Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft
File:                     l-cly4ZRjBgURIehUCq-Kw1EAwU.mft (raw, json)
Hash identifier:          wBf2FoBPZ/w2cq2SoEJEHLwyxC/N13Urw+6VqvfexU8=
Subject key identifier:   E7:1B:43:6C:AC:B5:70:93:AF:94:AA:13:71:1B:D1:89:DC:9D:D4:E8
Authority key identifier: 97:E7:25:CB:86:51:8C:18:14:44:87:A1:50:2A:BE:2B:0D:44:03:05
Certificate issuer:       /CN=A9172B99/serialNumber=97E725CB86518C18144487A1502ABE2B0D440305
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft
Manifest number:          34
Signing time:             Tue 13 Oct 2026 09:23:48 +0000
Manifest this update:     Tue 13 Oct 2026 09:23:48 +0000
Manifest next update:     Tue 20 Oct 2026 09:23:48 +0000
Files and hashes:         1: l-cly4ZRjBgURIehUCq-Kw1EAwU.crl (hash: XUieV7PPeSP/AT6QtndrVX5bQUiH+c2Nq5/7zPq1878=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.crl
                          rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B99, serialNumber=97E725CB86518C18144487A1502ABE2B0D440305
        Validity
            Not Before: Oct 13 09:23:48 2026 GMT
            Not After : Oct 20 09:23:48 2026 GMT
        Subject: CN=6acdf8a4-d70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7c:79:ba:c6:10:f4:c9:49:20:ad:0c:3f:0e:
                    cd:43:52:37:69:70:bd:68:36:15:89:0b:06:9e:fa:
                    77:fc:5a:7f:88:38:69:83:30:8a:01:d8:ac:ef:f9:
                    4a:cf:4f:8c:1f:4f:06:20:0c:4f:da:a7:5a:9d:a4:
                    10:69:6a:b3:b0:ac:62:8b:fc:ba:13:86:54:28:20:
                    3c:c2:34:8c:02:06:8c:f6:ad:af:48:2f:85:be:cf:
                    ee:4e:d5:68:1a:55:bc:16:cf:33:db:36:b0:bd:82:
                    00:63:c2:18:76:3a:c4:41:72:e1:dd:8f:4d:ed:85:
                    8b:96:3c:6a:57:f1:68:ac:c4:63:39:53:f4:16:73:
                    45:2e:5f:66:d1:ee:60:8d:63:21:59:b5:cd:1d:1b:
                    29:67:d1:a9:7e:4c:15:15:85:c7:41:2c:d6:55:c3:
                    9e:1d:b1:21:41:3e:fa:dc:af:ce:2f:39:7e:cb:e5:
                    5d:13:c0:69:a4:ff:3d:c9:6a:04:9f:92:b7:61:e1:
                    b4:a5:4a:a8:58:55:79:fd:fb:12:b2:ed:bd:5d:3a:
                    69:53:56:0b:30:ce:f3:fd:f6:40:62:bd:ca:51:6b:
                    76:85:a2:86:d2:ec:8a:cc:61:6d:e9:0a:16:7f:3c:
                    7d:4a:05:c0:a8:9c:61:86:9a:6d:ed:30:0f:df:ad:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1B:43:6C:AC:B5:70:93:AF:94:AA:13:71:1B:D1:89:DC:9D:D4:E8
            X509v3 Authority Key Identifier:
                keyid:97:E7:25:CB:86:51:8C:18:14:44:87:A1:50:2A:BE:2B:0D:44:03:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:93:1e:7e:90:d7:79:19:c6:e9:7f:63:44:a0:67:28:1e:6e:
         93:02:d2:4f:26:94:1c:09:e9:a0:a8:12:a5:1c:c9:a3:e2:4a:
         83:b6:a4:a8:43:c0:de:cb:52:ba:de:e0:97:20:05:13:46:a1:
         ae:b6:2a:6b:0a:88:43:7f:e8:c4:0a:40:34:95:d2:ce:c4:6c:
         5b:ae:cd:e3:1e:92:ed:ed:b1:d4:74:62:78:05:dd:82:d2:ef:
         f5:9e:37:b1:2a:ce:0d:d7:12:4a:c7:5a:d4:16:ad:5a:0d:55:
         31:e3:54:e3:6e:d3:ea:a5:2a:45:4a:33:23:22:34:4a:30:21:
         03:b1:8d:5d:b9:40:f7:0f:8b:9a:aa:d4:54:78:9b:00:40:e3:
         4c:9b:84:c5:61:ba:e7:29:63:8f:76:c0:c2:81:0f:4c:46:79:
         59:d2:81:1c:7d:f5:2b:1d:81:29:ad:5e:e5:9d:9d:40:58:a7:
         66:12:fd:70:a1:fd:89:a4:07:77:83:7e:d8:7a:89:e8:22:65:
         77:6c:0f:d6:78:e9:85:6c:dc:37:41:bd:48:63:74:82:3f:ba:
         8e:48:24:49:92:7a:54:69:d5:de:dc:bc:42:04:eb:f4:b6:41:
         be:bd:b1:6c:7c:f9:ee:72:0c:ed:68:65:48:9e:be:aa:32:53:
         ce:a4:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:04:47 2026 by rpki-client