Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft
File:                     mqzM8QlZesZbyPegUCo-pK4cXxk.mft (raw, json)
Hash identifier:          6eOP/QaxgSTjfu+eiXMwdtElamrtvYtUFKt/5HnITC4=
Subject key identifier:   B0:21:82:59:D9:06:B2:CD:19:FE:5D:41:4B:D5:5F:BD:B5:C9:25:95
Authority key identifier: 9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19
Certificate issuer:       /CN=A91232CA/serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft
Manifest number:          D5
Signing time:             Mon 27 Jul 2026 08:49:01 +0000
Manifest this update:     Mon 27 Jul 2026 08:49:00 +0000
Manifest next update:     Mon 03 Aug 2026 08:49:00 +0000
Files and hashes:         1: mqzM8QlZesZbyPegUCo-pK4cXxk.crl (hash: AAzwtJ6gHclNVNnA8nnFwxIVF4WPR5p3Ic4y1bxmIq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl
                          rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91232CA, serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19
        Validity
            Not Before: Jul 27 08:49:00 2026 GMT
            Not After : Aug  3 08:49:00 2026 GMT
        Subject: CN=6a671b7d-9fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:af:05:f1:90:77:25:bb:77:1d:33:d3:47:
                    e3:dd:e1:bc:a3:28:7a:3f:3f:ba:1b:0b:20:a8:8d:
                    99:c8:75:c8:39:f9:41:8b:1f:69:44:40:f1:69:d2:
                    e6:bd:d0:ff:25:73:e3:ef:e7:6b:9a:65:a0:ab:32:
                    c1:5c:f6:d6:3d:5d:b3:be:d5:8d:00:a8:36:21:0d:
                    2f:5e:32:46:fa:c3:71:d2:73:7b:45:b0:c8:5d:71:
                    04:1c:7d:3a:d1:54:d7:09:61:00:89:a0:0f:0c:57:
                    0b:a7:a0:c1:7d:a7:80:e5:01:dd:64:da:4f:1a:48:
                    11:78:00:7a:75:b7:6e:d1:03:8e:9f:cf:0f:6e:a4:
                    2c:92:eb:48:89:ff:0e:79:63:c0:84:41:2a:b8:27:
                    ea:6e:ab:cd:2b:aa:c0:5e:01:40:65:9c:7b:8a:76:
                    a3:2f:25:e9:be:f2:26:8d:85:22:83:3d:c0:7f:e3:
                    f4:8d:c8:34:d0:d4:67:c3:2a:fd:9e:7a:23:bc:dd:
                    ee:e8:24:bd:29:db:e1:ce:70:e4:8a:db:80:cd:6a:
                    d3:fc:bf:ce:d2:06:33:50:58:df:97:9e:c7:9c:3f:
                    3b:15:2c:da:ca:aa:9d:fc:f0:bd:da:76:6e:b8:62:
                    47:5d:5e:fd:5c:c9:71:00:fd:c9:ad:58:25:a0:62:
                    c5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:21:82:59:D9:06:B2:CD:19:FE:5D:41:4B:D5:5F:BD:B5:C9:25:95
            X509v3 Authority Key Identifier:
                keyid:9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:11:b1:e8:d4:96:ce:9e:16:1f:dd:f0:e5:5b:af:75:b3:10:
         6d:2e:45:d4:aa:39:26:3c:85:6f:80:51:5b:14:5c:4f:31:bc:
         54:92:a0:30:99:26:63:e4:65:75:f4:67:e5:8c:e4:74:db:bd:
         f3:cb:ba:81:f5:47:33:0a:4d:b5:f7:1e:29:05:16:2b:39:dd:
         e8:ea:be:1a:ab:d7:13:47:c4:1c:e8:a7:f0:2d:61:30:e0:e4:
         1d:4f:07:c8:fe:d5:42:16:45:bd:78:0d:68:29:cb:b3:0c:e3:
         ea:71:ed:b1:11:c6:43:97:71:f1:1f:e5:5a:77:c0:31:f9:46:
         5e:97:76:12:a6:72:03:93:a2:a7:4a:b0:da:a5:24:ce:67:95:
         ae:1c:92:18:c0:22:fc:51:a6:de:c1:8a:a5:a8:41:2b:01:96:
         b2:42:bc:2e:ca:6c:3c:a7:8d:eb:96:d7:2a:53:d0:b5:3e:1b:
         64:9e:c2:84:1c:6a:5a:cb:f7:17:f6:8b:be:02:67:28:f2:73:
         ca:4b:b2:1b:54:8d:a6:f5:f1:b8:82:f8:3f:4e:01:09:d3:ba:
         a7:50:22:23:66:b7:d4:a3:30:fb:61:28:fd:c5:5f:62:e2:0c:
         dd:54:f6:fb:e4:a6:b4:5b:40:10:1d:05:db:80:2f:fa:a9:fc:
         b3:03:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:06 2026 by rpki-client