Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
File:                     Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft (raw, json)
Hash identifier:          boxoz5e/ImnC5GgIGvVilvKfz3IqrOwTSm0oqiQrRvg=
Subject key identifier:   76:1A:5D:57:A1:EC:03:3F:20:92:0D:20:34:68:B8:BC:8A:E8:9A:73
Authority key identifier: 3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9
Certificate issuer:       /CN=A9174A0F/serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
Manifest number:          0F
Signing time:             Thu 23 Jul 2026 10:49:12 +0000
Manifest this update:     Thu 23 Jul 2026 10:49:12 +0000
Manifest next update:     Thu 30 Jul 2026 10:49:12 +0000
Files and hashes:         1: Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl (hash: 0v/eV0RpW2eVfbm/5BVqV7eimNTG5d4dJe9hbMjudCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl
                          rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A0F, serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
        Validity
            Not Before: Jul 23 10:49:12 2026 GMT
            Not After : Jul 30 10:49:12 2026 GMT
        Subject: CN=6a61f1a8-2baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:2a:83:8a:cf:d9:30:29:d0:bb:61:87:eb:
                    76:cd:fa:47:00:4b:6d:c1:6f:aa:2f:9e:61:c4:23:
                    22:e8:0e:72:9a:eb:ee:da:e7:b3:b7:4a:01:ca:41:
                    42:99:cf:fc:8b:5f:dd:77:a8:dd:69:9b:e3:03:00:
                    0d:97:6d:43:5f:6b:c6:c3:8d:9d:bb:39:4d:15:e9:
                    b9:2c:ec:5a:eb:8d:28:48:32:09:fd:c8:8f:d2:be:
                    01:f2:8d:fa:ea:73:15:56:78:5b:b8:b2:b4:da:bc:
                    69:ff:c7:32:9c:a3:99:21:fe:ad:18:a7:ac:b0:a0:
                    11:b4:58:26:8d:60:52:cd:86:8d:1e:c9:77:a2:d8:
                    28:2e:e1:0b:11:12:8b:86:03:a3:01:f3:b9:93:0e:
                    21:2c:71:81:5d:3a:c3:97:24:1a:b1:7a:f5:ea:b1:
                    1d:96:fd:af:1a:2f:b6:ea:e2:6f:38:99:14:7b:9e:
                    7f:b1:e6:ee:31:f6:3d:7e:16:6f:7a:b6:cb:fa:37:
                    bc:05:c6:48:b6:dc:b8:fe:59:04:10:2a:9a:39:3a:
                    31:49:08:65:5a:6d:3f:46:3c:85:25:07:35:e3:98:
                    a1:b4:0e:e3:b0:28:34:68:c8:98:1d:48:38:3b:11:
                    d1:04:76:5a:b2:e6:df:bd:26:26:d2:33:7d:ea:97:
                    62:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1A:5D:57:A1:EC:03:3F:20:92:0D:20:34:68:B8:BC:8A:E8:9A:73
            X509v3 Authority Key Identifier:
                keyid:3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:40:b7:a6:21:06:5a:e9:9c:ff:21:c9:8c:f2:76:da:66:e1:
         84:20:c0:90:32:ba:9a:ba:b3:4d:1f:c0:6e:35:0b:7c:b0:ae:
         36:d9:1b:fd:d5:30:e6:f1:76:22:40:ed:3f:78:a6:c6:7b:7b:
         68:2f:8b:5f:06:b0:30:56:aa:d7:c0:cb:0f:c6:79:22:85:20:
         90:46:be:90:53:d8:d4:ce:9e:bd:f8:8d:f3:82:e7:c0:7f:c9:
         c3:3b:3b:ef:4e:f9:78:0f:f3:70:c5:a4:c9:37:d2:6e:71:4e:
         84:1a:58:43:7f:44:10:a0:e1:56:24:a8:05:ec:8c:e0:5c:1f:
         dd:1e:a2:48:86:2e:f6:1b:ee:bf:83:de:37:f4:4f:4c:be:01:
         b7:5c:d4:4c:60:ec:7b:fc:b4:ad:8d:71:69:2a:7c:26:32:e7:
         8e:c4:19:77:1d:07:6e:d0:2c:d8:95:65:1f:38:8d:60:b7:cf:
         c6:71:08:ab:6f:8b:ab:52:58:ca:bc:6a:23:d2:0e:27:9e:ce:
         bd:1e:ac:8c:f1:fc:e1:a4:6d:25:8a:ef:81:7d:44:7d:ad:1a:
         2b:12:d2:28:ba:3a:7a:cb:14:7b:27:bb:13:c4:0d:46:5f:2d:
         7f:e6:82:ff:fc:63:ea:c4:78:7b:a5:4c:7b:0a:d1:6f:5d:78:
         30:aa:b9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:59:20 2026 by rpki-client