Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
File:                     l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json)
Hash identifier:          9DXKcqfAHmFbd5sTTxNv/Th5kF7rYs5LdGOjki0JfNM=
Subject key identifier:   26:AF:71:61:87:73:20:17:D6:04:D6:B6:E3:D3:A8:4B:B9:BC:1F:19
Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC
Certificate issuer:       /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
Manifest number:          74
Signing time:             Mon 27 Jul 2026 10:03:28 +0000
Manifest this update:     Mon 27 Jul 2026 10:03:28 +0000
Manifest next update:     Mon 03 Aug 2026 10:03:28 +0000
Files and hashes:         1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: SCBxa/AUorxoVkz+DHntP6pnWki3v/zh+Zd+IHHCvJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
        Validity
            Not Before: Jul 27 10:03:28 2026 GMT
            Not After : Aug  3 10:03:28 2026 GMT
        Subject: CN=6a672cf0-d274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:0c:f0:68:e9:86:f8:c3:00:db:ba:cf:f6:
                    ec:fe:5f:64:ad:0d:d4:18:b7:ec:a4:20:d5:a3:10:
                    7f:28:eb:78:df:8b:ce:81:4a:89:ae:6d:32:db:eb:
                    26:f0:e1:d5:07:0c:05:c6:3c:67:18:7b:09:61:a6:
                    cb:b2:4f:60:ed:f7:b5:96:6b:3e:ea:b1:af:2e:da:
                    68:bd:e6:79:db:55:6a:48:95:2e:06:12:aa:57:54:
                    e4:e3:c9:d3:68:f9:03:f6:e9:67:00:a5:34:0c:ed:
                    51:f6:1a:96:46:94:ae:3b:cd:5f:40:65:9f:31:51:
                    f6:95:5a:80:2e:39:bb:42:7d:93:5e:a9:53:08:1e:
                    12:c5:fa:9c:25:62:17:56:3c:f4:f5:ec:25:24:a0:
                    ec:84:5a:e8:9b:87:43:da:e0:90:4e:be:ea:1c:81:
                    ff:77:35:26:f2:03:dd:e9:e9:b1:ba:ae:48:4e:7f:
                    96:26:f1:ba:f2:7d:bb:d5:06:63:55:db:f1:2c:8a:
                    98:20:57:b6:a1:70:83:88:96:4e:4f:6e:07:95:24:
                    2a:d3:fb:99:c0:2c:2d:0b:61:09:0d:24:8b:76:da:
                    5b:bc:18:ca:dc:c7:bf:95:02:85:26:a3:ac:25:65:
                    99:c7:62:9d:de:bd:5f:1c:82:00:fe:b8:c1:62:a2:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AF:71:61:87:73:20:17:D6:04:D6:B6:E3:D3:A8:4B:B9:BC:1F:19
            X509v3 Authority Key Identifier:
                keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:81:d0:82:d7:5d:a3:e3:42:0a:27:75:f8:70:80:82:12:4d:
         81:a2:06:7c:f5:de:e3:67:83:c6:e8:ef:08:df:d4:69:b7:c7:
         07:6f:0e:ea:8e:61:1a:29:64:08:42:3a:12:90:5f:e6:02:09:
         0f:10:a9:5c:6b:f6:57:f3:38:a9:e6:56:3d:6a:ec:71:55:7c:
         ae:83:8c:d9:18:3e:48:a2:3b:da:37:dd:85:95:6a:be:24:31:
         ed:a2:ee:10:f9:2b:40:ac:ad:23:64:4b:da:50:42:77:bf:2b:
         21:41:a2:19:13:89:5e:31:4b:a0:72:46:6f:d3:e1:60:93:d5:
         b6:38:75:53:5a:11:79:e5:57:a3:61:c2:7d:fe:bb:91:97:33:
         f4:f8:33:b2:b3:32:44:d1:77:e7:13:d2:91:4c:19:ff:fe:21:
         32:b8:4f:be:f8:09:50:c2:9c:18:10:00:1e:aa:17:d9:ad:7e:
         8f:63:95:c9:1b:c5:63:bb:58:3d:9b:22:ac:80:f0:a4:05:65:
         fe:82:5f:a1:95:44:fd:b0:a3:40:e3:0e:90:ef:2c:db:03:d0:
         eb:8e:98:b4:33:eb:29:48:d4:ce:0f:55:ec:a3:b1:2b:a6:58:
         7d:8f:2a:d8:4b:99:ff:6a:a3:a5:c5:b7:9a:98:98:89:41:d5:
         0a:57:08:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:52 2026 by rpki-client