Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
File:                     lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft (raw, json)
Hash identifier:          t/EO8PNTxduwOxZuavzmrTiRAIV36JTJ3Lbkroq/yLQ=
Subject key identifier:   56:8C:E5:11:56:AF:FB:0A:BB:3F:6D:CC:BD:28:FD:02:15:57:43:DE
Authority key identifier: 94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2
Certificate issuer:       /CN=A91CDF78/serialNumber=948E8C11D74BACF16CBF82CD403694E0DB7E94F2
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
Manifest number:          29
Signing time:             Thu 23 Jul 2026 10:49:52 +0000
Manifest this update:     Thu 23 Jul 2026 10:49:51 +0000
Manifest next update:     Thu 30 Jul 2026 10:49:51 +0000
Files and hashes:         1: lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl (hash: WAPTO9Hkpm6guNZx61FL+n9q7FE+S5AihrG3HPMt8Q0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF78, serialNumber=948E8C11D74BACF16CBF82CD403694E0DB7E94F2
        Validity
            Not Before: Jul 23 10:49:51 2026 GMT
            Not After : Jul 30 10:49:51 2026 GMT
        Subject: CN=6a61f1d0-51f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:a4:05:19:f8:d1:de:d1:3e:04:bb:d7:d1:
                    3c:11:4d:65:82:02:86:1f:7d:0d:e7:4a:4e:d8:9d:
                    72:9d:08:01:56:6e:6b:46:81:56:57:0d:7a:07:06:
                    8d:96:5f:7e:2b:6b:25:b3:9a:1a:4b:f4:ef:91:f2:
                    fd:2d:90:e9:31:f0:d4:4b:c5:0e:8b:fa:5d:d0:e5:
                    3f:d8:d3:71:09:e3:f2:1d:d3:50:94:01:6e:a0:3a:
                    0e:d2:eb:80:25:8f:31:da:5f:68:af:92:2f:ec:c3:
                    31:99:be:64:f8:28:0f:92:cf:8b:19:32:3a:0c:3c:
                    b6:27:86:1e:7b:ad:de:da:b9:d3:9c:72:07:7f:6e:
                    4d:70:bb:a1:da:87:17:b1:01:7c:fb:ff:e7:e0:13:
                    8d:ef:32:ef:41:af:40:99:8f:7d:1d:36:1b:50:ac:
                    18:03:96:f0:94:24:b9:26:b1:c3:d5:92:f2:55:99:
                    2d:0e:18:4e:2e:46:ab:82:ef:9c:8e:b4:e4:36:2d:
                    79:ae:05:61:42:84:05:ce:cf:e7:3e:2a:c3:35:9c:
                    73:38:a1:32:e0:a6:d8:9b:c5:70:c5:e5:3a:11:af:
                    8c:00:3e:73:8a:90:3b:76:bc:9c:e7:ab:da:3a:44:
                    db:9b:58:1f:c1:cc:70:5b:e2:3e:53:a4:8e:77:41:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8C:E5:11:56:AF:FB:0A:BB:3F:6D:CC:BD:28:FD:02:15:57:43:DE
            X509v3 Authority Key Identifier:
                keyid:94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:20:2d:22:9b:63:9d:70:64:d5:c5:2c:51:d3:76:ea:9a:04:
         81:e2:14:c9:d3:27:51:4d:e9:b6:a9:11:fa:cd:ae:b1:cc:99:
         a0:f4:a4:ba:4e:f3:5d:93:8a:b2:66:2d:7b:3f:c9:d9:07:16:
         91:68:a6:19:94:05:0d:57:a6:8a:15:c5:7e:b3:9b:94:41:ef:
         26:4a:b9:61:1a:cd:d0:90:61:dc:01:83:ce:1e:05:d9:df:bf:
         bf:bc:8b:e2:27:77:8c:f4:b2:6d:67:a0:59:6a:bd:52:d5:ed:
         e6:e7:2d:0f:65:0a:f4:bf:1c:57:14:40:6c:05:fc:ca:7b:eb:
         b9:30:a0:29:4b:d2:9f:b9:11:df:21:f6:60:ff:ee:b3:07:db:
         ed:65:04:da:01:6a:b7:b7:22:78:8a:8a:68:f0:2d:1b:ec:a7:
         29:78:17:24:c2:6a:01:18:50:b3:03:94:23:ed:33:b1:88:45:
         14:fc:56:09:35:5b:1b:6d:70:bb:1b:c1:37:a9:24:c5:1f:de:
         df:6b:08:4e:b4:d0:bd:44:e3:8f:b8:7c:1f:26:6d:b1:3b:b3:
         d6:d1:59:ae:94:07:58:47:5a:65:3c:d3:1d:8f:a6:21:7a:a0:
         d1:4f:3e:f1:1c:2c:34:28:e4:9f:04:c5:fd:4b:4f:b6:56:8f:
         c3:b6:bc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:29 2026 by rpki-client