Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
File:                     maB2Nu64AHCDMDGWpYxBvsxoj4A.mft (raw, json)
Hash identifier:          qqHMwpaW/MCLRRCA0RXb8lEEDIs8FDotTvLYGLYgpEY=
Subject key identifier:   FA:C2:DF:AE:73:76:77:9C:52:C0:E2:82:74:41:B9:03:D9:FF:FA:81
Authority key identifier: 99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80
Certificate issuer:       /CN=A91EEC3B/serialNumber=99A07636EEB8007083303196A58C41BECC688F80
Certificate serial:       0CB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
Manifest number:          2ED2
Signing time:             Wed 22 Jul 2026 16:28:04 +0000
Manifest this update:     Wed 22 Jul 2026 16:28:04 +0000
Manifest next update:     Wed 29 Jul 2026 16:28:04 +0000
Files and hashes:         1: maB2Nu64AHCDMDGWpYxBvsxoj4A.crl (hash: cYia4u6ki3XwDmtz8j/OS/AErE/ArVgSXGqNmZ0wOrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl
                          rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3249 (0xcb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEC3B, serialNumber=99A07636EEB8007083303196A58C41BECC688F80
        Validity
            Not Before: Jul 22 16:28:04 2026 GMT
            Not After : Jul 29 16:28:04 2026 GMT
        Subject: CN=6a60ef94-f39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:93:dd:8b:08:94:58:38:9a:c8:88:10:4b:
                    d9:84:b7:4d:74:42:a9:36:64:10:2c:bc:56:91:06:
                    6b:62:b3:4e:8d:67:d1:72:9e:8b:b2:b4:47:f4:5d:
                    35:66:13:8f:c9:7b:ef:25:00:7a:73:56:fd:84:88:
                    a0:a5:d7:b8:15:72:89:28:0a:16:8e:c9:2c:19:68:
                    b8:bd:db:cf:91:b0:50:cb:ed:d3:c8:67:a2:06:65:
                    6f:1d:94:7e:7d:43:09:23:ec:11:99:33:a4:3c:20:
                    eb:1f:63:1b:d1:a1:65:da:ec:b4:4a:b3:2f:8e:a9:
                    4d:c9:c3:4f:d4:87:15:bf:d0:07:5e:94:cf:02:b9:
                    d3:6e:3e:4c:59:f4:ce:e3:d2:ff:cc:26:56:da:74:
                    bb:0e:c7:1d:10:f8:6c:81:0c:ec:f0:03:92:f0:f7:
                    70:6a:0e:c1:19:bb:e3:bf:22:85:72:9d:ad:ce:c1:
                    ab:3b:06:c5:da:f2:d2:51:d2:d6:32:a3:0f:9a:03:
                    50:a9:29:0f:d1:e1:88:92:42:ab:ac:60:02:67:47:
                    5c:51:2f:db:61:68:f5:f7:0b:ea:6e:c1:da:fa:94:
                    21:81:cd:03:ce:7c:72:d4:32:82:33:43:56:08:33:
                    47:5f:3a:1b:61:61:bb:02:4e:cd:58:53:d7:63:0e:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C2:DF:AE:73:76:77:9C:52:C0:E2:82:74:41:B9:03:D9:FF:FA:81
            X509v3 Authority Key Identifier:
                keyid:99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:fd:a7:9f:62:54:8d:aa:c7:5b:ff:fe:0a:64:ec:e9:5e:b3:
         64:6b:6d:e4:6f:35:d3:46:e1:fd:89:03:9f:f6:fd:69:07:22:
         7f:e4:bf:67:7b:29:a3:33:4a:b7:26:8c:70:b5:c4:b7:d5:1a:
         d7:34:0c:9f:a5:43:f0:0b:c5:c6:5c:58:0f:2e:ad:aa:a0:3c:
         0d:c0:11:35:52:59:b9:05:2d:57:1e:05:51:d0:97:df:6e:b9:
         7c:59:64:0d:ee:de:5a:b0:d9:69:73:18:6b:cb:35:f5:7d:98:
         a7:ee:71:8b:6b:fc:3f:b1:5e:ea:fb:f0:4e:02:c9:78:59:64:
         c7:4a:b8:30:44:1b:2a:a6:ce:2d:c3:44:97:ea:d4:e2:bc:bd:
         28:e4:b5:48:93:35:03:99:95:eb:10:23:ce:31:44:a0:96:3a:
         b8:bf:05:9a:e2:c8:42:e3:bf:04:59:77:09:25:4f:b0:db:5e:
         15:8a:7f:95:9d:ad:ee:da:e2:1f:4d:2e:93:10:60:47:1e:2b:
         a1:f5:c2:de:56:23:fe:79:0e:2e:f8:81:03:ea:ff:6d:5e:19:
         0d:bb:fd:13:e0:36:d8:fd:a5:b3:5f:5a:48:71:b1:88:ef:5d:
         f7:aa:86:3a:d1:87:da:e9:56:2e:63:8a:84:71:ee:b9:f2:c0:
         24:c1:6b:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVDM0IxMTAvBgNVBAUTKDk5QTA3NjM2RUVCODAwNzA4MzMwMzE5NkE1OEM0MUJF
Q0M2ODhGODAwHhcNMjYwNzIyMTYyODA0WhcNMjYwNzI5MTYyODA0WjAYMRYwFAYD
VQQDEw02YTYwZWY5NC1mMzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttKT3YsIlFg4msiIEEvZhLdNdEKpNmQQLLxWkQZrYrNOjWfRcp6LsrRH9F01
ZhOPyXvvJQB6c1b9hIigpde4FXKJKAoWjsksGWi4vdvPkbBQy+3TyGeiBmVvHZR+
fUMJI+wRmTOkPCDrH2Mb0aFl2uy0SrMvjqlNycNP1IcVv9AHXpTPArnTbj5MWfTO
49L/zCZW2nS7DscdEPhsgQzs8AOS8Pdwag7BGbvjvyKFcp2tzsGrOwbF2vLSUdLW
MqMPmgNQqSkP0eGIkkKrrGACZ0dcUS/bYWj19wvqbsHa+pQhgc0Dznxy1DKCM0NW
CDNHXzobYWG7Ak7NWFPXYw4JjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPrC365z
dnecUsDignRBuQPZ//qBMB8GA1UdIwQYMBaAFJmgdjbuuABwgzAxlqWMQb7MaI+A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0
MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9tYUIyTnU2NEFIQ0RNREdXcFl4QnZzeG9q
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21hQjJOdTY0QUhDRE1ER1dwWXhCdnN4b2o0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9tYUIyTnU2NEFI
Q0RNREdXcFl4QnZzeG9qNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL/2nn2JUjarHW//+CmTs6V6zZGtt5G8100bh/YkDn/b9aQcif+S/Z3spozNK
tyaMcLXEt9Ua1zQMn6VD8AvFxlxYDy6tqqA8DcARNVJZuQUtVx4FUdCX3265fFlk
De7eWrDZaXMYa8s19X2Yp+5xi2v8P7Fe6vvwTgLJeFlkx0q4MEQbKqbOLcNEl+rU
4ry9KOS1SJM1A5mV6xAjzjFEoJY6uL8FmuLIQuO/BFl3CSVPsNteFYp/lZ2t7tri
H00ukxBgRx4rofXC3lYj/nkOLviBA+r/bV4ZDbv9E+A22P2ls19aSHGxiO9d96qG
OtGH2ulWLmOKhHHuufLAJMFrIA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:49 2026 by rpki-client