Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
File:                     Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json)
Hash identifier:          Wf1Cb5q7CO7LlhPbR4jDldtOJSsg/wnC8pKJOj2Eatw=
Subject key identifier:   88:90:49:43:1F:D2:7B:3A:E5:CD:7E:24:EE:D4:F3:54:75:F3:F1:CF
Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25
Certificate issuer:       /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
Manifest number:          0220
Signing time:             Wed 22 Jul 2026 21:40:28 +0000
Manifest this update:     Wed 22 Jul 2026 21:40:28 +0000
Manifest next update:     Wed 29 Jul 2026 21:40:28 +0000
Files and hashes:         1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: 8YhemGIaBZrdDPYYCuUwqteusElQo3PJ+Cdm9kemkCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325
        Validity
            Not Before: Jul 22 21:40:28 2026 GMT
            Not After : Jul 29 21:40:28 2026 GMT
        Subject: CN=6a6138cc-fc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:b4:e9:51:76:8d:91:0e:a4:7e:81:32:64:
                    67:4b:34:d5:de:db:ba:4e:33:84:b2:e1:8a:11:66:
                    75:7c:4b:a0:70:69:ca:3a:f5:47:82:c5:d1:af:b6:
                    1e:5b:b0:e4:2a:4e:6d:85:71:b7:27:75:16:df:07:
                    67:54:27:24:b4:c9:a7:38:da:96:b5:c1:7a:b3:28:
                    b4:b4:1b:1f:6f:87:93:1a:c0:fc:b5:98:99:69:6f:
                    c8:b3:c9:67:ee:22:4e:c7:91:69:b1:05:be:df:92:
                    9e:a7:07:c4:c3:e1:9a:04:4f:e2:af:6d:64:5f:05:
                    3a:89:48:d7:d3:6b:a0:9f:9d:29:db:a2:6e:c8:59:
                    29:92:d8:15:d7:82:4d:33:5f:6f:4f:63:37:95:53:
                    6c:8c:64:21:6e:25:01:00:34:58:87:85:5a:2c:31:
                    67:21:62:bd:c0:c4:23:aa:20:77:a5:a5:e6:a9:ba:
                    ac:63:18:05:35:bc:f2:fd:74:01:a7:8d:99:5c:85:
                    87:cc:e6:ea:c0:e2:aa:0c:ba:59:24:30:64:4f:18:
                    f2:9b:22:35:70:f9:6a:15:fe:7f:4a:8d:64:f5:aa:
                    6c:6d:f5:4b:bb:4f:6c:ea:72:1b:20:e1:9e:06:16:
                    df:86:d5:19:bc:8b:a4:b1:cb:5e:d3:6e:bd:dd:1b:
                    64:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:90:49:43:1F:D2:7B:3A:E5:CD:7E:24:EE:D4:F3:54:75:F3:F1:CF
            X509v3 Authority Key Identifier:
                keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0e:92:6e:72:3e:5e:ec:32:d7:d0:57:69:05:0d:82:c0:46:
         2f:92:61:02:ae:55:6a:ce:fc:0f:03:67:6a:56:7e:ae:67:dc:
         69:93:a3:b0:40:46:aa:f0:3b:ce:82:5c:ef:b3:b8:b5:16:a4:
         f9:49:8b:78:9c:74:07:eb:94:7a:eb:d5:80:ff:67:85:6b:4b:
         26:98:ae:4e:4c:1b:76:72:f9:7c:74:3c:8b:ba:42:8e:ac:af:
         4d:ed:dd:1e:85:8c:a7:62:8e:a3:9d:6f:87:17:73:9a:6a:54:
         32:90:52:c6:e8:bb:ef:81:7b:a5:67:6e:f3:fc:79:92:1d:34:
         23:89:11:0a:88:78:56:33:ec:a6:8b:e2:dd:dd:ea:3c:c7:c2:
         1c:57:ae:da:be:87:78:70:af:82:b9:a6:9b:65:c2:7e:f3:7a:
         3e:34:90:ad:36:72:c2:b4:c0:2e:b1:de:8a:5d:91:d5:0b:d9:
         16:43:11:da:39:96:d0:1f:25:42:e4:54:3b:95:c3:e2:c9:f3:
         aa:de:2f:c4:06:e7:30:f4:59:df:1d:8d:4b:ec:5b:f0:5f:92:
         8d:e0:a7:86:cd:0a:0b:75:61:0d:88:62:c5:b8:f5:7e:99:f6:
         f2:99:fd:1f:4d:70:d9:62:7f:69:d6:96:4b:09:7a:46:9c:38:
         78:7f:95:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:23 2026 by rpki-client