Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
File:                     mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json)
Hash identifier:          OuKaZNZt9eSaE+2Z9+aUbVH/CvJpZfkcSLwEThAYl6s=
Subject key identifier:   17:73:C2:78:48:0F:65:E3:6F:6C:7E:97:83:C4:91:F0:67:B6:2B:54
Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
Certificate issuer:       /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Certificate serial:       2611
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
Manifest number:          A2A4
Signing time:             Wed 22 Jul 2026 14:31:32 +0000
Manifest this update:     Wed 22 Jul 2026 14:31:31 +0000
Manifest next update:     Wed 29 Jul 2026 14:31:31 +0000
Files and hashes:         1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: +AiwImRUgcGf+aLKZqaDXWLL6dIyKZ5+Hx6lrk70eXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9745 (0x2611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
        Validity
            Not Before: Jul 22 14:31:31 2026 GMT
            Not After : Jul 29 14:31:31 2026 GMT
        Subject: CN=6a60d444-ac72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:06:13:35:cd:3d:11:9a:de:57:31:ac:cf:
                    89:9a:a4:8b:72:8b:de:0f:3d:ab:62:94:1d:98:39:
                    a8:5e:b3:57:02:a9:e4:c9:b1:08:ab:af:87:a8:c7:
                    dd:b6:f2:d3:38:b7:e9:d7:3a:a0:7a:6d:dd:b4:29:
                    f7:e6:3f:03:3f:f3:1f:be:69:5e:d9:66:8b:03:61:
                    cc:12:65:fc:e9:e7:6f:3f:6c:a8:16:32:cf:3e:99:
                    16:5a:1c:5a:a5:4a:92:80:f7:ee:19:22:9a:4f:9f:
                    82:44:74:83:dc:5f:cc:b9:01:39:8b:cc:db:02:6c:
                    07:74:73:00:ad:15:fb:4b:5e:1e:96:f3:13:ff:16:
                    65:a0:a2:12:59:1f:f0:15:9e:ce:b8:aa:1c:99:f8:
                    89:9d:f9:3c:a5:f9:b4:79:ce:ab:61:c1:53:fa:8d:
                    ae:7e:38:38:8a:08:0d:a1:b5:6c:77:52:52:d9:e0:
                    79:82:80:6e:ab:40:ed:e6:7d:7b:d6:1e:1b:10:68:
                    59:54:ff:28:c4:df:f5:ca:78:93:41:99:ff:e2:1e:
                    59:f6:46:61:e0:e2:49:58:66:5e:f8:68:52:82:0d:
                    f8:a3:a1:67:b7:b2:32:58:96:44:ae:e3:f6:c9:40:
                    67:56:77:c7:59:e5:b7:41:93:19:16:85:a8:aa:6a:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:73:C2:78:48:0F:65:E3:6F:6C:7E:97:83:C4:91:F0:67:B6:2B:54
            X509v3 Authority Key Identifier:
                keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f5:28:9c:51:f3:4b:0a:c5:1f:45:13:10:c7:59:b6:3d:45:
         bd:55:86:db:30:54:41:48:e5:71:24:c6:fb:05:29:c4:0a:61:
         06:7f:69:04:86:37:15:3c:6d:d5:ea:b7:e9:22:2a:f1:f4:4c:
         5f:02:0c:dd:bc:f0:90:e0:53:a2:e4:06:61:46:4f:eb:b2:44:
         e9:f4:a9:ac:8f:21:2c:54:83:67:31:18:90:8c:b1:24:f2:3d:
         cf:a7:52:99:4d:54:15:39:4a:a0:91:38:83:e3:d1:c6:59:b9:
         66:ea:16:50:85:88:17:df:af:87:cb:c0:c7:86:d0:df:f3:ac:
         f1:60:77:f3:3c:47:32:66:2b:55:ff:a7:f4:12:8e:97:b8:06:
         70:ec:e9:52:08:b5:a2:22:1a:31:4f:bc:d7:f0:04:ea:ae:40:
         e3:88:1d:21:85:4b:77:f9:99:28:7b:3c:85:e9:a0:d3:4d:a3:
         25:93:4c:cb:90:f5:41:b6:44:bf:83:8a:49:9d:e5:19:44:39:
         30:01:9b:2c:31:2d:ca:2f:6d:72:48:71:5f:87:fa:43:58:04:
         f5:0c:a6:83:db:b6:f4:68:4b:53:a5:ad:34:94:ef:06:b8:ec:
         f3:3b:88:06:4d:ab:6d:e6:2c:1e:e9:c0:a1:41:a2:d4:74:88:
         4a:b1:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:59 2026 by rpki-client