Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
File:                     Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json)
Hash identifier:          CVgsbbcX5qJU5Gni+dJ8nlhXs4UoJD4DUwFDYxRSUbM=
Subject key identifier:   8F:98:91:96:BA:5B:8B:2E:2E:7A:4B:4F:06:E4:CE:57:54:D9:C1:83
Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
Certificate issuer:       /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Certificate serial:       059A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
Manifest number:          07C9
Signing time:             Tue 28 Jul 2026 23:50:17 +0000
Manifest this update:     Tue 28 Jul 2026 23:50:16 +0000
Manifest next update:     Tue 04 Aug 2026 23:50:16 +0000
Files and hashes:         1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: xH7Zs776rxLlWBiB9vzM+Qe5bLy7Nii+IfClr16ZhV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
                          rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
        Validity
            Not Before: Jul 28 23:50:16 2026 GMT
            Not After : Aug  4 23:50:16 2026 GMT
        Subject: CN=6a694038-f06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3d:a4:5b:a5:2d:be:ec:b6:47:8a:30:6e:3c:
                    ea:02:45:90:4d:f1:e1:b3:48:ed:a3:e9:9d:1f:50:
                    4f:72:73:7c:05:eb:ae:86:f9:7b:22:c2:bf:70:c7:
                    58:f8:8e:96:5a:3a:6a:ee:2d:68:f1:43:fd:70:1a:
                    aa:be:e6:b7:f5:d3:26:cc:43:2b:a7:61:77:2e:f3:
                    17:c1:19:88:42:2d:8f:d8:61:b8:c3:d3:7d:31:64:
                    ae:37:3a:0e:46:b1:5a:03:38:f2:51:ab:2d:6c:bc:
                    7e:ce:74:3c:89:4a:cf:0b:07:3d:f6:3e:b4:bc:c3:
                    61:47:10:b9:e5:e6:e1:91:7b:f0:b2:a7:c0:2c:d0:
                    58:d2:cd:70:7f:1a:a7:f4:24:80:e0:60:ba:e9:c7:
                    bf:49:56:f8:8b:74:e0:ca:14:df:20:c2:e9:66:a0:
                    6b:72:50:95:0e:cb:52:78:9a:0c:8a:25:92:98:f4:
                    a8:a5:48:c3:1b:8c:a6:40:77:23:ac:d4:93:ca:c9:
                    c8:b5:6c:d5:91:48:ac:f5:c0:c5:7d:7d:d1:bc:29:
                    a2:85:f4:0c:c4:cd:6d:60:dc:e3:34:f1:3f:ca:ca:
                    fa:4e:2d:c1:f2:06:ef:8d:f2:84:bf:33:4b:cf:2f:
                    8b:cd:7e:9a:d3:94:95:8e:b9:0b:80:72:03:07:2d:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:98:91:96:BA:5B:8B:2E:2E:7A:4B:4F:06:E4:CE:57:54:D9:C1:83
            X509v3 Authority Key Identifier:
                keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:53:1b:94:7a:dc:88:75:05:ee:4a:45:8b:43:83:ef:ef:7d:
         9c:b4:67:89:3a:61:b6:38:9a:4f:a0:ad:d9:bd:a9:64:d0:b5:
         26:17:4d:68:84:dd:9a:b7:8a:64:60:12:90:66:c8:ba:61:19:
         a4:b6:d2:ad:84:4b:04:de:4a:22:6a:f1:4d:31:61:93:83:a5:
         d8:68:8d:f8:d9:94:1d:21:50:6c:a9:c4:55:9c:ad:cf:30:4e:
         e0:5d:2a:b0:61:05:c8:62:cc:74:2b:59:cc:c3:8d:83:02:d1:
         d4:41:27:1f:07:57:11:07:2a:f1:ae:a7:68:3e:e4:08:00:47:
         86:12:5a:b5:3d:50:63:50:2f:c0:4b:c4:2e:7d:2c:7f:0f:f3:
         0a:17:4c:88:66:8f:b2:87:19:89:73:8a:8d:23:72:3e:75:00:
         ef:6e:e5:10:ba:f9:45:d1:b7:4b:cc:cf:dc:27:cc:38:c3:55:
         85:28:48:8b:91:5a:a7:c2:4f:64:a3:15:ea:ae:dc:b8:8e:7a:
         02:e9:d2:60:2c:45:62:83:73:90:53:ef:2a:5c:9d:03:d1:2c:
         3a:63:9f:ed:da:d9:99:27:4a:61:6d:ab:07:ba:db:98:e1:19:
         f5:32:02:ab:2e:e1:c0:ee:e7:84:e6:54:2d:ef:5f:c6:27:04:
         d6:7b:58:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:53:18 2026 by rpki-client