Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
File:                     8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json)
Hash identifier:          rCUFQZEM+GPaf75433U410WeDSclU0Gsyc1frqyk5dI=
Subject key identifier:   B9:90:C0:07:82:0D:FB:ED:92:EC:1C:40:76:C4:33:A9:6F:82:80:10
Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3
Certificate issuer:       /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3
Certificate serial:       0D11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
Manifest number:          1630
Signing time:             Tue 28 Jul 2026 18:26:59 +0000
Manifest this update:     Tue 28 Jul 2026 18:26:59 +0000
Manifest next update:     Tue 04 Aug 2026 18:26:59 +0000
Files and hashes:         1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: scIurqKVyHxTQ4M+FicdOAMhp2jjK8HIXntQm1xBIAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl
                          rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3345 (0xd11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3
        Validity
            Not Before: Jul 28 18:26:59 2026 GMT
            Not After : Aug  4 18:26:59 2026 GMT
        Subject: CN=6a68f473-a241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:86:45:f6:28:88:95:4f:a7:d2:f7:30:4a:
                    74:07:43:a0:aa:df:9b:28:74:1b:9a:75:a4:a9:b8:
                    1e:2f:2f:81:a1:a2:49:dc:bd:b7:c9:c7:c9:b2:28:
                    6d:8a:b3:df:37:4c:8b:26:e9:ed:77:04:8b:cd:54:
                    d8:c9:80:b9:37:42:14:ea:cb:58:4a:b2:e8:bd:6b:
                    30:1c:fb:97:a2:b2:93:1f:41:15:85:b5:8f:0e:07:
                    90:33:a7:63:ea:59:09:ba:2a:6c:18:86:ea:5f:7a:
                    8f:91:c4:b0:85:6e:77:36:ab:9a:fb:39:33:2c:29:
                    c4:ed:ab:0c:44:d4:bc:26:67:0f:85:f4:70:db:73:
                    08:36:55:8a:4b:7b:98:32:27:93:9d:75:b4:fc:0e:
                    fe:cc:b3:08:62:f3:7d:1d:1c:d2:7e:63:d3:aa:e3:
                    23:3b:af:bc:1d:d9:8f:21:64:e6:87:06:07:0b:9e:
                    ca:cd:e8:56:cd:8f:f2:36:28:2c:e5:84:48:af:bc:
                    75:c6:e9:61:96:30:b1:85:06:9b:7e:f7:07:3f:7e:
                    f9:50:73:cc:4d:87:76:0c:cc:70:92:1d:4b:1f:1c:
                    5f:39:92:5c:bb:93:1e:9d:ac:d4:c5:f2:30:ab:63:
                    c3:45:c4:62:51:f8:73:61:e6:d1:e0:a3:4c:b9:f5:
                    aa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:90:C0:07:82:0D:FB:ED:92:EC:1C:40:76:C4:33:A9:6F:82:80:10
            X509v3 Authority Key Identifier:
                keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3a:f2:db:87:0d:69:0b:c1:8c:f0:84:3b:db:6c:22:a7:96:
         ad:46:1b:25:87:17:0d:dc:b2:8b:5a:be:92:5a:35:89:93:ed:
         83:30:e6:a2:8a:44:5d:00:4e:ff:aa:8c:2e:95:47:fb:cf:84:
         77:2f:f0:83:b5:d2:86:ef:2a:b1:42:cc:d6:63:57:6d:8e:1f:
         81:91:7c:9d:b4:42:90:b6:c3:8b:16:da:2a:df:41:22:d6:92:
         40:7f:73:2f:e7:71:d7:08:9d:83:fe:f7:42:5d:b7:64:d6:a1:
         3a:3e:de:23:f9:42:b0:93:d4:8c:c0:ba:97:e5:a9:65:91:f8:
         66:fb:ea:4d:8b:8c:16:5b:42:49:31:34:ac:33:67:ea:d4:1c:
         2d:91:df:a7:58:56:03:db:bb:57:e7:aa:c9:49:b4:c7:f9:d3:
         e5:9c:78:9b:40:03:2f:0a:7b:c0:c4:9d:b3:27:77:32:d6:a8:
         83:11:4e:d8:ca:6a:b6:42:4d:a2:f7:50:48:5e:b7:08:10:1d:
         33:1a:b8:53:fd:b3:a6:0a:27:1c:6e:62:59:97:5a:26:7b:b7:
         b7:d2:7d:64:2f:0d:d9:cd:03:b4:96:39:e3:08:06:5f:7e:5e:
         b2:6b:bf:f0:d8:c0:cf:c6:22:7d:d8:4a:8c:30:9c:63:e4:45:
         e2:57:68:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:30 2026 by rpki-client