Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
File:                     1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json)
Hash identifier:          45yXG/VjIPfVOblSDbfoCEnXVhtoyiV2RehyanJdE20=
Subject key identifier:   1A:76:3B:15:8D:2A:DD:34:D9:31:1A:86:B5:DE:12:55:85:36:3D:C2
Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C
Certificate issuer:       /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C
Certificate serial:       0A58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
Manifest number:          0A58
Signing time:             Wed 22 Jul 2026 16:43:32 +0000
Manifest this update:     Wed 22 Jul 2026 16:43:31 +0000
Manifest next update:     Wed 29 Jul 2026 16:43:31 +0000
Files and hashes:         1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: R8uruuzKc2650j0xCClp+yXLeneA9f+KZvNhXJQ5idA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl
                          rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2648 (0xa58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C
        Validity
            Not Before: Jul 22 16:43:31 2026 GMT
            Not After : Jul 29 16:43:31 2026 GMT
        Subject: CN=6a60f334-cd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:50:46:7e:58:1f:b6:95:3d:24:0d:15:8b:
                    fe:93:4a:0b:83:ae:1f:6b:3d:37:57:0f:66:12:fd:
                    c4:27:c3:f9:9e:c2:01:d2:4e:0d:52:15:c9:d7:6a:
                    2a:85:98:5d:d0:06:e8:24:c3:5b:dc:ca:1b:33:60:
                    5a:37:0b:73:1f:24:4d:38:c6:a6:4c:72:b3:c9:ff:
                    04:4f:c8:95:90:dc:7f:34:ce:d2:c9:8d:8d:ac:fe:
                    b9:05:d6:8e:b4:71:ec:f4:81:aa:19:f1:69:c3:ee:
                    fc:d4:34:5f:4b:6b:58:a5:49:39:10:8f:71:1f:7f:
                    1b:9c:47:06:45:97:fe:3d:fa:78:b6:f7:d4:9e:0b:
                    c7:7c:6c:e8:bd:a7:fd:bb:3a:ae:9f:0f:12:5f:35:
                    b8:69:ac:94:01:cf:95:d3:cb:25:7c:a9:f5:45:c3:
                    4a:92:0e:56:30:f4:23:dd:bd:ee:9a:73:97:64:9a:
                    54:50:b4:e6:3d:f6:9e:29:ac:aa:b8:26:e2:86:d6:
                    11:d9:8b:e3:48:7b:32:f5:3f:df:d7:84:9f:cd:65:
                    2b:48:a5:70:43:b1:d9:83:2b:c8:e6:d3:4e:0f:94:
                    8a:30:a8:91:24:9f:c4:04:f1:12:f9:c6:a2:08:53:
                    7f:c8:8f:35:ae:2f:d9:d3:19:85:3e:2f:43:58:70:
                    79:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:76:3B:15:8D:2A:DD:34:D9:31:1A:86:B5:DE:12:55:85:36:3D:C2
            X509v3 Authority Key Identifier:
                keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e2:a5:8a:54:46:ba:89:e4:3a:a8:19:7b:71:c8:81:85:75:
         e8:fe:ba:e6:a6:57:d4:14:9c:14:92:c6:40:b7:ba:99:0a:fe:
         a5:cb:64:3e:53:63:b8:8f:a8:1f:2d:29:9f:9a:78:c3:80:fe:
         ba:0f:cd:29:de:48:cc:e7:1f:58:c5:4e:50:a6:0d:93:4e:a8:
         32:f4:39:b8:20:36:34:7c:52:bc:26:49:a7:ae:da:5f:af:1b:
         62:be:87:49:59:e1:b5:29:43:69:0c:e1:c0:1b:b8:8b:44:01:
         dd:ed:51:89:df:f4:16:cb:03:c9:a3:3c:a6:7b:34:7f:1f:9a:
         3e:93:c4:9c:74:f0:a0:d6:f8:d9:23:d6:62:56:a0:2d:e9:f4:
         ba:8a:ba:c2:82:61:d0:5e:e6:22:67:90:09:a8:a9:43:83:7f:
         2e:81:3c:4b:8e:00:72:9a:88:b8:ed:95:8a:64:bb:28:86:57:
         ec:bf:41:77:bd:17:ed:66:f6:75:0c:46:b0:1e:37:63:65:01:
         1a:cb:63:61:ad:b4:02:b5:c6:c7:21:64:23:f7:c3:18:bb:d9:
         b5:b4:37:c2:52:bf:2f:72:1a:f0:95:2a:0b:e4:83:33:c9:4f:
         7f:71:43:19:68:4b:97:8f:64:3e:12:59:61:21:e0:57:1a:dc:
         f5:5c:04:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:26 2026 by rpki-client