Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft
File:                     jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft (raw, json)
Hash identifier:          LPQkKD1ChQOlbQfBSVdggf5OTdw60qOTMat7EGU6FsI=
Subject key identifier:   E5:DA:95:70:ED:02:F9:42:6D:07:A5:71:EB:78:2E:B6:CF:20:B3:62
Authority key identifier: 8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF
Certificate issuer:       /CN=A91CEE6D/serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft
Manifest number:          9D
Signing time:             Thu 23 Jul 2026 09:10:10 +0000
Manifest this update:     Thu 23 Jul 2026 09:10:10 +0000
Manifest next update:     Thu 30 Jul 2026 09:10:10 +0000
Files and hashes:         1: jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl (hash: 9IlD4RnoGxgQAcfC5SYPYuk0v8GpHeOaPx8QOFZlXbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl
                          rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEE6D, serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF
        Validity
            Not Before: Jul 23 09:10:10 2026 GMT
            Not After : Jul 30 09:10:10 2026 GMT
        Subject: CN=6a61da72-a486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:c1:1c:ae:92:05:95:03:f3:2c:e9:f6:66:
                    e6:0a:88:ae:95:e0:6d:64:af:7a:28:6a:83:54:9a:
                    f1:2c:5d:e0:d9:01:34:09:2d:ec:2e:e6:bd:02:b0:
                    35:3c:49:ec:b9:3d:0d:e4:e0:44:28:f6:a7:6a:a3:
                    92:05:31:10:d2:11:d2:2c:0a:77:6a:79:6d:67:5f:
                    57:87:41:3c:e1:89:e9:36:3d:ac:d1:1c:ab:ed:85:
                    7a:41:23:09:20:f8:9b:59:33:ec:89:f7:89:f0:e3:
                    84:a2:f1:7e:d7:05:ff:cf:9b:f9:a3:27:8c:38:2f:
                    c3:0d:f7:fe:bf:f8:97:3d:24:29:1e:3b:63:1a:f6:
                    df:ad:1a:9f:8a:ad:c4:7c:b2:48:8f:30:6e:fe:b1:
                    a4:13:bf:f5:e9:3c:f7:2f:c9:09:62:65:b8:88:f5:
                    e2:b0:aa:f1:51:9b:c6:69:11:f7:54:3e:04:b8:fb:
                    49:01:c2:d8:f4:b6:2b:51:bf:0c:8f:f6:c9:48:c9:
                    95:d0:4a:43:c6:fa:34:81:9d:56:4c:7a:47:3d:14:
                    8a:b7:5a:e6:20:45:89:35:fa:23:85:18:26:be:8e:
                    ca:c2:41:7a:b6:5d:37:80:1f:0b:1d:05:15:45:a1:
                    82:01:6a:9a:30:88:7b:92:b8:db:29:9a:66:80:ce:
                    7b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DA:95:70:ED:02:F9:42:6D:07:A5:71:EB:78:2E:B6:CF:20:B3:62
            X509v3 Authority Key Identifier:
                keyid:8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e2:db:54:32:c1:25:40:08:96:05:e9:1e:c1:02:86:3d:b1:
         8d:77:07:b0:9f:c0:a3:de:d5:65:3f:89:66:ad:72:ab:6a:23:
         27:3e:70:dc:73:5e:e0:7a:98:3f:d6:46:3d:b2:bb:22:ab:67:
         1d:67:1b:e8:7b:4e:f4:5f:e8:5f:24:34:80:99:9a:c9:cf:91:
         23:b2:96:3b:5f:29:65:3f:7c:ab:b4:ba:bc:ce:32:1d:4a:3f:
         13:16:a2:f5:62:26:85:4b:df:7a:8c:4a:70:99:a1:59:19:8f:
         b8:4f:6b:21:43:52:16:09:ce:6d:3c:b2:49:b6:0f:93:7c:4e:
         23:54:49:f1:c6:d3:d3:7d:d5:df:95:b8:b6:cb:83:8e:53:f9:
         93:85:ff:76:8d:fb:25:a8:75:ba:88:fd:14:a4:02:9f:41:f6:
         5d:06:87:0e:e9:2b:63:f9:fd:e7:87:af:03:c3:97:f0:04:b2:
         f1:90:60:36:19:28:0e:bd:10:2e:61:09:dc:04:ce:e8:f0:d0:
         e2:b7:50:38:2e:e5:97:17:b7:f3:ba:02:95:f6:da:5a:90:9f:
         cf:9e:20:31:0d:84:ce:92:07:82:58:e8:ca:80:5d:d8:3e:10:
         8c:c1:f2:8d:96:c3:af:ec:ea:8d:dc:78:76:86:34:10:46:98:
         14:6f:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:07 2026 by rpki-client