Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
File:                     kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft (raw, json)
Hash identifier:          H+vA59D9lxckI20C9WTbr33oI+eCzmSX9x/RNefTQm8=
Subject key identifier:   FE:0C:0D:AF:76:9D:F3:36:5C:6F:1A:26:D6:18:B4:68:92:FF:15:71
Authority key identifier: 90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
Certificate issuer:       /CN=A91A038D/serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
Manifest number:          A8
Signing time:             Thu 23 Jul 2026 09:11:57 +0000
Manifest this update:     Thu 23 Jul 2026 09:11:57 +0000
Manifest next update:     Thu 30 Jul 2026 09:11:57 +0000
Files and hashes:         1: kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl (hash: x11SG+DcG3k/cUry2ZwPHBqrEzP46GYZ4dP4MvZT48o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A038D, serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
        Validity
            Not Before: Jul 23 09:11:57 2026 GMT
            Not After : Jul 30 09:11:57 2026 GMT
        Subject: CN=6a61dadd-03a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:db:90:31:7d:8b:93:af:18:f8:0b:80:a0:
                    8d:f0:c3:27:be:16:cd:e6:00:3d:3f:5f:70:59:0f:
                    62:f9:b9:e6:03:93:86:6a:14:c5:1e:6b:55:d0:f0:
                    72:1d:03:95:ac:d4:cf:2f:53:01:d1:e2:29:b9:6e:
                    02:89:c5:f9:a0:ef:43:63:01:63:bd:93:45:ef:2b:
                    dd:97:18:b1:53:1c:3c:96:a6:e3:a4:20:02:57:9d:
                    a7:33:af:2e:b7:69:36:4f:0a:49:a3:25:1f:66:22:
                    95:92:64:14:b4:dd:f5:a4:34:a3:d1:ca:d1:ab:2e:
                    d1:de:25:69:4e:3b:97:20:7e:a3:e9:12:70:ca:8a:
                    09:8e:44:ec:39:48:94:67:08:9b:9a:56:86:2f:b1:
                    79:af:72:fe:56:58:35:e4:6b:3d:1b:ab:86:1c:20:
                    e7:13:8f:dc:ee:19:16:a9:ac:df:d7:a6:e6:50:e4:
                    6a:c0:ef:20:9f:7f:08:c2:8d:2e:c1:b9:f5:32:d0:
                    88:18:ee:38:2c:fa:a1:84:e1:1f:ef:93:6a:1e:80:
                    40:58:6b:13:03:6f:d2:9d:fa:97:5b:03:cf:1a:3a:
                    de:cd:cc:8f:7c:08:59:56:42:fe:45:73:a4:1b:52:
                    a0:34:eb:a1:e8:76:b8:d8:6e:f6:f8:d6:d0:2c:5c:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0C:0D:AF:76:9D:F3:36:5C:6F:1A:26:D6:18:B4:68:92:FF:15:71
            X509v3 Authority Key Identifier:
                keyid:90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:db:1e:40:30:f5:89:70:bb:41:dd:6a:33:ac:55:ed:00:
         d0:32:91:7c:84:0a:0a:96:64:3f:4c:03:51:fc:4f:87:4e:40:
         a5:41:90:36:ec:f0:31:1b:03:5d:db:d2:60:42:d0:ca:cd:6d:
         b5:8a:53:3c:ae:4c:e5:19:c3:18:3a:35:35:12:85:a0:a5:8a:
         7d:ba:5b:e5:2a:08:d2:0f:97:d4:36:99:9d:80:d2:eb:e2:59:
         28:35:fc:94:57:7f:e5:1e:6d:c6:c4:c0:64:fc:b6:99:41:bf:
         b5:33:d7:19:25:3d:73:1f:81:7d:47:35:b9:1c:34:ab:19:70:
         cc:ed:f9:75:cc:da:d2:00:08:54:de:92:83:d5:e2:04:31:fb:
         db:73:c5:7a:f2:5a:6e:8f:a9:8a:8a:06:60:3e:b2:23:3b:4e:
         ed:15:c0:f9:2b:65:86:d4:ae:e3:c5:9a:a7:ce:b8:a6:c9:2e:
         2f:bf:92:14:90:97:e5:8a:3b:2a:2c:26:1b:be:e8:f2:86:9f:
         57:a0:11:20:da:75:30:54:cc:ec:fd:83:f5:e1:18:e7:8c:f1:
         c6:23:1c:97:c5:60:d3:1c:6d:a1:39:d6:53:e3:79:1e:20:dd:
         9c:0a:11:35:8b:9d:d5:b2:8e:73:ee:c4:4a:90:33:45:77:9c:
         24:ac:f1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:51 2026 by rpki-client