Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
File:                     L71gGUYMdo4C0QZloGiN0flxhG8.mft (raw, json)
Hash identifier:          nVoBKlL/5jRfErcf3gBWDU8QAqsI6dX6ezYoUUzg9V4=
Subject key identifier:   DD:61:BD:3D:70:FB:0A:84:12:9B:0F:59:9E:0C:55:22:7F:A5:5F:14
Authority key identifier: 2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F
Certificate issuer:       /CN=A9110C8B/serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
Manifest number:          89
Signing time:             Sun 11 Oct 2026 08:12:18 +0000
Manifest this update:     Sun 11 Oct 2026 08:12:18 +0000
Manifest next update:     Sun 18 Oct 2026 08:12:18 +0000
Files and hashes:         1: L71gGUYMdo4C0QZloGiN0flxhG8.crl (hash: CVxPxaGJDbUBMhbKYxDuDdCFOH7fCJq/G/suy1HyW/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl
                          rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 08:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C8B, serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
        Validity
            Not Before: Oct 11 08:12:18 2026 GMT
            Not After : Oct 18 08:12:18 2026 GMT
        Subject: CN=6acb44e2-95e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:71:6a:df:71:84:c5:88:da:e8:6c:36:8e:
                    da:ae:35:c5:3d:6b:f6:6f:98:86:00:94:30:57:f5:
                    a9:8b:b8:1f:23:99:b6:51:9f:28:df:2b:7e:28:27:
                    90:53:d5:56:ce:92:3f:9a:7b:68:e8:8a:76:39:e3:
                    91:14:09:6d:fd:00:cf:a3:55:be:c6:89:fb:52:52:
                    9c:89:92:98:c2:5a:00:f8:f2:37:cb:8b:2a:eb:e7:
                    be:88:ea:e3:8a:db:be:7c:57:d4:c0:29:57:fc:7a:
                    0c:ef:4b:36:09:37:6f:f1:7d:fa:81:ac:22:cb:7a:
                    1a:ed:e7:b0:07:f2:3b:cf:c6:91:da:8e:8f:41:23:
                    df:39:0f:0b:41:c3:0e:27:ce:f4:f1:6d:3f:4e:35:
                    1e:bf:3e:38:da:08:ff:19:fd:a6:ba:48:4e:85:ff:
                    57:71:87:79:df:cf:bd:6f:f9:d9:0e:0c:e6:b8:05:
                    63:c0:7f:61:f6:4f:21:2a:22:bf:7d:8b:91:57:b6:
                    20:0e:9f:fd:20:69:d6:cd:53:58:0b:d0:a9:ad:e0:
                    bd:af:00:fe:59:65:b5:83:ce:3d:27:05:65:70:40:
                    76:83:9c:8b:39:9a:6b:50:24:42:78:f8:43:cd:dd:
                    7a:ea:11:bd:15:3b:6c:e6:af:b2:4b:8f:87:f6:b0:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:61:BD:3D:70:FB:0A:84:12:9B:0F:59:9E:0C:55:22:7F:A5:5F:14
            X509v3 Authority Key Identifier:
                keyid:2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a0:3e:db:3c:f7:6e:2d:9f:32:f0:b5:4a:04:f0:c1:8b:d6:
         f3:ad:19:66:9d:c4:66:87:58:e8:9a:e3:67:90:dc:c5:e1:3f:
         d0:27:1f:f2:c9:2d:df:6f:96:05:13:a6:86:1f:72:90:6a:24:
         2a:9f:b8:15:d2:e8:b8:2b:21:50:85:79:16:04:34:26:f7:7a:
         b5:14:3c:9e:7c:0b:fa:61:58:e0:e8:b7:39:91:8b:1c:9b:5c:
         8f:c9:ef:a2:c4:96:9d:19:6e:31:f8:ba:c6:6e:cb:73:35:31:
         d2:b1:dc:9d:bd:54:08:f3:bc:2d:dd:da:c9:33:84:7a:9c:89:
         a7:4f:38:6d:9d:04:99:eb:cb:e7:96:94:37:71:41:b1:ee:c8:
         cc:ca:04:74:60:a3:45:88:f3:7a:2c:b6:e0:9a:f2:ad:24:fa:
         78:08:1e:23:63:89:37:cf:44:89:01:a5:4c:7c:02:3b:b3:02:
         f6:ae:a4:97:4a:94:64:64:ae:00:a3:ea:4b:29:df:3f:1e:0e:
         d3:7d:4a:ad:9a:4f:cd:fb:8e:00:79:52:99:1c:db:38:99:06:
         0c:df:d5:9c:f8:dc:c1:f4:ab:c0:77:62:15:7c:20:b5:7e:74:
         32:b7:11:55:e5:91:71:88:ba:31:d6:b9:aa:7c:82:7d:dc:6f:
         57:5a:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:29:24 2026 by rpki-client