Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
File:                     ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json)
Hash identifier:          tTYDTbJzfPfTrWXl4VYwLqB8lymhMb5W6S9HytnKIfw=
Subject key identifier:   83:D5:4B:52:63:BC:4F:D1:4D:59:9C:A8:DB:BD:39:32:7C:20:40:CD
Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED
Certificate issuer:       /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
Certificate serial:       06AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
Manifest number:          06A4
Signing time:             Tue 28 Jul 2026 23:03:19 +0000
Manifest this update:     Tue 28 Jul 2026 23:03:19 +0000
Manifest next update:     Tue 04 Aug 2026 23:03:19 +0000
Files and hashes:         1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: 9jKlujOqycNc4RAGdJQ1OwZTy0wGJlmO7HDdHDDXFbo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl
                          rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709 (0x6ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91944AB, serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
        Validity
            Not Before: Jul 28 23:03:19 2026 GMT
            Not After : Aug  4 23:03:19 2026 GMT
        Subject: CN=6a693537-b37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:4b:f2:a1:a3:bd:34:aa:7e:83:bf:89:07:
                    20:0b:94:2e:6c:a9:c0:dd:14:82:e4:cf:9d:45:3c:
                    67:8b:24:79:03:2e:20:a7:f2:bb:80:fb:41:7b:93:
                    cf:5e:68:a5:db:04:82:89:8a:b7:0c:8b:9f:08:bb:
                    7d:7c:f5:1e:a7:04:0c:b4:09:b5:eb:f6:4f:bd:03:
                    45:09:54:2f:b2:dc:ba:b6:8a:e4:61:2d:f6:9a:ca:
                    c6:6a:47:d6:f7:16:c3:4c:d4:79:1c:57:06:f6:c4:
                    5b:e9:ba:d3:0d:98:51:c4:c6:dd:be:77:17:bf:e5:
                    01:be:75:ea:12:49:5e:0f:10:fe:ca:28:7d:63:3f:
                    33:98:b7:0a:53:4c:11:f3:26:6f:8e:56:d2:de:16:
                    34:5d:80:5b:d4:53:ac:80:df:72:c6:70:24:00:3f:
                    dd:0b:fc:20:3d:94:09:bd:f0:a1:5a:14:a0:3f:fe:
                    18:4d:77:75:2e:15:27:2b:66:fc:d4:4c:9f:a3:7c:
                    dc:1c:1c:a8:8d:07:8e:4c:fb:8e:98:c0:29:b5:26:
                    dd:53:94:36:14:30:54:15:e0:78:d6:ba:11:a0:07:
                    07:60:c1:db:16:cb:57:97:42:75:68:a2:09:9e:b6:
                    c8:57:b9:d5:85:c8:22:df:93:45:84:3c:6c:68:56:
                    26:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D5:4B:52:63:BC:4F:D1:4D:59:9C:A8:DB:BD:39:32:7C:20:40:CD
            X509v3 Authority Key Identifier:
                keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:48:b0:a9:86:c3:e6:86:79:24:c9:0a:22:92:62:a6:f3:e7:
         50:4d:f5:ef:8a:57:4b:8d:e4:e1:98:74:37:fe:c8:33:3d:43:
         f8:04:98:e0:fc:df:a3:af:d6:9b:c0:8d:90:b3:8c:5e:09:fa:
         9b:6e:ab:14:c8:82:1f:23:f2:62:fb:f4:80:cb:e2:aa:81:da:
         ac:0f:e9:7a:14:ad:3a:71:92:5f:8d:89:a9:35:3b:bd:f2:37:
         e5:65:53:3f:b7:64:ea:f6:5f:6c:9d:76:60:05:86:74:9d:e1:
         ec:57:79:ab:dd:09:65:4c:e6:9a:f1:f3:bb:ad:fe:b7:79:65:
         b4:9b:e4:1a:ec:22:ae:20:86:22:ee:de:5a:eb:b9:4a:40:17:
         cc:56:42:34:db:88:e3:7c:c5:af:ab:9b:fb:c5:69:c0:1d:ca:
         9b:97:82:d2:e3:d2:4c:97:c0:1f:b6:94:92:e1:5e:42:4b:21:
         5c:1e:48:c2:e5:39:6b:a1:3d:fd:76:81:e2:8c:6a:f1:bb:c9:
         12:52:ed:1c:40:88:c0:40:bb:83:7e:86:9b:3f:bb:a1:d7:93:
         e4:5e:15:8f:12:e4:29:c8:67:5f:c7:43:49:bb:b9:95:fc:5d:
         77:da:39:9e:58:7f:05:cb:b2:22:cc:96:74:ef:39:16:88:05:
         3a:9d:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:43:18 2026 by rpki-client