Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
File:                     bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json)
Hash identifier:          KcDlZvtH3rxBH0Z7p70f0T2QMMLPBhVUw6ZU8CbQL08=
Subject key identifier:   25:F5:A0:32:67:78:61:C0:62:E9:CD:21:1D:41:35:D5:D7:7A:2B:7E
Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
Certificate issuer:       /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Certificate serial:       01D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
Manifest number:          01D1
Signing time:             Thu 23 Jul 2026 05:01:58 +0000
Manifest this update:     Thu 23 Jul 2026 05:01:58 +0000
Manifest next update:     Thu 30 Jul 2026 05:01:58 +0000
Files and hashes:         1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: BLnpmjucvEf2YOX0MdCo15K17jbf/bjbiUtt5j+Qrdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
                          rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
        Validity
            Not Before: Jul 23 05:01:58 2026 GMT
            Not After : Jul 30 05:01:58 2026 GMT
        Subject: CN=6a61a046-7dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b5:ee:01:cd:39:2a:54:a4:7a:c8:a8:13:04:
                    6a:87:a9:92:9f:f6:9f:a7:10:df:92:ec:ad:0d:70:
                    53:26:19:9c:3e:0c:37:c8:d1:8b:af:61:91:61:b9:
                    9d:50:6b:d3:27:a9:ee:74:71:9e:ae:ef:0d:ec:97:
                    2c:5b:bd:e8:d2:96:09:38:e1:14:c8:f9:30:5f:43:
                    8d:41:b8:f5:c5:6f:4a:28:11:1c:43:63:b7:7d:0a:
                    39:b4:ad:a7:fb:19:0c:8a:fd:fe:d3:ac:39:79:4a:
                    f9:86:42:ab:b4:e7:4b:b7:16:c0:1a:cb:c6:92:54:
                    70:80:af:13:80:ec:c4:29:d2:25:39:74:e7:b0:a3:
                    3a:e6:7c:cb:52:de:5a:0c:a6:5a:67:6f:a8:2e:d7:
                    c4:f7:2d:7f:54:34:92:cb:2d:37:0c:0c:01:c6:32:
                    7c:c8:9d:e2:91:95:13:e1:42:43:1e:b1:9d:a0:51:
                    e7:aa:77:5d:78:8d:b6:1e:12:4e:4e:19:ea:a6:39:
                    23:54:7b:fd:03:79:bf:cd:28:8c:7a:88:44:26:8d:
                    f0:6b:f7:ab:5a:0f:62:4c:f2:58:11:88:48:47:97:
                    e3:40:b1:cb:27:5d:d4:f4:3f:82:32:84:9d:7f:44:
                    3e:2b:16:d2:15:d4:05:e5:67:da:f9:46:12:ac:4a:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F5:A0:32:67:78:61:C0:62:E9:CD:21:1D:41:35:D5:D7:7A:2B:7E
            X509v3 Authority Key Identifier:
                keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:95:39:bd:98:4a:e4:68:cb:a9:d2:69:45:10:c5:9e:06:85:
         c4:90:b2:9f:64:35:2c:1b:6c:5c:d7:ef:db:95:ac:47:98:e3:
         a2:7f:84:65:d4:d7:0b:50:58:4c:00:66:cc:03:eb:c0:f8:10:
         f0:be:a3:b3:fc:95:39:a6:4b:0d:52:80:27:1d:94:11:35:26:
         88:14:3f:53:9e:45:e7:30:c0:13:3d:2e:57:de:21:7e:4c:8f:
         af:7b:45:ea:fb:80:91:06:4a:7c:13:ea:7e:7f:c9:0a:4d:c3:
         3c:59:e1:d8:a3:32:3c:a7:a4:69:79:eb:f2:dd:ef:7a:46:61:
         65:44:da:16:a4:ef:02:a1:f7:15:5a:c0:20:7d:2d:39:b1:3c:
         99:85:12:ff:c2:db:ba:bd:a1:0b:34:51:40:1f:e1:26:15:6c:
         e2:78:d8:43:2a:00:d7:5b:c4:82:68:dc:b1:1d:8d:db:dd:4c:
         bf:4a:0d:46:aa:c0:7f:3b:db:f5:2a:a9:60:19:86:f8:3e:16:
         c0:72:2e:c3:f0:4f:42:a0:85:e6:e6:20:6b:8f:27:65:92:ce:
         2f:2c:0f:65:11:31:fb:f1:a3:36:e9:99:32:be:b5:60:8d:11:
         9a:e5:2b:c6:12:75:07:43:4d:e2:2e:d6:b8:76:7b:f8:a2:c5:
         79:e5:76:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:28 2026 by rpki-client