Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
File:                     h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json)
Hash identifier:          ZfmUfjJRFzDIARj7xL9KqNIMYLipdP8oMcbvDC/FyGQ=
Subject key identifier:   C1:2C:DE:4F:4F:A0:26:5D:6A:8A:E3:2F:BB:D8:46:59:EB:7E:00:73
Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
Certificate issuer:       /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
Manifest number:          7F
Signing time:             Thu 23 Jul 2026 09:32:54 +0000
Manifest this update:     Thu 23 Jul 2026 09:32:54 +0000
Manifest next update:     Thu 30 Jul 2026 09:32:54 +0000
Files and hashes:         1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: es+Eu7u0g9dgbulioYkCji2c0uEupXGP0lTBPN0//zY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
                          rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
        Validity
            Not Before: Jul 23 09:32:54 2026 GMT
            Not After : Jul 30 09:32:54 2026 GMT
        Subject: CN=6a61dfc6-7f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:bc:81:01:4c:2f:20:df:98:4b:15:94:27:
                    4f:21:b3:8b:81:f9:d8:05:72:b2:7d:f3:e9:01:6b:
                    1d:5a:f0:2c:31:dc:fc:fb:d5:22:a8:32:f9:09:cc:
                    53:79:e1:99:9f:e8:90:ff:36:6b:78:0e:41:42:81:
                    74:bf:46:55:fa:f4:1b:d7:3b:f4:41:e5:74:26:fe:
                    f0:34:e7:83:e0:79:f7:84:49:b9:56:28:06:d9:03:
                    ea:11:b7:ea:f2:b6:de:62:8c:e7:cc:88:14:85:cf:
                    de:2c:06:f5:cb:17:14:97:c6:0b:94:cf:95:42:8d:
                    aa:72:b6:23:4b:03:45:6a:77:33:76:d6:3b:71:b7:
                    c0:03:a6:e7:46:33:5e:12:14:b5:a8:1a:70:5d:b6:
                    b4:83:04:af:57:a8:94:82:dc:a3:89:09:25:6c:45:
                    aa:cd:c6:77:fe:3a:8d:71:23:9e:35:61:e2:2f:39:
                    1c:b0:58:fc:78:a2:a9:19:7e:02:38:50:41:a1:a0:
                    d3:2b:4a:6f:5c:8f:41:6e:03:3f:b4:eb:5e:8d:5e:
                    27:33:68:ec:18:6e:1e:0f:8f:d1:70:60:7c:de:f4:
                    f8:44:0d:99:ca:3f:f0:b9:4a:fb:e0:4d:e7:f1:37:
                    29:89:38:f3:2e:69:6b:c0:89:41:07:6d:a3:84:12:
                    20:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2C:DE:4F:4F:A0:26:5D:6A:8A:E3:2F:BB:D8:46:59:EB:7E:00:73
            X509v3 Authority Key Identifier:
                keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f8:d3:f4:2f:28:38:45:eb:37:d7:4b:96:fd:38:54:ee:c2:
         a1:02:e7:f0:ba:8e:7e:d5:7f:d9:6a:70:c2:49:2f:67:a6:e5:
         1a:b7:d0:88:11:30:c5:ab:81:2c:0f:5a:a7:0c:4d:b8:53:a5:
         42:25:0d:59:30:c6:bd:33:55:f4:57:de:ee:fb:de:26:fd:f4:
         33:cc:f7:9f:45:4b:6f:12:82:8f:72:14:19:6e:10:48:eb:b0:
         74:6e:5b:09:67:8c:e3:eb:6b:c1:01:e6:11:db:6d:4b:45:40:
         e7:f4:8f:6e:70:28:3b:f3:cd:f2:c2:88:42:d8:54:e2:35:f2:
         27:73:79:89:00:fc:2b:61:97:7b:62:b5:35:5a:f8:96:05:e0:
         08:c0:1b:25:35:d6:ba:99:8a:47:71:e8:d9:af:8b:12:ad:bc:
         b5:33:a2:dd:71:ab:6b:2a:8c:d9:6c:2d:c0:42:79:1f:4c:49:
         a2:f0:36:2c:56:59:8d:0a:0a:85:cb:aa:97:de:d3:5c:c5:40:
         14:50:07:64:70:a1:44:b0:d4:b9:13:ad:28:fe:8c:e9:7d:8a:
         29:15:65:d1:a4:a0:30:6e:3c:ee:d5:e1:bf:97:39:09:65:fd:
         10:4d:71:65:59:67:ae:0d:f6:34:b9:47:a9:2b:da:47:d1:a6:
         06:a7:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:36 2026 by rpki-client