Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
File:                     Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft (raw, json)
Hash identifier:          CbhD4j+yfMXMDvdG/PCS6RlI+1+a6/mChfZLq4/R8U0=
Subject key identifier:   F8:5B:96:5C:D7:CF:CD:7E:68:07:28:17:2D:5F:1A:F5:7A:F5:25:A5
Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26
Certificate issuer:       /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
Certificate serial:       064C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
Manifest number:          0643
Signing time:             Wed 22 Jul 2026 23:26:33 +0000
Manifest this update:     Wed 22 Jul 2026 23:26:33 +0000
Manifest next update:     Wed 29 Jul 2026 23:26:33 +0000
Files and hashes:         1: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl (hash: erG1IlpsVJ4Dd5RUQHdtL++2M7BEs5T6jVCBgRqxIGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl
                          rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1612 (0x64c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B67B0, serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
        Validity
            Not Before: Jul 22 23:26:33 2026 GMT
            Not After : Jul 29 23:26:33 2026 GMT
        Subject: CN=6a6151a9-4eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:b8:b9:f0:4e:d0:3a:dc:0d:06:86:40:a3:
                    c0:ea:d7:36:d8:bc:33:f2:36:a0:44:9b:1b:c0:e3:
                    e4:47:5d:f0:ce:fa:14:ae:21:b9:49:e8:c8:99:52:
                    2b:58:f2:b4:d5:70:41:ee:57:22:26:22:62:33:5f:
                    27:65:38:14:63:1a:54:1c:2f:7c:d3:c7:ff:40:9e:
                    57:0a:32:db:16:f8:29:c6:38:b1:13:ec:4f:33:f3:
                    1a:27:28:d9:57:29:fe:94:ba:96:69:0f:58:e9:41:
                    61:a3:fb:34:1a:30:a8:e9:4e:4b:d1:08:a2:d1:f3:
                    7b:66:76:15:e2:93:a7:27:8f:50:75:ed:3b:e1:10:
                    11:f6:8c:a2:d0:4b:85:9d:73:bc:7f:68:f1:38:13:
                    de:1f:ff:ad:fc:28:c7:5f:20:59:d8:9b:aa:06:82:
                    f3:8a:2e:3f:7e:ab:9e:69:b2:cb:24:11:a6:51:aa:
                    6a:57:a2:ec:1a:28:b0:98:3d:b4:98:9a:6c:c0:93:
                    1a:c5:37:61:6c:31:dc:62:cf:e0:a6:1c:36:3a:9e:
                    11:6a:f5:f9:f4:a7:e7:8f:ed:20:71:c4:1d:6a:59:
                    91:ef:6f:17:eb:a4:1d:b0:9e:55:0c:38:4a:8e:fd:
                    2a:a5:31:70:e0:64:0c:f0:79:01:39:d9:4a:f5:6b:
                    8d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5B:96:5C:D7:CF:CD:7E:68:07:28:17:2D:5F:1A:F5:7A:F5:25:A5
            X509v3 Authority Key Identifier:
                keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3d:02:6b:c9:95:74:78:c7:0f:df:0c:78:b0:67:c6:bb:a8:
         d6:ed:92:04:27:a0:d1:0d:cd:12:f7:d9:28:0e:a6:f2:b1:f2:
         da:a7:68:b8:2f:cd:32:f2:d6:6a:b1:d5:06:7b:9a:dd:85:62:
         67:aa:25:47:d0:56:fb:55:29:86:50:de:a0:36:e4:87:0e:60:
         d2:d8:c1:25:21:38:c8:1d:49:a4:b3:37:ff:71:46:38:83:7e:
         f5:67:ee:5b:45:08:bc:fa:1f:af:4b:df:40:6f:52:6b:50:c8:
         d9:a1:fa:32:d3:13:36:88:ab:76:ea:3e:c2:75:43:2c:2e:d9:
         5a:f0:53:e0:77:3e:fb:0a:bd:7f:bd:31:5e:ac:56:6e:22:d5:
         4b:62:39:1d:82:36:d9:7d:8c:3f:7c:40:84:85:39:76:51:4e:
         c0:ce:c8:3e:21:8a:40:0c:42:8c:0f:fd:e0:41:07:ca:35:56:
         30:87:85:6d:67:53:47:49:b9:7d:ba:cf:77:7a:19:5a:33:eb:
         2f:c9:eb:e5:79:df:c2:b4:a6:88:d2:17:dc:48:40:d2:91:d8:
         f7:3f:26:3e:8b:f0:aa:8d:86:e3:2a:b5:94:e0:ca:80:b5:23:
         e2:76:6a:3c:44:ba:80:bd:29:3b:a6:95:f2:54:9f:04:a2:fe:
         cf:83:5f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:23 2026 by rpki-client