Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.mft
File:                     dQVcA_HORREaW3mWTntNV3H9t8k.mft (raw, json)
Hash identifier:          VwmkD+W5dSR/OsH0hd/1QlarhtDA+TheA5hXLc5fwwg=
Subject key identifier:   70:F1:40:48:34:E0:3B:0A:36:88:B3:A8:5F:8A:5D:52:9C:BC:48:B4
Authority key identifier: 75:05:5C:03:F1:CE:45:11:1A:5B:79:96:4E:7B:4D:57:71:FD:B7:C9
Certificate issuer:       /CN=A91AD69A/serialNumber=75055C03F1CE45111A5B79964E7B4D5771FDB7C9
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVcA_HORREaW3mWTntNV3H9t8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.mft
Manifest number:          23
Signing time:             Mon 27 Jul 2026 11:12:37 +0000
Manifest this update:     Mon 27 Jul 2026 11:12:37 +0000
Manifest next update:     Mon 03 Aug 2026 11:12:37 +0000
Files and hashes:         1: dQVcA_HORREaW3mWTntNV3H9t8k.crl (hash: Tyrm8AN7ftQyqEilqmLuYL+D4Wef7E5xAHFQx63gk4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.crl
                          rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVcA_HORREaW3mWTntNV3H9t8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD69A, serialNumber=75055C03F1CE45111A5B79964E7B4D5771FDB7C9
        Validity
            Not Before: Jul 27 11:12:37 2026 GMT
            Not After : Aug  3 11:12:37 2026 GMT
        Subject: CN=6a673d25-25d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:fa:bb:7d:1b:7d:b6:7f:84:2b:cf:c3:5f:
                    dc:31:dd:56:db:ca:14:5d:ec:29:89:ac:c1:3a:b3:
                    50:92:69:d9:22:16:13:ab:c3:ec:41:8c:8c:02:ea:
                    82:5e:59:13:6e:52:d3:7f:83:9f:3e:09:ae:e7:f8:
                    06:65:97:8d:e3:af:04:65:87:c8:1e:cd:cc:5d:b8:
                    26:dc:43:99:f6:12:60:48:87:06:de:72:33:8d:dc:
                    44:70:34:21:31:f6:69:aa:08:c4:fb:6b:0d:06:9d:
                    ca:e3:97:fe:37:51:57:8f:31:59:bb:34:52:43:0a:
                    9d:6f:1b:af:a8:3c:23:90:23:94:f6:ce:92:b0:51:
                    9f:96:23:85:37:70:ac:b6:0a:6b:a8:90:22:b4:ce:
                    62:19:75:22:94:46:a1:4f:fa:5f:33:99:27:05:dc:
                    99:08:d6:3c:6d:3d:b4:a2:2c:dd:71:c7:db:40:1d:
                    1c:0f:13:8e:4d:fb:0f:5d:bf:33:a1:9c:83:f4:c8:
                    6a:e3:51:f5:1d:5f:d2:2a:b6:59:bc:3b:d2:ac:9a:
                    99:e4:54:57:44:e0:84:44:e0:c6:87:9a:58:7c:35:
                    f9:0a:e0:81:69:bb:28:0f:74:c4:81:c4:76:12:83:
                    ed:d8:41:29:55:b0:46:d8:37:85:f8:c9:cb:32:14:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:40:48:34:E0:3B:0A:36:88:B3:A8:5F:8A:5D:52:9C:BC:48:B4
            X509v3 Authority Key Identifier:
                keyid:75:05:5C:03:F1:CE:45:11:1A:5B:79:96:4E:7B:4D:57:71:FD:B7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVcA_HORREaW3mWTntNV3H9t8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:99:5b:0a:cd:6b:7e:e5:e1:a2:df:9f:42:eb:08:19:fb:b8:
         cc:a5:50:4a:d2:66:6e:a3:8b:5a:0d:45:c4:1a:e4:c6:c6:c6:
         ce:54:5b:7e:03:31:8e:18:00:1a:b2:c7:16:ef:4b:d8:08:66:
         d3:9b:48:ec:6a:d7:a5:08:38:48:f7:fc:77:2f:51:2c:7c:9c:
         5c:8e:a6:57:5f:ff:28:87:2f:77:d4:b5:e8:59:f4:2c:b9:e1:
         f8:ba:97:af:04:ee:8d:14:4a:76:9e:ff:17:20:f5:42:20:5d:
         8d:a2:9e:ba:dc:ec:13:fa:00:91:a8:99:1d:56:9a:3c:66:5b:
         f3:16:13:f0:d7:c9:d4:e6:d8:24:3c:e3:37:74:3d:8f:3d:f3:
         be:f7:3f:5a:72:78:10:75:ec:c6:86:1a:47:66:5d:5d:19:dc:
         f2:24:c1:9a:1a:4d:3c:bf:81:a2:47:8b:2d:a4:32:be:f9:de:
         12:4a:25:8c:b8:38:97:40:67:f5:39:4d:44:a0:f9:5d:54:2f:
         bf:de:41:de:ab:ce:0a:77:0c:83:3b:aa:2c:40:88:51:c4:09:
         e7:da:46:ff:95:91:93:ae:9b:38:4c:21:0d:87:06:5a:26:1b:
         8c:67:ac:81:cd:31:a4:66:09:c0:20:7e:84:66:fc:96:c4:b6:
         e9:a7:8d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:58 2026 by rpki-client