         41:c2:9f:5a:59:a0:8b:b6:11:67:85:f6:e5:bd:d9:e9:ba:ba:
         f7:a4:e5:94:3e:01:15:2c:16:d8:87:48:7c:0f:e1:b3:9d:4c:
         a1:41:28:98:eb:d7:b0:c7:ef:de:a7:26:ef:d4:fc:5a:fc:f4:
         69:7a:97:1b:e1:93:ba:92:f5:15:4b:81:32:df:b3:6c:29:82:
         df:37:cd:91:45:e5:95:52:90:fa:e8:82:d8:02:ca:3e:2c:f4:
         d6:ec:fd:1a:e5:53:97:d5:d5:08:b5:91:60:6d:df:63:9d:20:
         1f:e0:1b:60:36:65:60:fb:22:5e:6e:05:cc:8a:a8:c0:cf:b6:
         fa:b7:8b:44:54:97:eb:be:9b:18:5c:44:31:db:b1:f4:81:01:
         c2:e7:c3:2a:40:f2:7c:44:4f:68:68:0b:eb:c7:9b:1a:7e:e6:
         86:68:9a:bf:57:d0:c0:de:df:6f:06:aa:b9:94:1c:2e:9a:89:
         ed:69:79:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:31 2026 by rpki-client