Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
File:                     AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft (raw, json)
Hash identifier:          K3ltBZ78zLQfhTA41K4oFWeXkCzqHQe/b4qUNylb7R0=
Subject key identifier:   15:B2:26:96:AE:21:4D:38:F6:72:DB:B9:FA:FE:CE:23:CA:8B:2A:B9
Authority key identifier: 02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B
Certificate issuer:       /CN=A9188064/serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
Manifest number:          5B
Signing time:             Mon 27 Jul 2026 10:29:08 +0000
Manifest this update:     Mon 27 Jul 2026 10:29:07 +0000
Manifest next update:     Mon 03 Aug 2026 10:29:07 +0000
Files and hashes:         1: AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl (hash: b2Ep9RJQXd8pKZisCKVCyvi5yC5VlaAxsVXjPm13yqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl
                          rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188064, serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
        Validity
            Not Before: Jul 27 10:29:07 2026 GMT
            Not After : Aug  3 10:29:07 2026 GMT
        Subject: CN=6a6732f4-721e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b6:57:ad:8c:31:ad:70:95:34:a6:5e:15:37:
                    e5:e3:25:74:42:bb:5b:7f:80:5b:5b:15:47:1d:1d:
                    c9:a5:a7:9d:40:45:68:25:ec:8c:b8:52:1c:09:31:
                    ae:0c:39:cd:db:b1:c5:c8:56:48:1a:23:2e:eb:c4:
                    8c:28:11:61:3d:4a:cc:36:83:85:2b:90:e4:4f:27:
                    c4:24:3d:b6:40:90:bd:3a:b3:93:bc:a8:e4:65:84:
                    32:8e:d6:bd:85:96:05:cf:27:ac:e7:e8:17:d6:4c:
                    86:25:f0:1d:b9:80:54:29:22:62:eb:d5:33:7d:b5:
                    b4:04:96:bc:4c:2c:ee:1a:24:30:f7:28:51:ed:4c:
                    9d:cf:c6:73:22:18:37:0d:14:a0:1a:6a:ca:eb:ac:
                    63:bc:ae:af:6c:f5:76:0f:0d:2c:7a:38:e0:d4:9e:
                    78:80:cf:bb:fe:7e:e6:d6:51:bd:53:a2:7a:da:7e:
                    e7:7e:c7:19:12:08:3d:d1:c4:76:18:d8:a9:f4:8f:
                    7e:06:9b:54:30:8a:b9:a9:f4:50:d4:39:db:d0:43:
                    5c:b4:f9:21:d7:fe:a6:5f:56:c7:5e:6d:f7:61:7a:
                    86:06:bf:77:9e:b6:c3:c2:a6:47:2b:c1:f5:21:42:
                    70:d3:e9:19:e9:29:15:09:ec:f6:7d:26:74:58:65:
                    4d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B2:26:96:AE:21:4D:38:F6:72:DB:B9:FA:FE:CE:23:CA:8B:2A:B9
            X509v3 Authority Key Identifier:
                keyid:02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:7a:84:ed:67:ff:ca:9c:7e:ca:3f:4f:3a:70:d9:4b:22:d1:
         e2:72:b5:82:93:aa:b1:1e:52:a8:04:c7:7a:e2:5b:0c:73:b5:
         1c:02:ef:c4:cd:a7:1a:7c:cd:de:67:bd:b6:d1:a8:e5:63:1c:
         33:e9:ef:85:fd:d4:c7:1b:87:1a:4a:09:dd:dd:17:f4:e4:1c:
         82:32:99:3e:81:91:29:aa:8e:eb:3f:12:66:a0:bf:40:12:10:
         ad:b4:14:f4:50:33:7c:c7:f2:a1:4e:78:3b:ee:78:9d:0a:97:
         9f:8e:60:11:4d:78:85:ab:bd:c4:ed:f7:fe:1d:86:ff:d6:49:
         c2:3f:4a:5a:44:97:16:49:c1:45:44:eb:e8:12:60:86:28:37:
         75:3c:06:44:d8:e4:5c:48:71:31:d7:34:40:37:db:37:b8:87:
         4b:4a:37:f1:dc:62:80:fd:5d:b2:de:e9:3d:25:58:16:d1:40:
         d9:02:fc:8a:20:e2:b8:62:05:18:c1:ee:50:28:c8:ad:89:3e:
         b1:55:38:d1:54:6e:07:28:a0:8a:2f:45:32:09:62:d3:6a:fe:
         3f:31:14:21:40:64:1b:18:f5:5b:3b:12:48:e7:aa:56:de:e5:
         ba:97:10:b8:4a:21:c9:a1:46:c8:93:c7:1c:3e:df:42:00:d9:
         4e:dc:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:08 2026 by rpki-client