Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft
File:                     0F9LZe-AtS0_ehTy3BlczyY5I8M.mft (raw, json)
Hash identifier:          Z5HXujPILL5Jl44tL4wI/VvTroi8NBd3TS4pEDNE1Sg=
Subject key identifier:   AB:B0:E7:EF:74:08:60:55:83:A2:32:55:30:07:D1:97:09:E0:44:2B
Authority key identifier: D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3
Certificate issuer:       /CN=A91C7836/serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft
Manifest number:          06
Signing time:             Thu 23 Jul 2026 11:18:03 +0000
Manifest this update:     Thu 23 Jul 2026 11:18:03 +0000
Manifest next update:     Thu 30 Jul 2026 11:18:03 +0000
Files and hashes:         1: 0F9LZe-AtS0_ehTy3BlczyY5I8M.crl (hash: qemcu1xWDPWVdwnBJlGBElUL4exquSi6VMtg7czkSBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl
                          rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7836, serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3
        Validity
            Not Before: Jul 23 11:18:03 2026 GMT
            Not After : Jul 30 11:18:03 2026 GMT
        Subject: CN=6a61f86b-85de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:95:49:f0:d5:bc:4b:85:1c:db:66:25:04:
                    58:35:c8:67:5e:68:3c:e3:52:bc:2e:0a:00:7d:f0:
                    c8:66:86:02:7d:64:0e:b8:51:c9:f3:f5:c4:df:bd:
                    4b:19:9e:5e:3b:f3:1c:de:a5:b5:a8:50:66:ff:16:
                    81:a6:7d:69:22:97:7d:d7:d0:ac:49:06:0d:41:ff:
                    f2:2d:fe:c0:45:67:b1:03:55:c4:db:a9:77:65:c5:
                    fa:93:3d:85:4f:9d:4e:e7:f0:06:0e:60:18:73:ad:
                    ca:6a:4d:d1:af:45:15:07:4f:17:fd:74:8f:61:16:
                    6e:36:67:da:e5:b2:30:5f:13:53:70:01:ed:64:6c:
                    c6:5b:18:56:f4:9b:34:e0:dc:1d:80:97:2f:32:b6:
                    88:bf:21:8f:16:b3:51:12:cf:56:99:f9:a7:7d:66:
                    50:9c:89:aa:f8:cf:b0:f5:7e:9c:5d:78:0c:1e:41:
                    34:e8:c5:ab:15:0f:61:28:34:6f:bc:71:34:38:07:
                    9c:40:29:3f:16:9a:9b:00:9a:ec:89:5f:76:a1:4e:
                    6b:79:a0:76:c1:db:32:1e:49:ce:62:22:ac:e2:cb:
                    32:05:82:95:bf:8f:67:d2:5d:18:a7:0d:2f:0d:6a:
                    d2:bd:c5:9d:3c:df:85:49:f8:d3:8b:cf:1f:a0:ed:
                    99:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B0:E7:EF:74:08:60:55:83:A2:32:55:30:07:D1:97:09:E0:44:2B
            X509v3 Authority Key Identifier:
                keyid:D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:61:63:a4:50:e2:28:70:12:c7:31:51:33:f4:50:18:50:0c:
         cf:c0:53:a2:a6:d4:a4:0c:b3:1c:73:fc:44:0e:90:35:b1:f7:
         07:cf:ec:a9:c9:a4:bd:c4:35:25:65:9d:1d:50:0e:f9:6e:81:
         8d:3c:fc:8d:3d:aa:7e:57:1b:85:6a:6e:3b:a5:e7:cd:da:c8:
         ed:d7:7d:66:f8:57:8e:25:c7:a3:58:63:c0:09:d0:d7:7d:b9:
         fe:93:75:fb:ab:bb:ee:53:79:72:54:70:de:9b:22:2f:d2:3c:
         cf:47:ad:62:5e:b6:53:1e:81:d4:de:19:62:0e:1c:c5:07:a4:
         68:08:d5:44:9c:95:57:30:82:46:d8:86:5d:dc:b3:27:e8:3c:
         ab:ac:69:fb:b0:c3:18:b5:d0:03:50:b2:84:0d:b7:c1:04:17:
         d3:b5:f6:87:35:f7:c4:0e:a4:52:97:bd:4b:df:20:d6:11:05:
         43:77:07:f3:04:1c:7e:62:0c:1c:5c:f5:b5:42:d2:96:01:62:
         b1:ee:34:ba:44:3d:e6:ae:8a:74:88:55:c0:1d:35:68:4c:a4:
         01:07:fe:8a:f2:22:d4:dc:30:1b:11:a4:5e:2f:88:24:2d:62:
         97:fe:b6:dc:f3:c3:c4:a1:7f:9a:13:86:3c:2a:68:42:d2:a1:
         eb:2d:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:36 2026 by rpki-client