Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
File:                     l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json)
Hash identifier:          Rfjj0WnWbRj1mnxMr495twHT5eeYhas0pT9PDEl8hRY=
Subject key identifier:   9D:80:1C:86:0C:B7:3E:3A:66:21:07:59:50:77:8D:34:00:0E:B8:93
Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC
Certificate issuer:       /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
Manifest number:          91
Signing time:             Mon 21 Sep 2026 07:28:24 +0000
Manifest this update:     Mon 21 Sep 2026 07:28:24 +0000
Manifest next update:     Mon 28 Sep 2026 07:28:24 +0000
Files and hashes:         1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: MpV5eyzzr8BoUmMrQ4yd3LcqdWD/TUCMO/HfLOF+QSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
        Validity
            Not Before: Sep 21 07:28:24 2026 GMT
            Not After : Sep 28 07:28:24 2026 GMT
        Subject: CN=6ab0dc98-16f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:2a:e7:4e:8e:c7:4e:e7:5d:0a:47:fd:72:
                    57:44:79:4f:01:40:06:15:9b:19:6a:16:47:c7:c2:
                    c6:cb:50:39:1b:57:6d:40:3d:16:1c:16:a5:b3:bb:
                    f4:8d:10:3b:d3:a4:ce:4c:38:ed:60:87:07:d5:21:
                    a0:7b:22:44:b8:b0:a5:6d:e4:a8:99:14:27:ed:4e:
                    b1:80:8e:23:77:09:5a:b6:38:ea:79:b1:e8:99:9d:
                    37:d9:df:fa:96:5a:77:56:a5:af:62:66:33:5d:8b:
                    cd:0c:bf:7b:91:cd:a3:8a:ee:e9:b0:9d:c0:ce:38:
                    75:63:d1:b5:97:93:d4:c0:e5:f4:13:02:76:d5:69:
                    8f:5d:c0:30:97:bd:77:98:c2:76:59:d9:d9:d6:94:
                    b2:14:79:0e:15:86:eb:37:a9:90:44:35:82:84:51:
                    ac:48:05:8b:04:a5:ca:f2:94:fd:d5:a6:a6:07:9e:
                    7c:f6:10:4f:84:46:41:ef:71:61:b6:d9:b0:d5:4c:
                    85:cc:65:d7:db:d1:09:9b:b9:5b:bb:1b:df:11:66:
                    9c:4c:8d:0c:fc:a7:0f:62:90:31:26:47:90:eb:5a:
                    85:d4:75:2a:0a:dd:99:9a:cf:87:94:75:da:80:f8:
                    5b:b1:e1:cd:a0:6e:fb:0f:eb:8c:f7:28:bc:94:2b:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:80:1C:86:0C:B7:3E:3A:66:21:07:59:50:77:8D:34:00:0E:B8:93
            X509v3 Authority Key Identifier:
                keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:38:e7:ad:55:ec:b1:e8:dc:79:b3:0f:57:3b:0e:14:0d:2c:
         0e:0c:51:fa:76:57:7f:6d:ff:1b:bc:8e:c6:3b:57:e6:2b:f8:
         91:f6:ea:68:1e:40:c5:d3:8d:be:45:5e:f5:bf:71:38:dd:cc:
         a8:01:fc:58:fb:87:27:52:54:b6:b6:72:5b:88:0d:13:74:a0:
         28:83:a3:d6:35:d2:de:17:24:6c:3f:97:4b:47:97:06:ff:e4:
         6d:ff:cb:04:c5:73:85:e8:76:db:4e:6e:b3:d6:e4:97:80:f4:
         96:0f:99:d2:45:4f:82:ca:33:da:7c:54:3f:a9:ac:3a:28:17:
         85:07:54:50:8c:a0:95:71:63:36:72:2f:c3:aa:4d:da:fe:53:
         9c:9c:5b:b1:fc:6e:88:50:f4:0d:40:42:54:34:9e:f7:0d:29:
         cd:f8:ed:d6:60:5b:18:e6:9b:85:8d:6c:10:3f:d9:c4:2c:4a:
         0a:64:b2:6f:81:10:0d:c6:74:a8:10:1b:29:66:a1:c1:8e:38:
         41:f7:1d:8b:ea:72:ce:51:cb:0a:e6:7a:63:6d:ba:7c:1f:8a:
         5f:ed:0f:ad:6f:31:7c:d4:13:11:42:3c:b0:a7:76:41:72:e0:
         b2:fe:f9:7a:60:ce:57:29:00:df:71:2e:b4:4b:44:2e:fe:ea:
         c4:a2:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:48:09 2026 by rpki-client