Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
File:                     FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json)
Hash identifier:          qBOQHNkV1czk/A9MCp1EBbBzk/3kasJrXwuhSfF3I8A=
Subject key identifier:   A2:F2:31:A0:C9:09:56:9C:42:A1:5D:95:94:3A:64:B5:CC:9F:6D:0B
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Certificate issuer:       /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial:       0BBE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
Manifest number:          0C43
Signing time:             Wed 22 Jul 2026 19:24:30 +0000
Manifest this update:     Wed 22 Jul 2026 19:24:29 +0000
Manifest next update:     Wed 29 Jul 2026 19:24:29 +0000
Files and hashes:         1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: qS8nOYy2ngHQ43mqjy3LXmqtwTiPBg6WHxo/8phpbLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3006 (0xbbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
        Validity
            Not Before: Jul 22 19:24:29 2026 GMT
            Not After : Jul 29 19:24:29 2026 GMT
        Subject: CN=6a6118ed-6a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bb:4f:f4:80:78:31:e6:4d:4c:ca:e4:3b:ae:
                    65:ad:4a:ff:ee:aa:d2:fb:f5:0a:65:9e:ca:92:f1:
                    d7:8e:94:8a:34:0d:73:ee:d1:b6:94:54:49:1b:79:
                    60:de:31:62:09:b3:bb:9c:c2:9f:ac:ff:e6:1f:53:
                    7a:bd:79:2d:05:bf:60:45:a5:4a:3c:dd:3a:0d:6d:
                    8b:70:86:1e:d5:10:3e:d0:f1:50:9a:6b:21:e2:03:
                    e1:28:09:e9:9b:49:61:7d:af:10:0b:29:ab:23:f6:
                    29:a4:79:48:6a:a2:ad:2f:8d:6c:ce:5e:93:02:67:
                    4e:2b:af:44:15:16:18:56:fd:9e:82:c1:c9:de:c0:
                    e0:87:c8:2d:a5:7c:d3:5f:d6:6a:3c:05:3e:08:c8:
                    ad:e5:91:8f:38:20:d1:73:b3:a7:c8:eb:70:31:91:
                    94:e4:48:7e:ca:e4:bf:73:b4:21:00:c6:e1:58:17:
                    50:40:eb:20:61:fe:b5:71:dd:ee:d2:5c:2b:3c:f2:
                    e3:b0:70:f4:7c:f1:7a:8f:e1:13:b4:1b:de:70:18:
                    92:7f:b0:4b:d7:6e:7a:b8:dc:b5:24:dd:5b:ef:11:
                    ef:de:a3:0e:85:ca:18:aa:39:6c:82:ce:01:6b:a7:
                    5e:bb:f9:89:72:12:55:bb:59:d1:b6:a6:ad:21:73:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:31:A0:C9:09:56:9C:42:A1:5D:95:94:3A:64:B5:CC:9F:6D:0B
            X509v3 Authority Key Identifier:
                keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:fa:a8:d6:73:e8:01:63:5d:9c:82:32:43:77:75:1a:31:
         76:c2:9b:db:5a:f9:46:da:42:52:2f:35:ae:3e:4f:f4:4d:6d:
         de:e5:a8:c9:78:9c:bc:4b:d2:b6:00:70:07:f3:71:6a:98:eb:
         6d:78:32:8e:a9:95:4a:e9:c8:d2:f8:d8:f5:a2:87:de:4c:54:
         fa:dd:ea:4f:b3:96:88:49:06:21:f3:88:03:93:11:81:52:e2:
         ed:e9:50:09:d5:12:92:3f:2c:a5:13:6f:74:0d:a6:ea:19:8d:
         82:ef:6a:31:75:00:01:44:5b:5b:b1:0f:e2:90:d6:7e:70:4b:
         bd:e2:6b:16:77:9e:42:16:c8:43:19:d3:df:86:ac:f5:0c:36:
         d9:3c:e4:81:48:7b:9b:18:a2:9a:17:83:ba:e3:4b:c0:62:63:
         9a:ae:dd:ae:50:bf:a2:b0:84:16:37:e2:70:a7:50:7c:ba:b6:
         69:fe:8b:da:46:e8:54:0a:f7:ed:37:b5:a5:22:41:ee:b9:77:
         34:22:2c:41:ed:45:3d:e5:28:ed:ec:6e:6d:d8:51:49:7d:4b:
         a0:63:a8:7a:20:df:d9:86:d0:e1:d0:64:73:51:db:60:cc:db:
         77:bb:b4:c2:3d:f9:00:5a:d3:24:b3:5b:20:55:a3:d3:be:18:
         3a:a9:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:06 2026 by rpki-client