Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File:                     A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier:          SV2bL+t4XkAZNHPHGCu4yi4KibaUDdBvnKXUD3lw7Tg=
Subject key identifier:   1D:10:55:44:9B:8C:2A:79:AB:67:1B:8C:42:7A:56:58:8B:19:A6:01
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer:       /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number:          016A
Signing time:             Mon 27 Jul 2026 06:40:58 +0000
Manifest this update:     Mon 27 Jul 2026 06:40:57 +0000
Manifest next update:     Mon 03 Aug 2026 06:40:57 +0000
Files and hashes:         1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: f8dgV4b/R76bPhDm3HV5GVOwjNZ0d9IopmW0GCwRtiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
        Validity
            Not Before: Jul 27 06:40:57 2026 GMT
            Not After : Aug  3 06:40:57 2026 GMT
        Subject: CN=6a66fd7a-da0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:ef:ad:cd:9f:18:a5:ce:bb:6e:0a:b2:60:
                    f0:06:65:ae:db:2b:1d:7c:09:ca:2e:79:47:50:2d:
                    3f:e7:12:4b:8f:db:c4:21:81:06:22:54:b4:25:f2:
                    71:2f:60:a6:f2:65:8c:39:88:b8:4c:2f:69:a7:82:
                    70:7b:8b:90:68:72:0d:b7:c7:91:6c:49:89:5f:91:
                    19:0d:86:4e:b9:42:88:71:f0:03:82:c1:fd:3a:5b:
                    9a:1b:57:7a:ba:bf:c4:2e:cb:df:27:7c:b6:c7:f7:
                    74:22:8a:01:7e:e5:a0:19:08:19:5d:16:75:cb:5e:
                    3b:32:25:80:40:39:82:3e:de:26:7a:d8:b0:5f:60:
                    79:e6:4d:72:6b:9a:f4:c1:2f:46:90:1e:37:0a:b1:
                    7e:d8:77:75:dd:04:59:03:f0:4f:48:ff:91:a3:2c:
                    45:77:8e:dc:4d:91:17:d7:62:38:a0:59:6b:48:7f:
                    c9:9d:3b:43:d0:7f:e1:c8:eb:ed:6b:f5:b1:46:e4:
                    6f:6b:8c:e4:a5:c5:a1:97:a7:8a:42:da:42:48:78:
                    5d:0b:8e:9b:41:48:75:ae:68:aa:b0:3a:f3:c3:7d:
                    36:3e:a8:f3:80:4a:c8:35:68:f8:5e:c3:67:94:ed:
                    5c:bd:6c:1e:25:81:75:07:b7:d6:42:76:b7:ae:9a:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:10:55:44:9B:8C:2A:79:AB:67:1B:8C:42:7A:56:58:8B:19:A6:01
            X509v3 Authority Key Identifier:
                keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:6b:3c:29:4a:5c:42:fb:00:3f:6e:6f:70:44:37:16:33:
         38:eb:3b:5c:13:2f:93:c9:90:2d:75:5a:2e:3c:d0:5b:01:ce:
         21:ba:57:88:f6:a9:f5:56:fb:64:15:ce:38:a0:e9:d2:a3:3e:
         8b:37:d3:0c:a5:9d:f9:0c:b8:3c:06:08:0a:f0:28:92:d5:f7:
         27:af:2e:28:eb:9e:74:b9:5f:15:e7:41:62:d8:ea:66:4d:9a:
         de:6e:9d:77:ea:37:c7:f5:46:82:c8:81:18:18:d1:09:33:64:
         33:f2:48:8c:d6:93:b8:94:74:f8:d7:b7:65:a5:71:53:0b:f2:
         63:43:50:7c:cc:8f:5c:54:21:96:71:24:d4:07:60:07:9a:69:
         2b:ea:de:66:3f:90:2c:28:f6:f0:2a:c1:ca:05:3c:dd:fd:cc:
         ca:39:40:77:20:df:52:42:8c:7a:a3:f9:b8:c6:5d:35:17:db:
         98:8a:47:50:a4:e3:a1:2d:47:86:06:ca:f7:1b:19:f0:f3:2a:
         41:e5:85:4a:8e:46:89:6c:d3:5a:e0:fd:75:f0:d4:d8:45:18:
         78:1c:8e:7d:20:af:60:4b:97:bb:a1:ce:21:1f:4a:57:9d:0e:
         e7:91:d5:62:1d:df:e9:9a:87:0c:47:37:56:59:8e:b5:c8:3c:
         4c:84:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:46 2026 by rpki-client