Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
File:                     4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json)
Hash identifier:          xU/YL6UoeZMSCOTB8EDGvsJJmkX+MIbGnUCkuVbP08I=
Subject key identifier:   F9:73:A0:64:F0:E4:DA:27:A4:DE:9E:E7:35:17:58:28:A0:B4:61:0A
Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
Certificate issuer:       /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Certificate serial:       3561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
Manifest number:          3560
Signing time:             Wed 22 Jul 2026 14:28:24 +0000
Manifest this update:     Wed 22 Jul 2026 14:28:23 +0000
Manifest next update:     Wed 29 Jul 2026 14:28:23 +0000
Files and hashes:         1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: SRWBXjGCid0Ujyejx1pOC3JQhhVooqReEUP3W9Jl4NY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
                          rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13665 (0x3561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
        Validity
            Not Before: Jul 22 14:28:23 2026 GMT
            Not After : Jul 29 14:28:23 2026 GMT
        Subject: CN=6a60d388-12aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f2:c2:82:f4:7d:bf:70:74:8d:b4:7f:02:fe:
                    a1:23:25:11:1f:ca:a4:ac:07:49:17:da:d3:7f:20:
                    6b:1e:1b:b8:1e:80:2e:28:07:fe:10:dc:8a:93:83:
                    b8:57:6b:f7:8c:26:84:5f:73:a4:ed:ed:4c:94:0d:
                    70:e8:a4:53:9c:6d:24:a0:b4:4c:11:64:4f:6d:c4:
                    c3:23:8b:a6:26:25:ec:b9:37:07:88:80:4f:99:52:
                    c6:96:d4:c8:bb:41:5f:b3:60:0d:1c:a3:25:a6:e9:
                    1e:60:8e:54:93:68:cf:75:cc:60:a0:37:e4:2f:10:
                    5b:e2:92:a5:0d:15:16:89:9c:1d:65:ca:f5:20:f0:
                    db:ac:66:05:ac:84:d7:38:46:c2:2f:ce:27:c4:d4:
                    e8:88:32:70:74:4d:1c:b9:35:a2:3b:3b:0d:44:0d:
                    9d:33:f3:ed:ba:64:f2:80:33:55:d0:2b:44:a6:cd:
                    4a:88:63:53:bd:e3:b2:42:dd:19:a6:fc:3f:01:94:
                    44:26:d3:d8:32:15:c9:63:e9:84:70:2c:6b:b5:0c:
                    34:ef:1f:3d:80:1a:27:ba:f0:48:b0:69:2f:c7:35:
                    25:bb:23:34:08:ae:9c:d5:85:00:0e:70:65:ff:28:
                    1a:9f:b9:b0:09:2e:f3:d8:d0:25:64:15:e9:2e:2a:
                    3c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:73:A0:64:F0:E4:DA:27:A4:DE:9E:E7:35:17:58:28:A0:B4:61:0A
            X509v3 Authority Key Identifier:
                keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:85:ea:dc:d1:fa:76:52:57:db:95:20:bc:82:55:4b:c6:30:
         74:a3:dc:20:9f:90:7f:39:1c:52:e4:ba:ea:9c:ca:eb:d5:ae:
         f9:89:a7:fa:c4:6a:02:3c:ba:9d:78:c0:ee:bc:04:0d:91:ed:
         e8:06:78:b0:c5:74:a0:e7:56:9a:0c:7b:3f:f7:51:32:7c:ff:
         e6:f2:b1:ea:4b:78:33:30:b5:9d:6a:49:15:79:d7:92:c4:70:
         de:8c:63:2b:fe:3e:63:b3:c5:ee:5d:a5:59:f0:32:a9:e1:8e:
         8e:84:d5:ba:a1:a9:e2:96:74:e7:1c:c3:c7:78:42:29:c9:42:
         20:70:c6:64:7a:c1:61:63:3c:0f:7f:8e:4e:28:13:4c:a4:35:
         b2:e4:b3:00:cd:48:40:fd:b9:5f:11:db:3b:8f:9c:c4:38:5b:
         3c:a6:08:bc:14:bd:e9:fc:93:aa:59:58:44:e1:10:bb:9f:06:
         9a:57:d5:c2:d3:e6:8a:6a:ec:55:b3:4a:94:2c:d2:13:c0:bf:
         7e:e5:4b:cb:66:75:be:7c:49:6a:4e:5d:ac:d5:a9:1b:22:a4:
         54:3c:9f:8d:c5:af:79:60:67:db:e0:fd:42:08:a0:49:2b:ad:
         14:d0:5d:01:d4:7d:8b:6b:d1:8f:e6:9e:4c:b4:52:52:3b:87:
         c7:3a:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:18 2026 by rpki-client