Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
File:                     e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json)
Hash identifier:          4jjkbJPV/MfapsA/zVnHvMy+M+fW4jhc7mg7VMSHgd0=
Subject key identifier:   3A:91:C8:D9:34:1A:26:AB:F6:06:3A:90:6F:8B:C4:DB:D2:7F:D0:84
Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8
Certificate issuer:       /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8
Certificate serial:       3568
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
Manifest number:          3567
Signing time:             Wed 22 Jul 2026 14:19:55 +0000
Manifest this update:     Wed 22 Jul 2026 14:19:55 +0000
Manifest next update:     Wed 29 Jul 2026 14:19:55 +0000
Files and hashes:         1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: M2Kh5Y2FibvIolmEIuYuxmFttT/J6mDp9Y2kMem+rHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl
                          rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13672 (0x3568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8
        Validity
            Not Before: Jul 22 14:19:55 2026 GMT
            Not After : Jul 29 14:19:55 2026 GMT
        Subject: CN=6a60d18b-81df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1a:86:b8:6d:3a:da:3f:cf:df:90:97:59:be:
                    e3:3b:09:9b:3b:f3:1a:c6:fb:d3:2e:82:06:aa:74:
                    c3:99:f9:f0:cf:9b:8a:56:45:0f:0f:d8:2f:21:88:
                    dd:66:a2:06:3d:05:ca:f7:47:cf:6a:d6:6c:7c:3b:
                    4e:47:73:d8:93:12:64:62:0d:e8:87:37:65:13:98:
                    99:cb:24:a4:c6:cc:fe:0b:de:6e:45:6d:e2:58:01:
                    ac:b0:e2:9b:3d:aa:09:c2:a0:0e:e1:16:50:11:5d:
                    09:f8:f8:76:34:cf:bf:ea:9e:8a:3a:fe:68:fa:6e:
                    29:81:9b:35:24:96:c2:ed:57:6c:9d:e9:a8:f5:3e:
                    b6:c6:5e:9d:29:63:5c:67:83:09:ff:cd:46:d2:43:
                    8c:8f:93:aa:9c:86:5b:46:a6:80:c4:b3:94:29:3f:
                    1d:98:92:95:6e:7e:00:a7:5b:d4:6d:f9:44:e7:02:
                    aa:c5:a0:46:77:b7:19:40:a2:8c:ea:33:7d:e9:c0:
                    a4:65:53:17:f9:08:af:d4:d1:81:ed:54:90:cc:44:
                    c9:be:ce:b3:10:88:8f:ff:92:63:7a:90:5c:ae:a2:
                    37:58:86:e9:e5:83:8a:b2:88:97:98:39:df:30:cd:
                    80:36:e6:af:ec:e3:73:68:5f:ae:e6:22:34:da:64:
                    98:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:91:C8:D9:34:1A:26:AB:F6:06:3A:90:6F:8B:C4:DB:D2:7F:D0:84
            X509v3 Authority Key Identifier:
                keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:15:f6:33:f4:79:5c:61:4d:86:19:97:35:31:4e:10:fe:e1:
         8a:c1:8e:a8:d9:7b:61:62:a7:c3:07:ff:9e:17:06:6c:fe:b0:
         49:b9:5f:59:b5:df:61:33:c9:e5:84:32:ac:0d:bc:73:f2:8f:
         1d:ab:0f:58:03:f4:1a:6f:ce:0e:c8:3e:25:42:2a:94:f2:13:
         67:00:cb:f1:ab:b0:61:a2:9e:5f:bc:65:c7:6c:62:b5:c7:f9:
         9e:84:60:c3:9b:a4:d0:ae:2b:51:a5:68:8e:6b:2c:42:4e:1a:
         8d:11:0b:40:8d:a8:f6:df:7e:64:17:31:fd:6f:bb:83:ee:e9:
         76:4b:33:05:ba:37:e2:8e:cb:34:c5:ce:49:46:e7:d7:7f:4d:
         da:a6:5c:37:55:e1:fe:5d:53:16:a6:74:84:bb:47:03:23:dc:
         34:a4:0c:76:7a:90:1a:06:74:24:36:87:df:8a:d5:e6:8c:90:
         ed:89:06:ea:61:91:81:8e:d6:23:8d:65:8b:d1:ad:d9:82:06:
         31:8f:21:f2:70:74:f9:f9:95:6a:96:03:83:64:bf:04:09:ee:
         d1:b9:d0:9a:12:05:66:56:06:6d:ce:24:d2:90:73:64:fd:bb:
         87:06:ae:35:41:3e:2d:7f:d5:6a:3b:51:c0:90:ab:cf:d4:74:
         c5:bc:5e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:57 2026 by rpki-client