Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
File:                     KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft (raw, json)
Hash identifier:          vfRPAVQCmoIrv+STjHb1VDQBqN8FI1aoP4fOdhbB3eM=
Subject key identifier:   CB:CE:42:DE:E8:26:DE:B8:45:51:80:ED:DF:A1:60:08:86:9F:C6:86
Authority key identifier: 29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38
Certificate issuer:       /CN=A91B72D6/serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
Manifest number:          49
Signing time:             Thu 23 Jul 2026 10:21:30 +0000
Manifest this update:     Thu 23 Jul 2026 10:21:30 +0000
Manifest next update:     Thu 30 Jul 2026 10:21:30 +0000
Files and hashes:         1: KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl (hash: uK+uzva0xcbseSZJLYG13oUX5LSWHmylv7hgt3+yuLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl
                          rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B72D6, serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
        Validity
            Not Before: Jul 23 10:21:30 2026 GMT
            Not After : Jul 30 10:21:30 2026 GMT
        Subject: CN=6a61eb2a-e192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:81:54:c3:38:06:66:3a:0f:f5:2f:17:a9:54:
                    e4:8f:82:c1:bb:02:f9:3e:ff:c2:bb:e2:af:f8:b1:
                    f8:2a:26:39:ad:e0:85:21:d7:99:0c:17:3e:45:7b:
                    1f:24:13:d1:24:76:fb:a2:5f:fb:e0:09:77:c0:33:
                    83:4b:b4:c4:fa:7c:c1:a5:85:81:f7:3e:f2:61:e4:
                    90:29:35:84:20:25:e0:22:77:16:7c:19:b6:e5:5c:
                    b9:a7:72:b7:09:db:c3:13:2b:ce:e9:68:a1:c9:d7:
                    7d:3f:45:69:7f:c8:2b:fa:27:45:c8:ba:23:24:50:
                    e9:0e:f9:c9:a0:25:6c:74:95:a3:6a:2b:cd:a1:b3:
                    dc:0b:da:ab:47:92:de:0e:79:da:81:1f:e7:e0:2c:
                    9c:b7:2c:98:2c:d4:7c:6c:df:89:a4:af:38:6a:0f:
                    7c:6a:3e:0a:4b:8d:ca:a9:ed:bd:ce:cf:7f:3b:f9:
                    d8:0a:c7:15:66:51:0a:27:8e:72:71:07:95:7e:b3:
                    bf:cb:e2:38:f2:78:a3:d2:3c:bb:0b:43:b4:06:39:
                    47:cd:6c:5b:b6:47:e8:85:2d:18:8c:51:1f:3d:d1:
                    a8:92:98:12:be:b0:7b:c1:8f:9a:70:07:bc:87:ab:
                    2d:fe:0f:4b:03:82:e0:8f:95:6b:af:08:b6:0a:d0:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CE:42:DE:E8:26:DE:B8:45:51:80:ED:DF:A1:60:08:86:9F:C6:86
            X509v3 Authority Key Identifier:
                keyid:29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ae:fb:ff:99:0b:1c:16:5b:56:a2:e6:59:b2:ea:be:9c:20:
         38:12:6d:9c:e3:36:5f:e7:03:44:c0:e2:c2:4c:ee:5d:57:5f:
         7c:ac:04:cc:69:74:9d:0b:f7:d8:ea:c2:4e:22:60:97:95:0e:
         03:49:47:26:ce:03:f2:ec:69:0f:75:1a:4a:ae:18:54:92:cd:
         a3:b2:34:54:5c:24:ba:ed:90:ed:29:fa:b4:c4:e9:93:60:66:
         eb:f2:31:a2:6f:ad:9a:22:ad:3c:89:a2:7d:9f:e0:ed:9a:c7:
         c4:ed:0d:77:84:ba:c6:ef:25:b2:dc:68:9f:29:b5:02:67:f1:
         34:69:3e:b7:d3:57:42:0c:74:b3:d8:a1:d0:7f:27:7e:02:61:
         f7:3f:ab:4f:c2:ba:4e:59:1f:b9:86:48:db:bc:d3:94:8d:a7:
         e0:9d:28:27:85:d7:09:ee:da:15:af:e1:2f:73:a5:48:5d:6f:
         4f:40:f4:9f:3f:e5:f4:f8:c4:3d:0e:e9:cd:c1:3f:d4:01:ea:
         10:56:f1:a2:49:7a:cd:54:aa:f0:77:5f:18:b2:7b:07:03:e7:
         ba:64:37:bc:23:ab:83:70:df:23:ff:f3:f9:83:6e:8a:b4:f7:
         a3:8c:2d:48:f8:e6:d0:cd:5a:f6:b7:92:73:ba:4f:4d:f5:06:
         25:1c:ef:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:41:24 2026 by rpki-client