Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
File:                     SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json)
Hash identifier:          d1sHDNbBgLAmlzie6fEyHO29iiwOE/yqgK2JI0Gc6N4=
Subject key identifier:   CF:03:F0:7A:90:0A:1B:5C:55:C4:03:9B:E1:36:19:2F:2B:C4:58:F0
Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE
Certificate issuer:       /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
Certificate serial:       098C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
Manifest number:          098B
Signing time:             Tue 28 Jul 2026 20:21:48 +0000
Manifest this update:     Tue 28 Jul 2026 20:21:47 +0000
Manifest next update:     Tue 04 Aug 2026 20:21:47 +0000
Files and hashes:         1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: Hg7WUa0c9Vm00A0HUMeYn3qOrWYQzDq2kMVdMerWPLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl
                          rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444 (0x98c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
        Validity
            Not Before: Jul 28 20:21:47 2026 GMT
            Not After : Aug  4 20:21:47 2026 GMT
        Subject: CN=6a690f5c-aad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:e4:d1:81:f0:3e:3e:89:c9:eb:34:b5:22:
                    f3:62:f4:ea:fe:14:ac:a5:26:43:64:76:67:55:5d:
                    28:b1:cb:74:37:e6:84:13:bd:52:6d:05:e5:46:69:
                    aa:18:d4:6a:41:fe:98:20:fb:dd:68:4e:05:66:60:
                    02:2e:8d:c3:1f:f9:f9:d9:ac:10:df:8e:a5:26:66:
                    ca:d8:34:d7:40:1f:3b:7c:04:f0:81:49:f5:cb:1a:
                    80:1d:fa:03:be:c6:bc:26:7f:d1:11:78:e8:4e:09:
                    13:f1:a2:c3:02:5e:5f:cd:e4:68:c5:71:48:05:c1:
                    3e:bd:1d:19:a8:e9:d9:d6:54:8a:7d:13:92:3f:7c:
                    2c:33:4a:10:b7:03:a9:d0:31:0f:a2:38:60:11:73:
                    1f:0d:67:28:90:2e:ee:c0:3b:78:6e:77:e1:54:a9:
                    27:66:c4:ed:b4:d9:9d:cf:76:55:e4:e2:0b:8e:ed:
                    b5:d1:e8:f3:f8:b3:d8:cb:f5:4e:d2:c1:10:2e:cf:
                    f3:ad:4a:11:fc:c6:fb:27:40:c9:01:61:12:65:7e:
                    da:ad:93:38:07:4a:17:77:58:fa:7c:5c:58:ae:0f:
                    1e:a5:3d:87:d4:54:d2:cb:b6:be:22:5c:a5:88:1a:
                    f8:e9:d7:8c:42:42:bd:2f:6a:64:d0:1e:35:cd:53:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:03:F0:7A:90:0A:1B:5C:55:C4:03:9B:E1:36:19:2F:2B:C4:58:F0
            X509v3 Authority Key Identifier:
                keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c9:2d:bb:5a:2d:03:50:ec:46:60:e3:c8:9b:c4:7b:8d:16:
         5d:12:d6:73:d6:fc:90:2d:96:a8:85:d1:ca:4a:ea:d1:8d:ad:
         c6:64:cf:e6:b4:90:92:85:d3:67:8a:1a:c3:0d:f4:51:86:ce:
         a2:61:b0:6f:6d:23:b0:84:12:0c:37:ac:31:36:5d:19:fb:d2:
         9c:8a:9a:6f:bc:3f:44:91:e1:0b:3a:38:82:85:ae:8f:95:2c:
         d8:60:69:ef:34:ac:e3:f5:f0:ff:ba:3e:a4:a3:1e:02:02:7b:
         c7:87:10:b5:bd:d3:2b:52:c3:1f:07:90:dc:66:2a:52:97:1b:
         69:30:22:b0:bf:f1:ad:45:cd:24:bc:ae:54:44:5d:dd:16:7f:
         49:63:db:d8:ef:3c:88:b6:a9:93:84:af:ba:27:e6:0d:87:59:
         c4:77:f4:c6:4b:b0:8f:51:ab:7b:40:c5:bb:a2:95:03:c7:93:
         04:ae:8f:0c:15:cd:e4:2c:5f:3e:50:53:4e:6c:23:c7:3c:6e:
         cd:b5:2d:42:08:c0:f1:a0:14:e0:6d:81:7c:4c:86:82:13:91:
         45:30:64:05:0b:7b:b1:b4:bd:f6:39:d2:b3:19:1e:c8:2a:1a:
         d2:9c:47:23:16:af:c5:ba:6d:a4:ae:b5:3e:0d:34:c4:2b:fb:
         97:0d:21:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:59:58 2026 by rpki-client