Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft
File:                     ti51PWAQXS1yURcqxyKxDy-WSWc.mft (raw, json)
Hash identifier:          1GvOg4Y7I6XNIQM9Ar9pqLwm1VEK4eSOrP00AWOXwK0=
Subject key identifier:   D2:6C:2E:3F:58:C1:E1:48:1B:74:7A:90:08:05:F5:45:54:E9:F4:51
Authority key identifier: B6:2E:75:3D:60:10:5D:2D:72:51:17:2A:C7:22:B1:0F:2F:96:49:67
Certificate issuer:       /CN=A91DAFA2/serialNumber=B62E753D60105D2D7251172AC722B10F2F964967
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ti51PWAQXS1yURcqxyKxDy-WSWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft
Manifest number:          29
Signing time:             Wed 22 Jul 2026 16:14:12 +0000
Manifest this update:     Wed 22 Jul 2026 16:14:12 +0000
Manifest next update:     Wed 29 Jul 2026 16:14:12 +0000
Files and hashes:         1: ti51PWAQXS1yURcqxyKxDy-WSWc.crl (hash: 3PNEIjG1UStSnDx6xWWavVAlnsLYzU9OmZFX6RDrh+A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.crl
                          rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ti51PWAQXS1yURcqxyKxDy-WSWc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DAFA2, serialNumber=B62E753D60105D2D7251172AC722B10F2F964967
        Validity
            Not Before: Jul 22 16:14:12 2026 GMT
            Not After : Jul 29 16:14:12 2026 GMT
        Subject: CN=6a60ec54-48a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:f0:00:e7:72:f2:b0:68:5c:71:1b:39:33:
                    72:14:44:61:35:94:28:26:0d:4a:25:bc:47:74:7b:
                    32:af:8b:87:1b:48:3d:30:43:f0:ba:b1:ae:09:c9:
                    f6:ce:e4:36:a7:3c:59:56:77:53:5f:4e:d9:6e:ce:
                    5c:72:3e:2a:a3:72:58:9f:79:e1:ed:e9:fe:2a:d0:
                    3b:a2:80:59:d5:e0:eb:06:dd:72:be:20:e9:28:1b:
                    55:67:d7:ab:b0:e4:21:93:e6:84:17:c3:64:62:33:
                    66:1a:6d:8f:1e:ea:48:aa:54:84:49:12:37:10:a9:
                    c9:9e:6b:b2:74:69:5a:c8:57:58:01:79:b1:9b:f0:
                    85:53:af:56:44:59:1f:d0:30:be:46:8d:a0:f4:cf:
                    64:52:33:7e:52:ad:8c:9c:c0:d8:78:a8:99:e8:c7:
                    10:05:30:bb:7c:1c:34:29:30:ea:9a:3f:12:cc:f6:
                    e6:14:88:aa:20:6c:6c:dd:7b:27:fd:3e:00:0a:ca:
                    5a:29:c6:72:f7:d8:38:2d:fb:af:37:e7:cd:09:ce:
                    ba:3b:09:09:05:c7:73:98:08:3d:30:27:d0:d1:4e:
                    4a:c2:12:c9:25:02:40:2b:fe:4f:7d:a3:ee:fc:ce:
                    20:d0:bd:a4:d9:a5:1b:07:d7:1a:2b:f8:38:cd:14:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6C:2E:3F:58:C1:E1:48:1B:74:7A:90:08:05:F5:45:54:E9:F4:51
            X509v3 Authority Key Identifier:
                keyid:B6:2E:75:3D:60:10:5D:2D:72:51:17:2A:C7:22:B1:0F:2F:96:49:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ti51PWAQXS1yURcqxyKxDy-WSWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:81:69:7c:49:c2:06:63:c7:0c:91:6c:4d:61:bb:d4:6c:ce:
         52:f9:a2:3f:a9:e0:95:ed:21:8b:ed:e9:e9:2f:64:2b:c4:90:
         3f:46:76:65:31:49:50:cb:59:77:73:74:02:79:74:1a:35:e2:
         9a:e3:d8:66:5b:b9:4b:4a:6a:e2:8e:e6:75:da:a1:f4:b9:7b:
         6f:27:d6:bb:4c:92:60:f4:67:af:63:3a:96:81:4c:51:d1:9a:
         1b:83:40:ee:2b:0d:98:9c:20:61:7d:d1:f1:4f:91:9a:3b:66:
         16:3e:de:7c:ec:39:d6:47:07:8e:7e:34:f0:c4:89:8f:86:10:
         c2:ad:29:a4:6e:68:77:69:39:ff:8a:d6:fc:f2:9b:de:35:c9:
         7b:52:ae:29:e7:49:19:8a:90:bc:24:60:b2:11:57:b2:67:ba:
         a5:2a:5f:32:c3:1f:35:ba:3b:25:d3:ca:c9:32:b5:b8:4e:ff:
         47:6d:bf:30:cc:59:15:05:d5:33:32:6b:e8:47:77:d8:32:72:
         43:b2:07:fe:8f:98:5a:06:29:c8:ef:0e:05:ef:3f:d4:60:c7:
         bf:94:1f:68:9c:29:02:b7:6e:8d:a3:d1:6c:6f:4a:a9:41:69:
         4b:36:3a:0a:8a:ef:0a:52:1f:27:92:00:9f:50:4d:3a:22:7e:
         c3:b7:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:26:40 2026 by rpki-client