Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
File:                     l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json)
Hash identifier:          KkjTT8+YUt0kUNEhHGcDE+fU+wUTACupD9mZukZZDsg=
Subject key identifier:   E4:6A:61:2D:82:5C:6B:96:16:DD:D4:12:34:FE:8E:03:CB:9A:A6:57
Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC
Certificate issuer:       /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
Manifest number:          72
Signing time:             Thu 23 Jul 2026 09:46:13 +0000
Manifest this update:     Thu 23 Jul 2026 09:46:13 +0000
Manifest next update:     Thu 30 Jul 2026 09:46:13 +0000
Files and hashes:         1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: n8VmEfHWvA0qbd6QaSh/3LkPpEg8NDSMndVu/i8kvOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
        Validity
            Not Before: Jul 23 09:46:13 2026 GMT
            Not After : Jul 30 09:46:13 2026 GMT
        Subject: CN=6a61e2e5-f0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:99:69:32:19:92:a9:c6:97:03:e8:18:7b:
                    ee:e5:40:d7:b1:32:ad:1c:85:e6:f2:4e:bd:db:90:
                    e6:26:b3:6a:24:cc:a9:74:2c:91:8b:99:77:e3:90:
                    ed:2f:80:8f:f8:51:90:d6:07:fd:26:66:97:80:8f:
                    5f:c6:b7:93:5f:af:02:d2:7b:d5:47:e2:4b:98:7d:
                    62:ae:b8:2a:35:e7:5a:4a:9d:2c:e5:e3:a1:08:ac:
                    b1:b2:8e:01:3b:e3:b7:8f:83:8c:68:83:dd:d3:d5:
                    33:87:12:28:39:54:31:f4:ad:ec:62:a2:eb:d6:b1:
                    4a:6f:eb:22:13:50:c9:bc:78:f8:a8:ee:ca:51:04:
                    25:a4:ab:2c:a4:78:aa:c1:7c:8f:67:32:f4:db:65:
                    12:56:b9:69:75:d9:04:32:d0:9d:f2:d3:1c:a1:c8:
                    0f:4c:b3:5f:32:d3:30:fd:8f:1c:41:85:80:aa:f7:
                    98:1e:b5:be:bb:17:fa:eb:7e:4d:9a:2c:96:9a:df:
                    bd:08:fc:52:2d:45:a9:69:57:c5:c6:49:a8:2b:65:
                    f7:b1:52:ec:d1:e1:73:d6:08:fe:ba:d0:4a:7b:26:
                    4e:31:db:6d:35:14:27:c4:a9:19:e7:cf:3b:27:6b:
                    29:4b:b8:b0:d6:71:87:43:a8:17:79:b9:0d:1f:bf:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6A:61:2D:82:5C:6B:96:16:DD:D4:12:34:FE:8E:03:CB:9A:A6:57
            X509v3 Authority Key Identifier:
                keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c7:52:70:d3:eb:36:2b:cb:27:43:0c:84:f3:47:94:da:f3:
         b9:b8:03:19:5e:b8:e3:7e:63:34:ae:3f:43:b2:86:63:13:0f:
         2c:34:73:95:a9:07:3e:c8:9e:b5:fb:27:79:6d:3e:2b:1e:7d:
         b7:8f:ac:30:7c:c1:16:6f:c7:a4:e3:4c:48:85:13:75:89:69:
         ea:f9:d6:df:3b:8d:3b:2e:87:b1:bd:a7:12:1f:35:3d:dd:b1:
         3a:af:9c:4c:4f:69:eb:50:84:f2:33:17:fb:db:21:6d:80:fe:
         60:35:84:f2:19:0a:4e:17:8d:bb:8d:f9:47:70:c2:b4:6b:26:
         76:2c:18:af:f4:d2:60:ee:9b:a9:5b:4b:59:ce:78:78:3a:7c:
         cc:ab:3d:69:ba:09:79:d9:f7:ad:c0:16:ef:98:7e:e8:c3:f9:
         34:ec:f7:11:e9:37:df:af:be:65:52:91:51:82:d1:01:fe:10:
         0a:6a:a6:90:9e:6f:fe:a2:2d:ee:b7:1f:40:ba:d6:1f:6b:1b:
         85:36:d3:f2:b4:07:c3:f4:e8:94:09:88:1c:49:c0:21:e4:12:
         a4:77:aa:14:7d:f2:12:9d:e1:8f:2b:35:0e:e3:35:87:c2:16:
         88:67:d0:ed:a5:31:3b:b3:71:f1:c6:a8:0b:f0:be:dd:a6:82:
         35:8a:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:04 2026 by rpki-client