Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
File:                     Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json)
Hash identifier:          Ru/PWdMbQ/WOtT2PZfQofxmWPwW/2OAQt2JFYkX8eVk=
Subject key identifier:   1B:61:72:9A:F4:7B:00:2A:7F:62:8B:35:AE:8A:53:72:8D:BA:D7:88
Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
Certificate issuer:       /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Certificate serial:       0597
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
Manifest number:          07C3
Signing time:             Wed 22 Jul 2026 23:58:30 +0000
Manifest this update:     Wed 22 Jul 2026 23:58:29 +0000
Manifest next update:     Wed 29 Jul 2026 23:58:29 +0000
Files and hashes:         1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: jy3FcCZzxzY/6ccyd2JxPy75hhqlsn+b2Ppd+wytLuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
                          rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
        Validity
            Not Before: Jul 22 23:58:29 2026 GMT
            Not After : Jul 29 23:58:29 2026 GMT
        Subject: CN=6a615925-d412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9b:fd:f5:f4:0b:56:8b:19:39:13:e2:37:b0:
                    8d:12:83:63:99:66:01:01:43:b3:be:e8:31:4c:f4:
                    62:1f:bf:fc:32:8d:08:a5:68:3c:3a:29:a7:26:2c:
                    c3:ea:c8:6f:de:ce:89:40:7d:fc:88:0c:8b:3e:79:
                    fd:0d:d0:b4:0e:4d:7b:d9:53:ae:f8:ee:cc:5b:6d:
                    5d:5a:cd:29:c7:44:f2:3c:40:74:40:f5:42:50:0c:
                    f5:75:79:8f:5e:00:3b:cd:7f:7e:00:1d:c6:fd:77:
                    d1:8b:e1:48:b1:ef:ab:5c:21:58:f4:69:20:dc:6b:
                    6e:b3:7a:0e:40:b7:a9:d1:0f:5b:8e:5c:6e:4b:05:
                    a5:b3:d2:ef:9e:79:83:9a:12:d4:be:78:9f:8c:89:
                    1c:58:39:e3:f6:1b:12:45:d0:c2:83:02:bc:d9:78:
                    64:0c:b6:b8:62:09:e9:e6:3a:ee:7c:05:d5:9f:e1:
                    2d:e6:00:b2:db:d4:0d:44:48:69:70:7a:12:16:b4:
                    a1:b8:a5:88:5d:29:3b:43:0a:64:77:f0:a7:44:80:
                    4d:9c:64:1b:7c:5a:4b:a6:41:a5:45:63:3c:07:55:
                    fa:f4:fe:e1:ed:4d:cc:f5:ab:83:c6:dc:57:fa:fa:
                    ac:2a:1d:bf:55:31:31:15:e3:a7:8e:46:34:90:ef:
                    27:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:61:72:9A:F4:7B:00:2A:7F:62:8B:35:AE:8A:53:72:8D:BA:D7:88
            X509v3 Authority Key Identifier:
                keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d2:8b:6f:89:ae:e7:15:e6:06:88:e9:0d:74:15:4e:d4:51:
         70:84:bc:05:59:21:5d:b4:04:d4:7a:7e:22:1a:1c:73:09:35:
         61:5b:a0:07:8a:59:26:e8:97:12:5e:a7:14:b9:6a:cf:0b:85:
         56:ac:1f:1d:14:f5:dc:90:55:76:28:d8:04:a6:3c:11:aa:f4:
         27:1f:cc:10:0b:23:65:95:01:6f:cc:9a:7a:9b:53:34:18:4e:
         b9:de:0e:0a:ff:ee:9d:40:4c:a7:fe:13:d7:f4:d8:40:c2:5f:
         42:a0:21:18:6a:51:ad:f6:9b:00:e1:ff:c5:4b:f5:47:b0:cc:
         93:a7:7d:18:e9:a8:6d:c3:6a:8e:ff:47:71:58:2d:bc:72:ae:
         f5:a3:62:87:f7:c3:91:1a:2b:8a:95:1a:c3:74:22:42:06:4e:
         1a:b8:af:17:c6:ae:e1:5d:d6:2f:6c:1a:2a:74:8f:fe:9e:90:
         65:b9:6a:e1:3b:9f:1b:4d:dd:1f:fb:ca:a4:1c:fd:e8:8f:1f:
         6c:e7:e3:e0:45:31:84:59:1c:40:c4:f0:b3:f9:e1:e0:04:4d:
         65:7f:94:c8:f7:99:af:e5:46:47:e4:de:10:73:17:f3:dd:4a:
         ec:2c:b5:d6:1c:79:cd:b9:cc:a9:f4:66:53:36:d6:a1:97:5c:
         28:5d:c9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:05 2026 by rpki-client