Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
File:                     B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json)
Hash identifier:          T12HpUTBBwt2YfVNZoF75yLn8ERL397s3NO/keIDLSs=
Subject key identifier:   42:E6:99:EE:BE:FC:E7:72:06:3C:7F:D4:17:DA:BD:95:CF:0A:DD:F1
Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
Certificate issuer:       /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
Certificate serial:       12A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
Manifest number:          1285
Signing time:             Tue 28 Jul 2026 17:11:11 +0000
Manifest this update:     Tue 28 Jul 2026 17:11:10 +0000
Manifest next update:     Tue 04 Aug 2026 17:11:10 +0000
Files and hashes:         1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: pjMjbcOhDVEa9WwAKAFl+rNIxdHEPbuKUJtMYkPH+ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl
                          rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4773 (0x12a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
        Validity
            Not Before: Jul 28 17:11:10 2026 GMT
            Not After : Aug  4 17:11:10 2026 GMT
        Subject: CN=6a68e2ae-60f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:b1:27:56:62:d4:21:5a:78:3e:eb:56:4d:
                    56:73:23:b9:24:6e:90:ff:37:99:bc:4f:48:a3:78:
                    7d:27:4f:13:de:bb:86:e7:47:95:84:be:4c:0c:1a:
                    20:4f:6a:b7:c4:2e:c1:f3:ad:8b:bd:e0:57:90:7c:
                    a4:34:b4:7e:2b:26:79:43:06:28:11:be:23:fd:93:
                    9f:ad:cc:a3:57:2e:f2:6e:94:34:c7:12:5c:46:b5:
                    87:e3:a1:bc:a2:9e:e3:da:2c:75:cc:42:96:b2:36:
                    bd:19:12:b3:ce:e8:c0:5c:59:82:dc:bb:e6:1b:24:
                    c6:10:71:47:af:22:bf:b9:db:a6:a3:62:2a:97:c9:
                    44:2d:22:8e:03:2a:d9:32:0a:a5:6d:13:02:be:ad:
                    a8:bd:84:14:76:56:33:b7:f5:14:a5:02:2b:cf:87:
                    84:41:5e:b3:9e:9d:06:f5:e7:f7:4d:2d:bd:1c:1c:
                    3c:41:eb:a5:12:04:44:e6:c6:35:a6:1d:2b:ba:84:
                    75:ee:7c:aa:5f:d4:e0:02:59:8b:e0:f1:db:c7:f5:
                    da:be:9c:24:22:de:25:11:01:37:64:6d:9d:bb:25:
                    fe:26:52:dd:79:19:c4:3a:74:41:a2:ba:a4:e7:5f:
                    f9:b6:63:58:c7:93:cf:c1:e4:d4:dc:e0:f6:9a:66:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E6:99:EE:BE:FC:E7:72:06:3C:7F:D4:17:DA:BD:95:CF:0A:DD:F1
            X509v3 Authority Key Identifier:
                keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:33:98:dd:ab:e6:39:9b:03:b3:36:9f:03:d7:a4:29:6e:0f:
         45:56:bd:f0:f2:6e:25:0a:cb:39:b8:90:85:a0:a2:ec:8e:2d:
         17:28:bc:b2:4c:d4:62:0f:66:c8:a2:06:35:ee:a1:a7:11:d4:
         7a:bf:2a:68:2a:6d:d3:27:c3:0f:9f:3d:f4:0f:d7:d8:89:87:
         d1:a5:fa:b4:13:05:a1:b6:8a:19:15:8b:5a:2c:fb:93:89:d8:
         8a:4d:0b:31:7b:81:75:49:6d:5c:7a:ed:e6:ff:f7:90:c0:ba:
         0f:7b:6b:89:27:a4:cf:40:7a:76:8e:63:54:bb:6b:df:ca:2d:
         1c:52:ae:12:b3:45:95:e7:a2:60:df:ba:d7:a0:08:a2:d9:99:
         60:bf:df:a9:5f:e9:a0:50:1f:56:eb:62:b7:d6:5c:d7:59:7d:
         a2:73:81:b9:eb:cf:96:1c:ba:1f:a7:97:c0:22:6a:fa:7d:70:
         e7:48:a3:02:c0:07:38:29:45:f3:9a:f9:b9:39:22:35:04:97:
         c0:24:a5:3f:5e:ce:ef:7b:bd:28:47:18:8d:15:95:16:06:e8:
         dd:6c:b0:8a:83:17:bc:14:01:a0:da:20:18:95:64:6d:e8:f7:
         06:7d:8d:0f:ba:65:25:4a:25:75:70:d2:ec:70:64:99:86:e5:
         4a:a6:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:30 2026 by rpki-client