Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft
File:                     _F10279-ZfDQvUClnA1EbIHFB0k.mft (raw, json)
Hash identifier:          LM66UFEhU39u2TMZ28FxEW5Ez16MNVXVgkrdLelpt/k=
Subject key identifier:   91:6D:69:AB:C2:08:FA:67:B6:00:E8:CC:78:7A:7C:96:A1:B1:64:6F
Authority key identifier: FC:5D:74:DB:BF:7E:65:F0:D0:BD:40:A5:9C:0D:44:6C:81:C5:07:49
Certificate issuer:       /CN=A9129FB7/serialNumber=FC5D74DBBF7E65F0D0BD40A59C0D446C81C50749
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_F10279-ZfDQvUClnA1EbIHFB0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft
Manifest number:          15
Signing time:             Mon 27 Jul 2026 11:25:03 +0000
Manifest this update:     Mon 27 Jul 2026 11:25:03 +0000
Manifest next update:     Mon 03 Aug 2026 11:25:03 +0000
Files and hashes:         1: _F10279-ZfDQvUClnA1EbIHFB0k.crl (hash: 9L5b+JVlVc9RFQCebuRviAJvdfbnGlvCeE+aJr1XHE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.crl
                          rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_F10279-ZfDQvUClnA1EbIHFB0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129FB7, serialNumber=FC5D74DBBF7E65F0D0BD40A59C0D446C81C50749
        Validity
            Not Before: Jul 27 11:25:03 2026 GMT
            Not After : Aug  3 11:25:03 2026 GMT
        Subject: CN=6a67400f-5386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:46:3a:d3:80:93:95:69:f8:ea:0a:17:d5:
                    14:02:80:f2:78:71:a1:01:d4:9f:3f:0b:a2:bc:a3:
                    24:6f:59:8e:ae:31:c8:0c:a6:4a:c0:87:76:1b:70:
                    60:46:98:50:ed:9e:ae:3a:cc:34:25:c7:e3:7d:0a:
                    c2:f8:4e:b3:58:a2:8b:f6:e4:9d:ce:fa:b6:32:f7:
                    d3:e8:9f:04:98:7f:9e:81:6c:25:55:48:e8:d9:e1:
                    ef:05:d8:23:f1:f0:d0:12:ef:bd:e5:49:d4:00:b7:
                    4f:d6:ea:53:b9:c8:52:06:df:e2:05:82:1d:43:1e:
                    5c:fd:44:ac:6e:29:58:65:03:45:0f:f1:31:8f:5b:
                    4b:e0:41:b5:63:cb:fd:45:41:cd:ec:ef:74:cc:a7:
                    f0:5c:9f:a4:8a:4d:90:39:08:88:00:f2:90:78:72:
                    a4:34:7c:b3:bf:a5:e9:d9:ad:a1:2e:c5:c9:84:f3:
                    14:13:2d:56:33:05:c4:91:a1:0e:65:da:7f:c9:46:
                    65:12:2c:9f:38:e2:91:ea:39:15:a8:26:59:18:ac:
                    df:07:d9:ae:e9:c8:d3:70:40:00:5f:09:fc:09:13:
                    9d:c1:f2:37:83:b7:21:a2:8f:e7:14:b8:e7:91:9c:
                    a7:a2:aa:b1:df:65:ef:40:e1:c0:e0:b2:46:55:df:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6D:69:AB:C2:08:FA:67:B6:00:E8:CC:78:7A:7C:96:A1:B1:64:6F
            X509v3 Authority Key Identifier:
                keyid:FC:5D:74:DB:BF:7E:65:F0:D0:BD:40:A5:9C:0D:44:6C:81:C5:07:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_F10279-ZfDQvUClnA1EbIHFB0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ec:cd:ed:33:46:24:02:d8:2f:f7:26:db:df:3d:b1:7b:df:
         50:d2:39:3e:37:e5:a4:98:41:c6:8e:fb:d9:a2:c4:af:c2:07:
         44:56:a0:1f:1c:5e:e5:5d:f3:49:1c:f2:c5:b2:f8:0f:dc:72:
         53:0b:2f:0f:28:0a:e1:77:a3:16:85:6c:41:8d:0b:8f:9d:ee:
         52:29:12:14:fa:5c:48:e1:de:80:f8:a3:ee:57:79:56:2f:9a:
         66:1f:9e:37:07:c5:ec:af:c0:42:dc:b1:0c:1b:66:cb:a7:df:
         ff:b4:b2:19:d5:ae:34:e8:1b:f7:31:25:fb:60:05:f2:e8:20:
         69:68:80:48:46:2b:98:5d:ff:9b:2e:fc:68:28:ad:e8:05:aa:
         e2:9b:3d:f5:49:eb:a4:b8:79:93:3e:88:d8:1f:c1:af:ff:47:
         8c:cb:b8:8c:7e:b5:36:6d:ed:fe:ba:bc:fe:c8:b6:7e:5e:7b:
         ef:48:db:85:4a:e0:32:5d:c0:19:e2:14:69:09:d3:dc:16:2d:
         44:4f:74:9b:71:81:be:f2:f8:0a:92:e1:a2:77:26:bc:45:f2:
         08:be:21:8a:77:1f:be:cf:bc:af:88:68:0d:73:fe:6b:78:e0:
         00:32:68:f2:c3:17:04:3d:49:aa:8e:79:8d:d9:cd:24:e9:3a:
         ef:4d:ac:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:51 2026 by rpki-client