Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
File:                     i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json)
Hash identifier:          +C+yrlv6VNSdv/nme7gvI6FqCnAsSVJ6zIR1kQacjQI=
Subject key identifier:   1B:E3:AD:2A:EA:2C:B3:21:0E:5B:FF:CD:81:99:FE:63:CC:9E:DD:FD
Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90
Certificate issuer:       /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
Certificate serial:       0CED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
Manifest number:          1661
Signing time:             Tue 28 Jul 2026 18:32:52 +0000
Manifest this update:     Tue 28 Jul 2026 18:32:51 +0000
Manifest next update:     Tue 04 Aug 2026 18:32:51 +0000
Files and hashes:         1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: VWZNkrHvGJ1ma0qkpONVPGv3HiAbNkRF0bH1kOmTmvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl
                          rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3309 (0xced)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FD04, serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
        Validity
            Not Before: Jul 28 18:32:51 2026 GMT
            Not After : Aug  4 18:32:51 2026 GMT
        Subject: CN=6a68f5d4-250e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:ba:5a:16:ca:73:4a:84:14:7e:d4:8c:87:
                    be:3e:e9:21:64:5a:50:01:c5:e2:54:35:96:ba:5b:
                    8c:d4:dd:8a:06:93:7a:98:59:1d:4c:ca:bf:f1:fc:
                    dc:ae:d4:15:c1:aa:8b:14:99:39:47:61:e3:1b:4d:
                    5e:fa:cf:91:94:fa:19:89:f1:9e:b6:20:7f:20:c4:
                    56:46:5f:bf:92:4c:cb:09:d9:fa:7e:4f:42:39:0e:
                    0d:0f:e5:0e:8d:be:42:88:8a:2a:76:db:e4:eb:24:
                    ae:fc:9b:9a:4c:c4:cb:81:98:bd:40:fd:34:c6:b4:
                    8b:57:12:4d:0c:78:a6:f6:dc:c1:9e:a6:c2:01:19:
                    9d:2f:e6:56:29:db:03:5f:90:5a:6c:91:9f:27:d5:
                    f1:7b:d5:87:04:9d:6d:7a:17:24:ce:93:5e:db:64:
                    fc:b3:49:6e:42:fb:02:d3:8c:fa:94:88:18:45:dc:
                    61:9d:11:28:df:58:02:82:e1:91:be:7d:a5:26:db:
                    05:73:eb:fe:0e:b1:1c:74:99:d0:90:8f:15:bf:70:
                    5f:5e:e7:16:10:26:ce:7d:30:01:88:2f:e9:85:d9:
                    e2:ee:22:a9:18:d3:7a:37:bc:10:1d:d9:5d:e1:f6:
                    c0:d5:ee:7a:25:af:20:9d:e6:db:f8:58:48:41:6f:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E3:AD:2A:EA:2C:B3:21:0E:5B:FF:CD:81:99:FE:63:CC:9E:DD:FD
            X509v3 Authority Key Identifier:
                keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a5:69:c8:c8:bf:8d:17:82:5f:cf:26:6c:69:92:6a:9e:50:
         ba:08:62:1e:f6:f4:58:9e:d6:d6:43:af:64:f0:38:8a:95:f8:
         d9:6c:4b:e8:74:13:c4:c5:9a:a8:c0:ad:c7:e1:5c:93:ea:fb:
         a6:7a:b7:ab:21:f4:b7:eb:10:9e:a6:ba:b1:a0:8c:ae:bc:86:
         05:80:17:03:2d:e5:b0:f5:83:7f:1c:4c:59:95:85:fb:3b:85:
         1e:f8:d8:59:a4:57:57:72:28:dd:ec:1e:b6:70:22:60:96:03:
         f8:a0:ae:d3:a3:55:7a:2a:f6:69:b6:13:7f:43:3f:25:d1:26:
         a6:77:9c:9a:4b:0b:13:e4:ea:19:80:40:e6:fe:3d:23:7a:56:
         bb:d0:53:3b:6e:68:a4:4c:5b:60:b2:c3:01:4c:96:6e:b8:9f:
         83:e6:bd:a1:d7:49:40:0d:3f:84:77:75:ca:2f:53:c7:31:e1:
         cb:2e:e1:13:1d:6b:cc:73:c3:ba:c7:90:02:ff:d4:52:76:e2:
         02:53:95:f2:b2:6b:93:74:90:0b:f4:63:35:dc:c3:18:b1:3f:
         7c:2c:f8:9f:ef:df:a1:d0:6f:df:2d:5d:6d:3c:e5:a4:eb:d3:
         be:c3:d6:9e:87:85:d7:da:63:6b:f6:f2:e3:10:98:90:10:1d:
         4f:ad:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:06 2026 by rpki-client