Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
File:                     -94EjDgE9v13dFfXTlx8bq-XMcc.mft (raw, json)
Hash identifier:          w0WnowlbgKiumiX/Dih5VPYgAKDQT7kq0P2JzvSD55Y=
Subject key identifier:   0F:6B:AC:D3:AC:D6:54:88:DF:C5:55:C9:85:2B:44:15:47:36:42:04
Authority key identifier: FB:DE:04:8C:38:04:F6:FD:77:74:57:D7:4E:5C:7C:6E:AF:97:31:C7
Certificate issuer:       /CN=A91F7113/serialNumber=FBDE048C3804F6FD777457D74E5C7C6EAF9731C7
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
Manifest number:          13
Signing time:             Thu 23 Jul 2026 11:08:25 +0000
Manifest this update:     Thu 23 Jul 2026 11:08:25 +0000
Manifest next update:     Thu 30 Jul 2026 11:08:25 +0000
Files and hashes:         1: -94EjDgE9v13dFfXTlx8bq-XMcc.crl (hash: 0+CvtfzMAagqnzcmClK0tzqohWLqwiovytJHKoODCmk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.crl
                          rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7113, serialNumber=FBDE048C3804F6FD777457D74E5C7C6EAF9731C7
        Validity
            Not Before: Jul 23 11:08:25 2026 GMT
            Not After : Jul 30 11:08:25 2026 GMT
        Subject: CN=6a61f629-313a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:88:ee:67:05:4f:41:03:be:52:26:ca:3f:
                    4a:31:9c:81:65:d8:a3:f2:01:4f:cb:e5:73:26:e6:
                    2d:3b:a5:89:9f:28:17:83:77:93:4f:41:04:76:f9:
                    9e:fa:7b:2e:6a:34:26:e7:b1:dd:01:8f:40:87:57:
                    24:32:13:ba:7c:03:7c:1b:21:4c:91:bb:27:50:7a:
                    41:3f:b0:83:f6:3e:bc:e0:a9:79:27:3e:7c:06:7c:
                    50:ea:69:d3:aa:28:a6:85:b1:cf:eb:7b:db:85:ff:
                    37:d3:61:44:8e:b6:ae:70:88:01:46:a9:8d:5b:8a:
                    8f:cc:86:0d:82:a7:8c:80:e0:63:71:b4:1f:29:53:
                    dd:ea:96:13:10:55:a0:ec:4c:34:37:5d:4c:70:7c:
                    b7:1b:7b:6c:49:49:0b:88:69:6b:fc:7d:ed:4b:85:
                    08:f0:08:78:db:08:31:8b:4e:9e:f8:f4:cb:18:fa:
                    b8:43:6c:86:42:8b:8c:f8:8d:b3:20:b6:a9:b2:71:
                    b3:bb:c0:b5:3a:e7:b0:dc:cf:a6:47:df:74:a6:17:
                    49:1f:6b:b0:28:17:eb:5c:c1:8f:63:5e:62:ba:f4:
                    9c:a8:f5:79:38:d7:a5:10:dd:3a:71:b1:24:79:f3:
                    02:98:d9:de:82:f7:b6:29:0c:8b:29:c7:7a:c3:db:
                    00:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6B:AC:D3:AC:D6:54:88:DF:C5:55:C9:85:2B:44:15:47:36:42:04
            X509v3 Authority Key Identifier:
                keyid:FB:DE:04:8C:38:04:F6:FD:77:74:57:D7:4E:5C:7C:6E:AF:97:31:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:93:ef:a8:36:2c:cb:c6:e8:b3:24:4b:5c:b3:d4:63:d7:ce:
         33:78:d9:f9:5a:7b:28:76:6b:fe:3c:ba:b3:04:cc:e3:89:ce:
         d6:e0:cf:d6:7f:18:d2:c4:1e:25:3d:7d:93:c9:4f:15:63:13:
         80:eb:d5:59:4a:8a:ea:e9:ab:95:26:07:8c:b3:05:57:3d:fb:
         a3:63:a3:81:79:09:52:6c:c0:88:a8:a1:ac:48:df:8e:53:98:
         05:77:da:e8:a6:01:4e:ed:e3:57:f0:ec:6e:74:c8:6d:33:ac:
         f1:77:a0:86:f8:1e:32:e5:76:13:b9:d9:41:c2:aa:be:01:8f:
         25:88:5e:94:e8:78:b1:8e:b4:73:be:f7:46:f1:61:3a:5d:f6:
         96:4f:06:e5:60:ad:64:3a:35:68:b8:09:72:5e:e6:b1:69:cb:
         87:d8:ef:c7:62:75:37:17:67:fb:7b:45:61:40:65:be:7f:b7:
         ab:fc:37:ff:72:f8:62:c5:bd:e3:13:5d:97:33:13:4a:92:3f:
         75:5e:28:2c:ad:b2:d0:52:b9:48:25:8d:33:1a:03:2f:1b:f8:
         b2:00:89:f7:a0:1e:4f:cf:d1:74:07:2a:94:9f:35:44:e0:a7:
         de:7f:84:0c:9b:db:78:23:da:7b:0a:f6:c3:2c:bf:fa:b2:1d:
         d2:77:3f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:59:02 2026 by rpki-client