Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
File:                     RXfmNryC40djCTad9uzHkOsrkUU.mft (raw, json)
Hash identifier:          bvo37xylQG4hiqMvl7+FYYbcbJaARjAAhSAoMV3C3Mc=
Subject key identifier:   B2:14:13:00:96:42:07:45:F7:F2:4B:9E:74:81:65:4E:2F:AC:72:4B
Authority key identifier: 45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45
Certificate issuer:       /CN=A91614E3/serialNumber=4577E636BC82E3476309369DF6ECC790EB2B9145
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
Manifest number:          30
Signing time:             Mon 27 Jul 2026 11:01:11 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:10 +0000
Manifest next update:     Mon 03 Aug 2026 11:01:10 +0000
Files and hashes:         1: RXfmNryC40djCTad9uzHkOsrkUU.crl (hash: Wj04T0D1dixBo6XP7F+q1mf0ia78Yzn/kZgf9OrLOV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.crl
                          rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91614E3, serialNumber=4577E636BC82E3476309369DF6ECC790EB2B9145
        Validity
            Not Before: Jul 27 11:01:10 2026 GMT
            Not After : Aug  3 11:01:10 2026 GMT
        Subject: CN=6a673a76-5762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:83:b3:22:da:f0:8c:96:a1:4c:11:7e:db:
                    d3:8c:78:20:14:2f:61:19:9a:11:fc:cc:17:1a:80:
                    06:d6:40:07:f0:1c:43:6e:8e:e4:54:af:ee:e7:59:
                    dc:00:e7:16:9d:5a:b7:d1:ba:bb:0d:52:f9:7d:4e:
                    85:89:ba:fa:7c:2a:0a:19:5b:2c:e6:b3:08:ff:f8:
                    c7:5b:4f:2c:de:2f:58:36:15:5c:4c:eb:fb:d4:1f:
                    e1:9e:52:77:da:76:69:a2:c7:32:78:72:48:4d:6d:
                    42:0a:17:18:8f:58:df:1e:23:3f:31:02:8e:e3:ce:
                    3e:d9:f4:a7:be:ab:fb:96:43:a1:55:35:ab:33:15:
                    70:7d:7a:39:60:23:66:4b:30:64:25:39:70:25:21:
                    ed:5f:a9:41:d2:a1:bd:61:db:02:bc:30:88:2b:94:
                    0b:23:9d:0f:e8:fe:1a:8e:d2:ce:a6:f0:4e:6c:79:
                    1a:c8:79:0c:f5:62:54:3f:c3:53:ea:85:65:6a:ba:
                    7f:9a:4a:61:20:07:17:f4:2b:46:d4:bb:4c:60:5a:
                    1c:29:a5:f2:a3:2a:4b:46:fa:86:2a:25:f4:06:db:
                    db:c6:73:17:35:2c:9b:ad:da:de:60:5c:a3:25:57:
                    ca:58:bb:d0:71:47:70:32:c4:07:3e:10:c9:d9:0a:
                    a5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:14:13:00:96:42:07:45:F7:F2:4B:9E:74:81:65:4E:2F:AC:72:4B
            X509v3 Authority Key Identifier:
                keyid:45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8a:a8:e8:c1:97:1e:9a:82:9a:c9:ca:ae:05:c7:6a:89:75:
         64:18:61:3d:93:6d:c5:94:4e:5e:a7:1b:18:8f:94:ad:52:1e:
         05:34:5d:fb:3b:05:34:77:52:d3:9c:26:7f:ac:20:1d:34:14:
         24:b6:87:b6:11:55:de:05:3f:7c:24:e1:9c:c0:55:f1:6c:2e:
         7a:85:0c:31:fb:bb:97:08:8b:76:2d:cb:16:47:9b:10:1c:57:
         b4:50:6a:eb:3a:1f:f2:02:73:f1:20:c4:53:3d:07:a9:0d:6e:
         b2:50:ef:33:e1:bb:47:13:54:ee:9d:f7:18:93:64:58:fe:6d:
         c9:a2:ce:1e:23:b7:fc:bc:3c:da:fd:fb:f5:82:c4:6e:bd:5f:
         ce:f8:cd:07:75:36:1d:fb:c0:27:04:de:ce:ee:c7:69:0e:2c:
         d9:18:e2:5d:0b:d1:76:b5:96:bd:b6:f7:18:9f:c6:55:5a:cc:
         f0:5f:83:58:c4:3e:cb:8e:f1:21:92:1b:44:35:bb:2e:53:8d:
         d8:59:16:2b:33:27:a7:15:59:5c:53:e5:28:d1:9d:f4:1c:bf:
         dd:58:43:61:b4:36:7f:6e:47:41:56:b2:a4:74:df:b8:53:c8:
         2a:ce:fa:76:f9:21:92:de:22:c3:56:d2:22:25:28:8d:6b:b6:
         47:ba:04:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:41:04 2026 by rpki-client