Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
File:                     E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json)
Hash identifier:          oA+o2ji6PbvbpI5YiFuu7nWEnq3++JY96xERceuMWGE=
Subject key identifier:   21:59:48:87:D0:E7:E6:D4:57:C1:FF:6E:BA:CE:50:8B:70:AB:6C:AF
Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57
Certificate issuer:       /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57
Certificate serial:       25DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
Manifest number:          25DE
Signing time:             Wed 22 Jul 2026 14:49:18 +0000
Manifest this update:     Wed 22 Jul 2026 14:49:18 +0000
Manifest next update:     Wed 29 Jul 2026 14:49:18 +0000
Files and hashes:         1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: bHx9DVZsTUEJGzLhnXDmBpNUngqxzbfbJilFXOophaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9694 (0x25de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57
        Validity
            Not Before: Jul 22 14:49:18 2026 GMT
            Not After : Jul 29 14:49:18 2026 GMT
        Subject: CN=6a60d86e-2e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1b:e9:a2:a0:d2:f1:88:51:5c:49:60:7a:85:
                    d4:6b:36:48:97:56:de:f8:8c:8a:2b:4b:d8:de:6e:
                    67:7b:55:c8:a4:75:a7:5f:d7:dd:ed:72:06:fc:78:
                    1c:c9:33:bf:0a:fb:e3:c4:69:4c:7d:1d:f1:03:92:
                    77:3c:b7:15:df:18:d8:75:04:45:46:22:80:0f:31:
                    04:02:8d:c0:40:ac:0a:3d:0b:70:11:c3:01:b8:35:
                    ad:b6:7c:bf:96:c9:f5:e7:f9:4a:0f:6a:90:52:80:
                    c0:39:f3:65:9c:6e:5b:b9:59:b4:fa:ea:d0:58:4c:
                    db:34:1e:35:9b:8f:37:38:50:a3:4d:2f:89:c3:90:
                    7c:b9:de:f1:2a:45:fa:11:5b:d4:0f:f4:3b:6e:93:
                    c5:58:fb:6d:50:08:4d:29:81:75:7a:96:09:18:d5:
                    0c:6e:1d:d5:19:e1:d8:bf:ae:ee:94:57:37:0f:72:
                    d1:2e:be:30:10:63:f5:a7:34:5b:00:b3:ed:a3:f7:
                    39:06:63:a6:67:3b:ca:4c:58:b5:00:7d:23:e6:bc:
                    b6:e9:d9:ce:9e:33:52:55:96:87:51:59:ca:ac:1d:
                    09:c7:5a:25:a4:bc:48:cd:7c:c0:cb:70:01:25:ca:
                    c6:e0:a4:4a:eb:e2:3a:0a:8d:6d:2f:95:cd:c1:d7:
                    7c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:59:48:87:D0:E7:E6:D4:57:C1:FF:6E:BA:CE:50:8B:70:AB:6C:AF
            X509v3 Authority Key Identifier:
                keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:02:13:42:65:c3:6e:7a:6b:4c:13:15:a5:f6:f3:fa:59:ca:
         74:a4:cc:6d:c4:2d:5b:2c:b1:2c:7c:37:a8:4b:95:07:59:af:
         ce:4f:a5:0a:e5:79:d7:98:51:83:c8:18:42:4b:eb:b0:41:a6:
         af:37:8a:f1:cd:03:b6:3c:cd:5c:30:34:4c:b0:3e:ec:7c:c6:
         7f:4d:7d:9e:64:42:d4:ca:c4:e4:63:e7:9c:2d:93:7e:29:66:
         96:b6:62:0f:42:bc:ff:16:c5:34:1c:8d:81:4b:31:5f:32:0b:
         1d:93:26:26:81:f1:83:ec:74:c7:c1:c9:e3:8c:fc:b5:3f:57:
         97:c8:48:f1:4e:29:1c:5e:0c:75:80:89:df:43:29:f9:a7:9b:
         1e:44:b9:44:5b:89:8a:30:cd:13:f4:50:de:7b:2e:fd:d9:99:
         9c:00:fc:af:68:30:a0:b4:85:26:88:be:20:11:b2:81:18:45:
         7d:90:10:6d:a2:43:6d:bb:72:72:aa:8e:52:ad:c0:d7:55:6f:
         f0:3b:bf:9e:5c:ac:41:9e:a9:40:86:e8:12:b3:f1:77:60:5b:
         6c:eb:74:bc:4b:72:41:a8:9b:9d:5e:c3:b6:36:4c:e7:0b:bd:
         ce:56:6f:b0:d7:19:89:09:3b:29:14:35:85:fa:4e:1c:bb:2a:
         dc:a9:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:49 2026 by rpki-client