Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
File:                     I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json)
Hash identifier:          etWfPysM/U6gWq3bctxUJvmcz15R3IZLYmeQFzFzKa0=
Subject key identifier:   AA:44:C2:7E:09:67:D0:28:95:87:06:A4:1B:43:46:C3:53:03:F7:FD
Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
Certificate issuer:       /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Certificate serial:       0488
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
Manifest number:          0622
Signing time:             Thu 23 Jul 2026 00:53:02 +0000
Manifest this update:     Thu 23 Jul 2026 00:53:01 +0000
Manifest next update:     Thu 30 Jul 2026 00:53:01 +0000
Files and hashes:         1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: VEk0kIMDKvQFyDiwA+TC/B4LBz/RLVqfk+JEUO95f5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
                          rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160 (0x488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
        Validity
            Not Before: Jul 23 00:53:01 2026 GMT
            Not After : Jul 30 00:53:01 2026 GMT
        Subject: CN=6a6165ee-9980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:54:96:6c:91:75:4c:ea:67:54:5b:0a:ad:
                    d9:21:1f:46:9b:38:7d:fc:23:81:00:0f:82:bb:76:
                    95:ed:e0:3e:d9:32:1d:5f:29:54:43:ea:a9:97:f3:
                    6c:62:d7:74:d6:d1:dc:81:bc:d9:a6:21:5d:f1:28:
                    dd:ed:55:61:d6:05:35:60:f2:49:5b:72:1b:5b:56:
                    06:ac:13:4d:bd:55:ee:c7:7b:39:ab:d3:3e:11:3f:
                    a8:83:7f:3a:dc:24:4d:0a:9f:f3:e4:be:37:b8:65:
                    b8:e2:cd:78:54:90:e8:12:99:df:5e:94:d2:54:db:
                    18:eb:7e:47:3b:c7:25:a7:6b:f4:d1:70:93:fb:dd:
                    c9:d4:fb:5a:22:db:30:d4:9a:6f:db:cf:51:0f:da:
                    76:6c:54:5a:11:ed:71:6c:13:01:2f:66:19:be:70:
                    f1:34:43:e4:5f:9f:2c:42:e6:0e:ab:fa:07:da:96:
                    92:38:f1:0f:f6:58:b8:f0:54:41:42:86:6d:dd:a6:
                    9f:7b:6d:61:c0:74:76:36:1a:e9:d4:ef:92:14:ae:
                    50:e8:75:8a:f1:70:7b:b8:ee:97:99:b3:e6:10:f6:
                    c2:f1:4f:22:39:ee:e4:90:b0:ef:0b:62:7f:68:45:
                    e6:fb:36:e2:0d:1e:55:54:0e:77:1c:d2:40:04:28:
                    3f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:44:C2:7E:09:67:D0:28:95:87:06:A4:1B:43:46:C3:53:03:F7:FD
            X509v3 Authority Key Identifier:
                keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6a:3e:33:8a:44:e9:27:97:2b:29:bb:a6:ab:c9:42:77:76:
         60:67:ac:bf:27:1f:3f:4a:5c:1c:b1:9a:ba:05:aa:c6:21:c3:
         d0:7b:25:70:25:a2:a2:60:c9:04:4a:b9:1d:f0:e1:9f:ed:9b:
         fc:03:ed:79:72:a0:70:de:d0:c1:0d:c6:b2:dc:4f:e0:9b:0f:
         e1:a5:24:58:23:98:f3:42:42:10:8b:74:ad:be:ff:bd:2b:b1:
         4f:e1:fd:d5:eb:e0:a7:7f:b0:d0:50:b0:a6:25:05:b8:53:da:
         46:94:44:98:d4:2b:11:97:65:c1:5c:d0:97:86:14:40:b1:fb:
         76:d2:e2:03:5e:f1:57:43:10:4b:03:9f:fa:49:d1:da:54:cd:
         c4:44:18:89:94:39:03:19:b7:50:71:ad:a6:75:a3:70:bc:5b:
         1b:df:5b:32:4c:a8:24:fe:bf:c4:49:0b:54:c9:f5:4a:37:d5:
         41:c6:74:ec:c8:ce:ac:2b:cc:c4:5b:da:24:b8:82:ba:38:c1:
         25:5e:18:c3:1b:0e:90:f1:e6:fa:a5:6b:07:ba:45:e7:40:dc:
         e8:55:70:f0:12:36:12:29:00:d8:40:e3:18:d0:2e:ae:cd:24:
         4c:cb:d0:67:15:52:7d:15:2a:ef:74:b5:16:3f:f7:d3:c6:3b:
         8e:f0:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:07 2026 by rpki-client