Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
File:                     CqAPpYxAjQbIlNjrrzidTFAQVEM.mft (raw, json)
Hash identifier:          NavZvV5tjVVzQKAJdUrcDA8afiiHK7uleODJ2Aro0xs=
Subject key identifier:   0F:FC:17:66:DC:E7:CC:85:CF:3F:75:53:C0:24:85:03:F9:65:45:69
Authority key identifier: 0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43
Certificate issuer:       /CN=A91D9C95/serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
Manifest number:          48
Signing time:             Mon 21 Sep 2026 08:22:30 +0000
Manifest this update:     Mon 21 Sep 2026 08:22:30 +0000
Manifest next update:     Mon 28 Sep 2026 08:22:30 +0000
Files and hashes:         1: CqAPpYxAjQbIlNjrrzidTFAQVEM.crl (hash: h5fjHGK7Ofe2W0G80D3YJbU/dGSYRYVIOfdKVqwJ8m0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl
                          rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9C95, serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
        Validity
            Not Before: Sep 21 08:22:30 2026 GMT
            Not After : Sep 28 08:22:30 2026 GMT
        Subject: CN=6ab0e946-55eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:36:d8:85:a5:93:ac:d5:f0:31:aa:6d:4c:
                    66:55:15:f8:60:d4:8f:a7:c2:03:98:01:0a:a2:87:
                    78:5c:31:4d:bc:19:d3:97:fd:8c:d2:73:d0:54:56:
                    46:32:4e:4d:c6:8c:2a:4d:45:20:64:5e:41:95:ea:
                    3f:05:c5:c4:0b:2c:80:3b:0c:51:c3:f3:26:3f:6c:
                    a0:5f:a3:c7:76:5b:99:26:aa:11:4d:5a:13:83:1b:
                    87:fa:4d:d4:6c:1e:b5:4a:02:ce:77:f2:fa:0a:69:
                    36:39:09:8c:bf:2d:9c:cb:1e:ff:c0:71:c6:c1:0d:
                    e0:37:f6:a7:43:cf:4c:c0:5b:9b:73:5f:cb:eb:c0:
                    07:51:4d:c5:07:c5:a2:2f:e4:67:04:ce:90:74:28:
                    83:14:e5:ee:6c:db:60:03:53:37:7a:b9:10:83:ee:
                    d9:57:10:33:94:17:3a:8f:8b:32:a8:0b:8c:58:b4:
                    fd:9c:78:53:84:a6:c3:f0:a1:b1:57:53:30:07:ef:
                    be:66:30:6a:17:32:e9:cb:bf:45:ba:1f:1a:31:c5:
                    2e:51:ba:57:77:91:d7:d9:f4:99:63:80:a7:a1:0c:
                    e5:f7:f6:ef:74:cb:5c:5c:2c:4c:a6:9e:ae:13:4e:
                    0e:61:4b:78:80:ff:ba:74:84:e5:85:21:20:39:54:
                    31:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FC:17:66:DC:E7:CC:85:CF:3F:75:53:C0:24:85:03:F9:65:45:69
            X509v3 Authority Key Identifier:
                keyid:0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bd:87:50:80:ea:e5:0b:3d:c1:f3:1b:43:9d:2e:cb:32:bf:
         b5:29:48:6d:51:c5:bf:93:bb:60:df:bd:b7:d0:78:e4:a4:2d:
         fb:45:a3:88:eb:13:80:df:8d:60:59:f9:00:a2:08:f8:14:50:
         e6:06:61:3b:7b:74:a4:a8:9c:12:91:e5:02:bf:c5:39:61:ff:
         d5:8e:ad:d3:fc:02:a8:dd:88:2a:59:62:5b:c6:88:1e:de:8d:
         74:3a:2e:11:28:d0:30:92:18:5b:42:32:60:50:e6:fb:9f:82:
         7d:60:e9:44:83:e6:24:73:fc:ed:0f:19:58:37:d6:07:8c:88:
         9f:9f:20:de:cc:d6:00:96:71:e4:e2:0f:fb:ce:41:2c:78:c6:
         a5:22:cf:24:2c:da:4d:d2:58:a6:ac:75:eb:26:cc:eb:83:37:
         f3:ab:20:d0:9e:df:c5:9a:90:b1:27:ec:e5:e0:78:b0:71:b6:
         e4:2f:f1:76:26:fd:01:f9:a9:fe:23:a9:22:16:9d:1f:b3:4f:
         29:d1:13:07:bd:c9:c1:20:50:85:59:36:31:bf:79:15:a0:1b:
         67:10:5d:53:c9:e8:fb:f5:bf:63:0d:78:a3:ac:2e:69:9a:25:
         7e:0e:b2:be:d6:4a:5d:f7:98:7d:fd:15:ac:d5:f6:47:6f:44:
         c2:01:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:00 2026 by rpki-client