Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft
File:                     2Fj3A4iS6EHZxtId9VCm6FJYufM.mft (raw, json)
Hash identifier:          c6KNy+Ycf3leJoOj9XAJfmiIxq6VeuHBXNYJdYbbF60=
Subject key identifier:   A1:0C:3F:15:A8:63:34:83:D9:E7:01:07:84:BC:0F:D5:EA:EC:78:63
Authority key identifier: D8:58:F7:03:88:92:E8:41:D9:C6:D2:1D:F5:50:A6:E8:52:58:B9:F3
Certificate issuer:       /CN=A91ABD41/serialNumber=D858F7038892E841D9C6D21DF550A6E85258B9F3
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Fj3A4iS6EHZxtId9VCm6FJYufM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft
Manifest number:          09
Signing time:             Thu 23 Jul 2026 11:15:30 +0000
Manifest this update:     Thu 23 Jul 2026 11:15:30 +0000
Manifest next update:     Thu 30 Jul 2026 11:15:30 +0000
Files and hashes:         1: 2Fj3A4iS6EHZxtId9VCm6FJYufM.crl (hash: mG6LjQVmucFx5ylHyKXWgFe2ZGBgzGVltKvSuyhAtmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.crl
                          rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Fj3A4iS6EHZxtId9VCm6FJYufM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABD41, serialNumber=D858F7038892E841D9C6D21DF550A6E85258B9F3
        Validity
            Not Before: Jul 23 11:15:30 2026 GMT
            Not After : Jul 30 11:15:30 2026 GMT
        Subject: CN=6a61f7d2-9f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:a8:76:30:bd:e6:30:a3:32:e5:26:f9:dd:
                    62:fa:22:be:84:0b:67:8f:1c:0b:e2:04:8a:46:a9:
                    08:e7:5e:48:9a:40:88:2c:be:2f:73:d0:c9:1c:52:
                    b3:f6:cc:be:fd:1b:a0:1b:fc:44:de:17:e4:fe:d3:
                    d9:d8:50:c6:e0:a6:8b:29:ca:2e:a7:1a:e3:2f:04:
                    a4:35:b7:f6:ac:f4:66:b6:f6:cf:d1:b5:29:35:c9:
                    b7:64:78:4b:fc:3a:bd:2b:68:9a:7d:e1:7d:d9:0b:
                    92:2e:b0:79:e5:9b:19:3e:b0:7f:88:19:41:f5:fb:
                    10:d6:87:7e:c6:20:fa:f8:06:bd:1b:45:1f:0b:ee:
                    30:f6:39:18:97:d4:dd:a5:37:81:37:74:3a:de:61:
                    2e:d9:3c:2b:9e:aa:39:2b:d0:2b:90:75:0c:54:b2:
                    3a:07:7f:7b:23:4b:4f:f4:ea:1d:6a:b3:03:85:01:
                    44:51:cb:1f:e7:bb:4f:54:66:1e:b0:48:6a:92:3e:
                    06:a7:3d:68:6d:4e:f0:aa:0b:d3:0b:22:e8:d0:75:
                    09:cb:3a:91:2f:df:59:8a:0c:76:b8:63:18:15:aa:
                    fb:c1:68:3b:bc:eb:32:2d:0b:10:40:b4:bc:2b:fe:
                    d5:4e:2e:3d:88:c5:6c:bc:09:0a:10:3a:5e:b8:87:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0C:3F:15:A8:63:34:83:D9:E7:01:07:84:BC:0F:D5:EA:EC:78:63
            X509v3 Authority Key Identifier:
                keyid:D8:58:F7:03:88:92:E8:41:D9:C6:D2:1D:F5:50:A6:E8:52:58:B9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Fj3A4iS6EHZxtId9VCm6FJYufM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f0:a8:0f:6e:3b:48:85:c9:6e:72:4b:49:dd:1c:95:11:9d:
         fd:a0:e5:58:23:2c:3c:36:6b:a5:61:f8:e4:47:b8:84:bc:f6:
         62:9a:a5:96:65:48:5b:ca:85:a8:d8:29:0c:88:cf:aa:29:66:
         aa:24:cd:fc:5d:5e:00:ff:99:d6:7f:36:c4:51:16:af:57:5a:
         e5:9a:3d:e6:fc:bd:84:55:17:55:cc:c4:3c:79:39:4c:f1:f3:
         62:21:99:55:67:2d:9f:3a:9d:1a:43:4d:9a:ff:5c:c2:ce:e8:
         e7:01:1f:9a:e0:32:ef:77:be:f9:09:8d:0a:6d:4c:73:da:94:
         48:e3:34:80:54:bd:a3:db:8f:6f:ad:de:c6:be:b8:97:76:ac:
         eb:47:8d:46:81:f9:d6:f7:3d:1f:87:31:fc:54:44:25:7a:c0:
         60:d2:da:19:24:ac:6f:9f:af:99:e1:10:80:28:de:76:79:6b:
         72:c7:18:3c:08:b5:af:67:24:8b:40:17:e1:ae:3a:a5:c0:e7:
         2c:9a:e0:71:56:4b:3d:14:79:5d:e6:59:19:56:f1:fc:93:e4:
         6a:b3:fd:3f:78:7d:36:f5:df:ee:b1:a2:5a:f2:36:b4:24:5f:
         17:73:63:15:c0:cc:cf:6f:c6:c4:4d:83:94:3d:81:7c:83:d4:
         8f:49:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:41:10 2026 by rpki-client