Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
File:                     BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json)
Hash identifier:          VdRlQWfhbkxMPcojQRZ97NIK5vQ/9YERYzUql/6ai8M=
Subject key identifier:   B6:63:13:65:55:73:33:62:84:84:35:CD:E4:BA:78:02:B2:4C:F2:D8
Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
Certificate issuer:       /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Certificate serial:       3563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
Manifest number:          3563
Signing time:             Tue 28 Jul 2026 14:37:57 +0000
Manifest this update:     Tue 28 Jul 2026 14:37:57 +0000
Manifest next update:     Tue 04 Aug 2026 14:37:57 +0000
Files and hashes:         1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: xewZdi7x82wnKCULaCgudbcHrUcGFQHN0H4WsW5IMrE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl
                          rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13667 (0x3563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178D35, serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
        Validity
            Not Before: Jul 28 14:37:57 2026 GMT
            Not After : Aug  4 14:37:57 2026 GMT
        Subject: CN=6a68bec5-b335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:04:cd:dc:43:5c:55:17:5e:d1:8c:b5:e0:
                    5c:1c:f5:ac:71:f5:9d:26:cc:4c:cf:59:bb:b9:40:
                    f4:ed:9c:68:e7:3e:13:f1:f1:51:96:eb:2a:cc:8b:
                    24:ad:d5:eb:c9:91:bb:5f:f7:b8:4c:25:3c:30:40:
                    48:e3:9f:9e:05:9d:c3:62:45:1d:b0:83:0b:0a:0c:
                    64:e9:62:c7:0b:c2:d0:59:5a:e7:68:e1:a6:e7:c9:
                    a3:f2:03:5d:93:3f:4a:ac:8e:19:6a:d8:3c:13:46:
                    06:8b:84:7a:47:44:2b:77:f8:ea:bc:d1:08:eb:56:
                    28:16:45:d5:7c:a0:f9:6e:1a:90:3c:eb:28:43:21:
                    60:04:c0:0b:03:d5:97:41:5f:3a:07:57:29:18:1b:
                    19:41:19:59:d3:13:ad:9c:5a:a3:e3:df:a8:71:cf:
                    da:ce:19:01:15:0d:6a:75:59:01:34:3c:a9:72:1a:
                    64:27:d4:c8:27:3b:ea:5b:62:ad:9e:5a:a4:a9:80:
                    b2:b2:aa:62:15:46:06:63:b5:ac:d9:b6:75:4d:8c:
                    ee:7a:ba:7e:8c:c2:af:f7:1a:b4:39:c2:0f:68:61:
                    56:4d:ec:d0:ba:93:20:72:9a:6c:5a:ef:aa:07:1a:
                    15:a0:12:8f:bc:c8:be:c5:55:31:34:77:38:16:75:
                    2c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:63:13:65:55:73:33:62:84:84:35:CD:E4:BA:78:02:B2:4C:F2:D8
            X509v3 Authority Key Identifier:
                keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8d:06:e3:68:8a:90:c0:b9:a7:f3:3d:51:22:92:50:6a:3f:
         ba:24:a2:7a:1e:77:8d:3a:c8:14:14:5f:ec:c1:6c:8b:11:bf:
         61:78:d9:70:29:a9:75:4f:eb:57:d0:b6:57:17:65:91:ff:2e:
         33:2e:50:de:9f:10:e0:76:30:3f:6a:aa:16:79:40:ed:3b:a6:
         20:fc:ab:4b:67:08:de:de:85:2c:dd:99:eb:be:32:38:28:c6:
         2e:b2:4c:2f:d7:9f:24:4e:27:1d:55:fa:97:8b:09:b2:9d:41:
         09:54:0e:61:99:45:fd:2e:b8:0c:0d:32:eb:2e:29:6f:d5:dc:
         af:85:e0:0d:67:c9:a3:b7:7f:b4:af:60:c2:43:89:f6:27:42:
         3f:07:13:97:1c:17:0e:c1:e8:29:55:e4:9a:ec:f1:9e:da:26:
         d9:e4:9f:fe:a0:74:3f:0f:ed:52:fe:ae:05:6f:ec:1c:a9:38:
         d3:0f:ac:10:93:ab:55:95:1a:a1:a4:99:25:52:4e:ce:82:09:
         3f:77:73:f4:98:f8:2f:1f:ff:1c:7c:40:f6:88:01:27:87:47:
         6e:00:c5:81:a1:0a:f0:e7:b4:4a:5e:7a:12:86:1a:55:85:bf:
         ad:26:ba:d9:61:b4:0f:71:c4:17:f7:ee:a1:6c:08:d0:06:83:
         c0:71:03:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:57:01 2026 by rpki-client