Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
File:                     1OdEGcvjVoAT4bz3doRyhsGYhFo.mft (raw, json)
Hash identifier:          dUng6NUSzJAi/S5Xe/EU0bx2DwSgp7fbgp/sAcD8sHg=
Subject key identifier:   CE:22:AC:2A:32:72:3A:2A:C6:07:21:82:5D:55:F2:53:27:2D:3C:19
Authority key identifier: D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A
Certificate issuer:       /CN=A91A547E/serialNumber=D4E74419CBE3568013E1BCF776847286C198845A
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
Manifest number:          2C
Signing time:             Thu 23 Jul 2026 10:45:52 +0000
Manifest this update:     Thu 23 Jul 2026 10:45:52 +0000
Manifest next update:     Thu 30 Jul 2026 10:45:52 +0000
Files and hashes:         1: 1OdEGcvjVoAT4bz3doRyhsGYhFo.crl (hash: AZdyD82K6hSps/HqhbldG8x7xn+zD8wB9A6cJpdQw9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.crl
                          rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A547E, serialNumber=D4E74419CBE3568013E1BCF776847286C198845A
        Validity
            Not Before: Jul 23 10:45:52 2026 GMT
            Not After : Jul 30 10:45:52 2026 GMT
        Subject: CN=6a61f0e0-3fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:80:39:a9:43:3d:82:f9:a2:52:b3:8b:af:
                    16:07:53:73:22:90:ff:a9:68:b2:2d:92:0a:07:1e:
                    6f:f2:6e:0b:5b:0a:18:f6:ba:c8:16:5f:65:63:80:
                    41:f7:ff:af:bd:44:67:8c:e4:f9:b4:50:c7:4f:44:
                    fd:c9:52:e0:a8:93:a8:2e:38:8e:4b:d8:1f:22:4b:
                    0a:a2:5a:6b:b6:b8:9d:1c:49:60:8c:ad:11:5c:a8:
                    a0:a0:f1:a3:aa:0e:d0:4a:a2:b2:35:b4:4d:7b:db:
                    07:fe:82:49:8c:47:6c:b8:8b:6a:1c:b8:68:b9:ed:
                    95:70:59:c4:87:1b:f4:13:c9:52:50:53:7f:9a:92:
                    cb:93:64:ae:97:c9:57:de:7a:c1:4d:f1:3d:f3:53:
                    66:65:91:b9:a3:f8:dc:9b:48:d3:fe:61:9f:cd:f4:
                    bb:94:e9:21:64:cd:2b:4c:4e:1b:fc:ab:50:70:a9:
                    1c:ea:76:b1:ef:b9:04:d1:20:c3:78:7c:65:dd:e4:
                    af:44:28:20:3d:12:b0:1d:d9:60:d5:30:dd:b0:05:
                    12:18:2f:ee:2f:5e:1a:80:13:1e:57:59:ff:b0:4d:
                    0d:a6:a6:4f:40:77:c0:0e:7b:98:34:36:3c:08:48:
                    5f:f4:d6:7d:0c:a3:b5:32:0f:b6:c1:a2:ab:2c:33:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:22:AC:2A:32:72:3A:2A:C6:07:21:82:5D:55:F2:53:27:2D:3C:19
            X509v3 Authority Key Identifier:
                keyid:D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:96:17:67:8e:d7:8b:4e:21:90:a0:88:af:13:69:ba:e5:bf:
         99:e0:fe:05:fc:ed:d6:6c:0a:ea:7e:4a:b2:13:6e:47:49:e3:
         a8:38:9b:c4:5f:3f:7a:53:ab:3c:ba:39:0e:44:fd:1b:20:80:
         25:b7:22:be:79:fb:2e:bf:32:b7:c6:4b:2e:73:fe:5c:73:2c:
         e3:d0:14:ab:99:dc:1f:fa:dd:d0:ff:47:21:4f:70:32:55:e6:
         93:30:2a:b0:d7:80:4f:5b:20:06:77:40:5f:b1:b7:a6:e1:53:
         6d:23:c2:1c:08:a4:97:f1:8c:f8:8a:ed:a7:e9:d8:18:37:35:
         1c:d5:a4:0a:6f:bf:87:3a:88:9c:6f:bc:19:fd:b3:cb:f6:a7:
         34:07:b9:c2:1c:5c:36:90:90:49:4d:f3:84:7b:1b:5f:bb:b8:
         3b:5e:04:6a:ca:6d:07:c1:9c:bc:9c:60:90:35:c1:f7:de:65:
         48:6f:c0:42:30:49:e4:e6:42:df:46:3e:bd:62:23:ee:d8:29:
         45:f3:ea:e7:50:41:f0:57:58:45:e0:de:bc:5e:0e:74:88:9b:
         de:89:09:b7:aa:1e:d3:c2:f7:f7:35:95:16:9c:e1:b0:20:53:
         da:98:4e:22:ce:47:67:bf:32:bf:e9:1c:cb:c4:77:67:b9:4c:
         47:1f:46:82
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NTQ3RTExMC8GA1UEBRMoRDRFNzQ0MTlDQkUzNTY4MDEzRTFCQ0Y3NzY4NDcyODZD
MTk4ODQ1QTAeFw0yNjA3MjMxMDQ1NTJaFw0yNjA3MzAxMDQ1NTJaMBgxFjAUBgNV
BAMTDTZhNjFmMGUwLTNmZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5YYA5qUM9gvmiUrOLrxYHU3MikP+paLItkgoHHm/ybgtbChj2usgWX2VjgEH3
/6+9RGeM5Pm0UMdPRP3JUuCok6guOI5L2B8iSwqiWmu2uJ0cSWCMrRFcqKCg8aOq
DtBKorI1tE172wf+gkmMR2y4i2ocuGi57ZVwWcSHG/QTyVJQU3+aksuTZK6XyVfe
esFN8T3zU2Zlkbmj+NybSNP+YZ/N9LuU6SFkzStMThv8q1BwqRzqdrHvuQTRIMN4
fGXd5K9EKCA9ErAd2WDVMN2wBRIYL+4vXhqAEx5XWf+wTQ2mpk9Ad8AOe5g0NjwI
SF/01n0Mo7UyD7bBoqssM3g5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUziKsKjJy
OirGByGCXVXyUyctPBkwHwYDVR0jBBgwFoAU1OdEGcvjVoAT4bz3doRyhsGYhFow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1NDdFL0JDQkU0RTIyNDFE
QTExRjE5RERDODkwMkI1ODMzNzczLzFPZEVHY3ZqVm9BVDRiejNkb1J5aHNHWWhG
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMU9kRUdjdmpWb0FUNGJ6M2RvUnloc0dZaEZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1
NDdFL0JDQkU0RTIyNDFEQTExRjE5RERDODkwMkI1ODMzNzczLzFPZEVHY3ZqVm9B
VDRiejNkb1J5aHNHWWhGby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA4lhdnjteLTiGQoIivE2m65b+Z4P4F/O3WbArqfkqyE25HSeOoOJvEXz96U6s8
ujkORP0bIIAltyK+efsuvzK3xksuc/5ccyzj0BSrmdwf+t3Q/0chT3AyVeaTMCqw
14BPWyAGd0Bfsbem4VNtI8IcCKSX8Yz4iu2n6dgYNzUc1aQKb7+HOoicb7wZ/bPL
9qc0B7nCHFw2kJBJTfOEextfu7g7XgRqym0HwZy8nGCQNcH33mVIb8BCMEnk5kLf
Rj69YiPu2ClF8+rnUEHwV1hF4N68Xg50iJveiQm3qh7Twvf3NZUWnOGwIFPamE4i
zkdnvzK/6RzLxHdnuUxHH0aC
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:55 2026 by rpki-client