Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
File:                     dDFnWL6MokPEalI5oF7P8EkIOTc.mft (raw, json)
Hash identifier:          p126QSPBF9ayPd5wiJminaZe8MiWqKdt4oSGwnCzX5c=
Subject key identifier:   1B:FB:5B:67:73:D0:3F:A1:87:D3:A5:7E:85:7D:A5:42:5D:AD:AD:E2
Authority key identifier: 74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37
Certificate issuer:       /CN=A91968B6/serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
Manifest number:          62
Signing time:             Mon 27 Jul 2026 10:22:55 +0000
Manifest this update:     Mon 27 Jul 2026 10:22:55 +0000
Manifest next update:     Mon 03 Aug 2026 10:22:55 +0000
Files and hashes:         1: dDFnWL6MokPEalI5oF7P8EkIOTc.crl (hash: yjUKRI1gWWCfOglffRKwVUqNpdcubu6m01Ycgf13ibU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl
                          rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91968B6, serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
        Validity
            Not Before: Jul 27 10:22:55 2026 GMT
            Not After : Aug  3 10:22:55 2026 GMT
        Subject: CN=6a67317f-e708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:02:01:d8:0c:0a:0d:be:d2:f5:7b:f7:71:
                    af:b5:0d:15:e5:23:8b:de:4d:7d:1d:c9:87:37:3c:
                    91:3f:a7:47:3b:eb:1f:e4:bb:0b:74:cd:e8:1d:93:
                    bf:c8:1c:56:a0:bb:9a:c2:33:05:1f:69:9e:a9:81:
                    3d:b6:d1:fe:6e:8f:97:2c:17:40:ff:14:c2:74:9e:
                    15:9e:5f:d3:17:06:63:16:9c:f6:c9:74:e3:4e:fc:
                    4a:3b:eb:14:4c:ce:50:a8:99:c8:46:48:56:b4:6e:
                    30:51:90:cb:64:c2:fa:cd:bc:98:8e:e9:8d:d2:7b:
                    76:ed:4d:a7:70:a3:f4:19:bb:cd:7c:6e:43:e4:8a:
                    0c:b7:66:3e:31:fe:15:32:c6:90:95:e5:cc:c6:2a:
                    12:93:fb:93:75:13:67:e5:6b:3e:01:ba:58:50:60:
                    11:7e:b7:b4:12:f8:71:42:f3:fb:b3:cc:29:a0:8b:
                    d7:1f:e0:2f:8e:d6:4f:3d:25:c7:e5:fd:f3:b0:25:
                    af:bd:31:00:5d:6c:f8:18:fa:2f:0a:3c:d7:17:bc:
                    4f:a9:1f:46:99:12:d8:47:1a:19:7f:cc:51:88:d1:
                    d8:ef:15:c4:9c:7a:48:d0:c6:f8:b7:21:b2:cb:ed:
                    0a:fa:95:8a:22:f7:7a:c6:b8:b2:a2:83:93:3f:af:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FB:5B:67:73:D0:3F:A1:87:D3:A5:7E:85:7D:A5:42:5D:AD:AD:E2
            X509v3 Authority Key Identifier:
                keyid:74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:41:11:b0:c2:5a:3d:22:36:45:58:5b:3e:76:72:3b:6f:
         59:70:1e:7e:54:80:d3:b8:92:96:8b:a1:f9:59:13:1d:f1:66:
         98:6d:39:b2:9f:1a:b1:ee:4b:94:e8:f6:7c:57:4f:f1:39:83:
         8c:3a:96:60:91:31:95:95:21:79:6a:cd:5d:86:70:26:23:70:
         a6:5d:24:28:79:11:08:ba:66:d2:1e:cf:8a:44:4c:78:2f:bc:
         b9:69:c7:a2:e5:ed:e9:9e:67:70:b5:f6:9e:93:9b:a0:01:b8:
         f2:10:0e:12:f9:36:dd:ed:47:18:9f:18:c3:4d:7b:e3:0d:28:
         63:a3:97:5c:73:eb:0e:0b:cb:bb:fe:06:ff:cb:b5:45:32:48:
         27:e6:61:1e:e2:bb:74:16:a4:30:ea:05:5d:80:4a:0f:70:3c:
         bb:11:98:cb:26:79:78:b7:2e:84:6a:80:c0:5a:3c:98:a7:29:
         7f:4a:bc:fa:07:2e:49:9d:b8:0c:fc:96:f2:e4:d2:f6:14:43:
         e3:00:d5:e8:84:0d:50:9e:46:50:d2:ce:35:64:b3:3d:d5:9f:
         ea:b1:67:48:2e:5b:9a:60:44:d6:c7:80:07:56:60:fd:8f:cf:
         d0:0e:2d:ef:68:b4:59:5c:b1:6b:0a:af:b7:ef:cb:8e:e0:a0:
         72:91:2b:65
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NjhCNjExMC8GA1UEBRMoNzQzMTY3NThCRThDQTI0M0M0NkE1MjM5QTA1RUNGRjA0
OTA4MzkzNzAeFw0yNjA3MjcxMDIyNTVaFw0yNjA4MDMxMDIyNTVaMBgxFjAUBgNV
BAMTDTZhNjczMTdmLWU3MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4UwIB2AwKDb7S9Xv3ca+1DRXlI4veTX0dyYc3PJE/p0c76x/kuwt0zegdk7/I
HFagu5rCMwUfaZ6pgT220f5uj5csF0D/FMJ0nhWeX9MXBmMWnPbJdONO/Eo76xRM
zlComchGSFa0bjBRkMtkwvrNvJiO6Y3Se3btTadwo/QZu818bkPkigy3Zj4x/hUy
xpCV5czGKhKT+5N1E2flaz4BulhQYBF+t7QS+HFC8/uzzCmgi9cf4C+O1k89Jcfl
/fOwJa+9MQBdbPgY+i8KPNcXvE+pH0aZEthHGhl/zFGI0djvFcScekjQxvi3IbLL
7Qr6lYoi93rGuLKig5M/r7uBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG/tbZ3PQ
P6GH06V+hX2lQl2treIwHwYDVR0jBBgwFoAUdDFnWL6MokPEalI5oF7P8EkIOTcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2OEI2Lzk0MzlCOUFFRkIy
NzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQRWFsSTVvRjdQOEVrSU9U
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZERGbldMNk1va1BFYWxJNW9GN1A4RWtJT1RjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2
OEI2Lzk0MzlCOUFFRkIyNzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQ
RWFsSTVvRjdQOEVrSU9UYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBa10ERsMJaPSI2RVhbPnZyO29ZcB5+VIDTuJKWi6H5WRMd8WaYbTmynxqx7kuU
6PZ8V0/xOYOMOpZgkTGVlSF5as1dhnAmI3CmXSQoeREIumbSHs+KREx4L7y5acei
5e3pnmdwtfaek5ugAbjyEA4S+Tbd7UcYnxjDTXvjDShjo5dcc+sOC8u7/gb/y7VF
Mkgn5mEe4rt0FqQw6gVdgEoPcDy7EZjLJnl4ty6EaoDAWjyYpyl/Srz6By5JnbgM
/Jby5NL2FEPjANXohA1QnkZQ0s41ZLM91Z/qsWdILluaYETWx4AHVmD9j8/QDi3v
aLRZXLFrCq+378uO4KBykStl
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:11 2026 by rpki-client