Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
File:                     iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json)
Hash identifier:          RsV6QLldX+HAN/qN8RFOeGJL91T7JgZC+cqoQMieKv4=
Subject key identifier:   B1:30:AB:66:E8:65:66:C5:65:38:75:79:56:31:C6:6D:18:4B:5F:1D
Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF
Certificate issuer:       /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
Manifest number:          0164
Signing time:             Thu 23 Jul 2026 06:29:19 +0000
Manifest this update:     Thu 23 Jul 2026 06:29:18 +0000
Manifest next update:     Thu 30 Jul 2026 06:29:18 +0000
Files and hashes:         1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: kEa5D0zaHD+NgjX3gf8fUayGGHBv79cRu0fkjFxrZX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
        Validity
            Not Before: Jul 23 06:29:18 2026 GMT
            Not After : Jul 30 06:29:18 2026 GMT
        Subject: CN=6a61b4bf-457e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:3b:93:28:16:81:77:24:9f:3e:4b:d8:16:
                    ad:57:e4:92:e4:05:9a:f8:0b:6c:e1:ce:c6:f7:02:
                    86:50:45:10:dc:22:d7:f6:9f:84:e1:f3:8b:9e:35:
                    4a:d1:0e:9b:c7:4d:dc:86:f7:d0:fd:cb:92:15:8b:
                    df:d4:ee:1d:6e:10:a6:de:2f:8a:a3:8d:22:4c:f2:
                    46:e2:8f:da:3a:8e:99:c9:78:06:f7:20:8e:e9:48:
                    72:ca:a1:66:27:16:0e:cf:1a:d9:18:b0:e0:37:4a:
                    f5:fa:e9:0a:e1:26:3c:0a:28:89:35:60:83:28:eb:
                    d4:ac:f3:ee:5c:a2:3a:70:47:99:a7:1f:be:9d:a2:
                    f5:b6:32:a3:31:01:bf:94:bb:f1:51:b0:96:b6:b9:
                    9e:87:ad:f8:9b:0b:89:79:a3:da:4d:75:5d:fb:e2:
                    6b:2e:26:d8:ac:9f:21:3d:b2:9c:e1:95:f2:87:99:
                    ee:0f:d0:7b:b8:89:83:f1:72:c4:c1:92:ae:9d:b5:
                    79:10:e8:c6:c1:03:7f:58:86:7d:72:df:ca:35:e1:
                    e0:00:4e:70:93:9d:13:5c:25:c5:df:4a:0d:47:7b:
                    90:e0:bd:2b:ce:75:fe:94:60:33:e3:71:b8:d8:65:
                    9e:ad:3a:1a:cc:f4:b2:55:c1:50:f2:11:90:73:e7:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:30:AB:66:E8:65:66:C5:65:38:75:79:56:31:C6:6D:18:4B:5F:1D
            X509v3 Authority Key Identifier:
                keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:cb:96:1c:ac:6e:40:23:3b:0c:9a:13:d4:1e:12:85:3a:
         db:64:a1:95:33:5b:24:6f:cd:e4:9a:cb:a3:7d:43:71:5b:9c:
         6d:af:76:26:de:a0:47:f8:24:10:cc:ed:8a:ff:6e:ce:f9:7f:
         20:6e:6c:b0:6d:6d:5a:42:31:69:f9:fb:5e:ac:71:c9:68:86:
         a9:4c:6e:0c:18:d2:57:16:71:73:e3:d3:58:55:c2:ea:24:3f:
         e3:47:e3:39:9b:00:2e:31:de:84:ba:c9:21:5c:73:19:ce:2e:
         0b:80:b5:a8:85:22:83:4c:51:7c:11:58:e9:65:50:db:b7:25:
         55:a3:89:e4:2f:94:f7:e8:1f:71:f3:a6:d5:4d:ce:45:76:c7:
         b0:e2:89:42:b0:a7:79:16:6b:89:8d:20:c5:58:c7:f8:5d:14:
         18:a8:45:de:8f:81:f3:18:d2:58:49:f2:27:13:19:a5:8d:a9:
         47:eb:af:b4:39:ab:19:d1:87:bf:a1:1e:f4:a4:75:dc:bb:ca:
         4e:44:e7:05:1a:9d:19:5a:e1:21:b1:cc:8b:28:26:98:86:4f:
         d5:c9:aa:e5:b6:f8:54:a8:0d:21:90:4f:7c:ad:8c:40:cb:d4:
         2a:31:bd:c1:b1:31:63:30:f9:51:e7:df:b4:cc:98:b2:97:08:
         f7:21:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:55 2026 by rpki-client