Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
File:                     Ae2EH7lRqvolkYDvkpnk02_ffD0.mft (raw, json)
Hash identifier:          bN/olPMMu0H1p5sWWBauA0x2zfZS+X7Bf0frEKCTzlc=
Subject key identifier:   3F:86:1D:D9:C8:8C:CF:E5:BF:98:D5:27:B0:34:99:34:AC:8A:27:53
Authority key identifier: 01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D
Certificate issuer:       /CN=A913D125/serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
Manifest number:          0124
Signing time:             Mon 27 Jul 2026 07:43:34 +0000
Manifest this update:     Mon 27 Jul 2026 07:43:33 +0000
Manifest next update:     Mon 03 Aug 2026 07:43:33 +0000
Files and hashes:         1: Ae2EH7lRqvolkYDvkpnk02_ffD0.crl (hash: L1LQx+0ymSUsVVSDua2ViuDA74ZsfutDHULbQdWRbQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
        Validity
            Not Before: Jul 27 07:43:33 2026 GMT
            Not After : Aug  3 07:43:33 2026 GMT
        Subject: CN=6a670c26-f804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:8b:1c:05:40:34:7e:8f:a6:8b:fd:a8:2a:
                    4b:86:26:31:7c:1a:45:ff:0e:a4:3e:d6:76:b3:37:
                    25:fe:0d:b9:3b:5d:c4:d1:83:7f:28:35:6a:dd:0e:
                    2e:e7:98:ca:05:56:88:1e:b3:a3:28:c8:6b:83:3d:
                    d8:b0:96:b3:12:4b:58:e3:02:be:4a:dc:9e:69:3a:
                    23:6b:51:e4:8e:79:1b:6e:2f:e3:fd:03:e1:3e:9a:
                    60:07:bf:bd:ad:f3:e2:44:eb:99:40:e2:09:e5:15:
                    f9:e5:4a:95:07:69:2f:50:d3:70:e0:fe:40:2a:c1:
                    41:c9:f2:f7:5c:52:14:5a:92:a0:2c:5c:ea:10:da:
                    8b:ac:64:0a:7c:65:01:95:b8:32:a2:49:21:28:85:
                    82:ef:58:ac:38:de:12:35:e4:7e:93:cc:09:4c:a8:
                    29:e3:2a:bb:2f:b0:da:b4:15:71:2f:63:6c:74:5c:
                    05:a4:92:82:32:13:7b:66:ad:d7:71:bc:9f:30:b2:
                    96:37:3e:94:bb:cf:3e:56:98:0e:36:11:ca:09:c8:
                    bc:33:26:ba:de:ec:c4:c3:dd:02:b4:e1:01:3f:9d:
                    62:87:60:8a:e9:78:c9:44:f5:b6:19:64:4f:03:35:
                    35:3d:e5:64:e9:11:c5:04:54:64:23:a6:12:ea:1f:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:86:1D:D9:C8:8C:CF:E5:BF:98:D5:27:B0:34:99:34:AC:8A:27:53
            X509v3 Authority Key Identifier:
                keyid:01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0e:f9:85:ad:45:30:f9:d9:09:d7:ac:b9:dc:9a:7c:b3:e1:
         08:26:9a:e7:79:76:9b:02:f4:d2:b6:a6:cb:83:15:8a:39:9f:
         67:aa:35:8d:a7:65:83:27:2c:80:63:fe:f6:99:3b:46:c8:b2:
         1d:27:62:18:31:ca:17:39:8e:99:55:90:51:82:3a:63:a3:b5:
         55:e3:97:f5:8b:cc:39:11:dc:67:4d:77:71:6e:e9:b6:93:2a:
         88:cf:08:fa:28:35:9c:91:59:9c:75:38:44:73:51:5f:4b:47:
         04:f4:90:8f:80:d3:13:d8:bd:10:0f:29:64:7d:72:c2:30:a9:
         93:3f:1f:2b:ab:83:07:0d:32:7c:43:5c:53:78:ce:a8:11:41:
         74:10:17:6f:a6:d9:d7:88:53:7d:1e:63:8d:8b:99:8b:16:95:
         85:42:55:99:77:e0:75:13:ce:5f:09:be:f2:87:55:cf:8c:5a:
         77:3c:ff:84:93:eb:35:fb:f7:91:8e:d1:70:b1:1b:56:b6:16:
         04:d1:fa:81:8f:71:3d:73:40:0a:a3:be:e7:23:93:b5:2d:41:
         2a:2f:71:9a:4f:e1:f8:a0:28:ac:80:78:8d:8a:b7:b3:d9:43:
         5e:47:6f:fb:0c:41:52:07:32:fa:6c:6a:68:fe:df:95:bd:b7:
         73:88:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:19 2026 by rpki-client