Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
File:                     Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft (raw, json)
Hash identifier:          wesaSQuViXEZ3MWGSj6vEyOMexRsHkfhAtMMUPIOKQA=
Subject key identifier:   AA:70:FF:63:17:BF:69:39:FD:00:9B:EC:7F:26:3D:88:0F:CB:72:0B
Authority key identifier: 3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9
Certificate issuer:       /CN=A9174A0F/serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
Manifest number:          11
Signing time:             Mon 27 Jul 2026 11:05:55 +0000
Manifest this update:     Mon 27 Jul 2026 11:05:54 +0000
Manifest next update:     Mon 03 Aug 2026 11:05:54 +0000
Files and hashes:         1: Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl (hash: dK6tegB3ESFBBciomlkg7hS0MDf/fTrnGCINNVc40GE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl
                          rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A0F, serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
        Validity
            Not Before: Jul 27 11:05:54 2026 GMT
            Not After : Aug  3 11:05:54 2026 GMT
        Subject: CN=6a673b92-51c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:5f:dd:5b:4c:0b:6c:2b:82:01:aa:60:ee:
                    0e:46:34:f0:88:50:ad:22:08:4b:52:cf:30:06:3e:
                    5c:20:96:11:5f:00:c6:39:85:6d:ce:39:e9:24:3b:
                    4a:72:9c:3f:e4:5c:a0:f9:43:d9:19:87:df:70:b9:
                    9e:32:15:3b:c7:de:88:b8:d1:26:60:76:84:5e:cc:
                    81:41:09:01:2e:92:a7:5e:25:b9:11:24:d6:d6:4c:
                    bb:57:ea:2d:a5:1a:20:1f:4f:fb:13:28:6a:18:06:
                    b2:10:0f:48:e3:68:ed:b1:74:2c:79:bb:51:a1:29:
                    de:8d:e8:a6:0a:35:27:9c:6f:a1:dc:93:92:20:16:
                    e1:ef:de:4a:f2:f3:f9:d8:8f:73:a2:1f:34:a0:56:
                    f6:f0:80:6a:e5:84:b1:9c:c7:83:a9:b1:ce:63:89:
                    32:5c:2d:e3:fb:54:de:06:f7:43:26:2b:dd:d2:c1:
                    e5:fa:88:c9:3e:0f:b6:d9:00:53:07:d0:91:9f:12:
                    19:26:93:77:0b:63:5f:32:36:e1:89:5c:b9:3b:72:
                    70:54:12:9b:3a:c0:11:ce:ae:4b:17:e4:f1:f7:90:
                    d3:45:e9:26:7a:1f:13:91:49:d3:47:63:1d:07:bb:
                    66:7d:48:e0:df:15:87:ac:3f:61:b8:a3:94:f8:56:
                    f8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:70:FF:63:17:BF:69:39:FD:00:9B:EC:7F:26:3D:88:0F:CB:72:0B
            X509v3 Authority Key Identifier:
                keyid:3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:04:28:01:09:de:87:e8:ca:bc:e0:b3:d0:6c:0a:6e:aa:87:
         f6:1c:87:5b:5b:81:37:ee:d2:4c:db:93:15:fc:1a:2e:aa:e2:
         fa:8c:df:f2:19:0d:e7:45:51:b7:50:16:e3:8f:3b:f1:5a:4b:
         65:31:04:3a:02:79:22:9f:5f:74:2b:db:c4:d5:66:2b:50:de:
         98:2d:a8:f7:15:97:3c:00:bf:94:44:b7:0d:70:b7:f5:d4:b4:
         fc:48:c7:b0:6c:b3:70:ef:09:52:77:eb:3d:c0:05:8b:a2:7b:
         80:a8:99:27:c5:bb:70:c1:c7:67:41:21:e2:3e:52:04:d0:4d:
         c8:85:eb:86:85:18:06:67:d9:d7:c5:55:ee:54:52:40:87:8a:
         5d:dc:1b:b5:41:52:56:a8:64:52:d8:79:8e:c0:df:69:49:8d:
         15:f6:b3:9b:f5:e4:94:1e:16:df:82:26:81:06:41:e7:1c:00:
         32:9b:b3:e1:8b:b6:71:b0:a7:fa:8a:7c:9a:88:8e:84:b5:46:
         c1:52:6a:a6:48:43:00:0a:74:90:15:1c:66:b9:82:41:c4:6e:
         9e:e2:4a:89:63:84:89:46:2d:3b:94:db:58:63:5b:52:ff:b2:
         ae:76:35:1d:51:14:1d:fa:2f:5f:44:28:d7:ba:56:06:40:6b:
         fd:81:59:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:14:21 2026 by rpki-client