Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
File:                     d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json)
Hash identifier:          ZgyeiRDMdHaLBj1B9EJFfpPFvLeloSxaDQ9UQuyOegc=
Subject key identifier:   88:EB:1B:F3:01:D7:32:94:8C:FE:97:45:60:C6:5D:83:8D:41:7B:BE
Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
Certificate issuer:       /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
Manifest number:          0128
Signing time:             Mon 27 Jul 2026 07:38:29 +0000
Manifest this update:     Mon 27 Jul 2026 07:38:29 +0000
Manifest next update:     Mon 03 Aug 2026 07:38:29 +0000
Files and hashes:         1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: shbiHlj4SZKOSaJd0n04p1asNx6TBbp/9vIhjSIsHGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
        Validity
            Not Before: Jul 27 07:38:29 2026 GMT
            Not After : Aug  3 07:38:29 2026 GMT
        Subject: CN=6a670af5-c7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:0b:10:6d:a3:a2:0f:be:59:5d:fa:4b:93:
                    c7:7d:5f:b1:f4:8d:a3:69:78:87:d3:5c:1f:7f:f5:
                    17:6a:21:30:58:9c:fd:5a:a4:6c:d0:4e:f4:72:6c:
                    bf:2d:fe:7e:37:69:3c:6a:9a:a1:83:0b:5d:44:8d:
                    4f:93:f3:6f:46:ab:c3:73:9e:3d:2d:d6:5b:8e:c9:
                    16:e6:bb:b4:59:b8:89:71:67:bf:23:5b:32:eb:01:
                    16:b9:aa:62:8d:d6:5b:3b:04:51:32:6e:4f:28:71:
                    3f:7e:3c:84:97:6f:33:09:fc:a2:52:d5:56:0c:77:
                    3f:8a:10:69:2f:cc:41:c3:76:44:1b:a4:29:f9:7b:
                    78:03:71:2d:e3:1f:8d:56:49:a6:98:c8:82:3e:8f:
                    d6:74:4a:29:36:48:5c:7d:fe:5a:e8:f9:12:02:ff:
                    89:f5:7d:6c:b0:c5:77:70:48:8a:37:7d:f1:24:a7:
                    6e:c6:96:03:cc:61:fc:06:cf:9d:24:c2:7c:c5:ac:
                    2c:90:27:1f:c9:2c:40:f9:ec:38:d1:98:5e:fb:01:
                    26:27:4a:6a:e9:f4:26:14:d1:87:40:f8:74:02:54:
                    06:96:bb:66:e3:9c:cb:16:dd:d5:b3:06:52:9f:c9:
                    78:64:55:3b:01:1b:b4:0d:41:74:99:c6:52:f0:98:
                    c8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EB:1B:F3:01:D7:32:94:8C:FE:97:45:60:C6:5D:83:8D:41:7B:BE
            X509v3 Authority Key Identifier:
                keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9f:4b:aa:bf:4a:63:52:10:3e:1a:5b:5e:51:f0:8a:da:9c:
         06:82:f4:19:70:91:51:b7:db:36:ed:b5:10:0a:97:05:17:01:
         00:f0:39:1e:ae:00:ca:ed:45:88:4a:20:e3:3d:be:a7:5d:ff:
         21:ca:80:32:b1:7c:8c:dc:5e:2b:2b:f8:ec:be:d2:bb:72:d3:
         c4:ea:20:a9:c5:87:85:58:b4:bc:8f:b7:f1:a2:25:ac:8c:e5:
         d3:7c:38:b0:6b:f1:5d:36:c7:fd:1c:70:75:42:0f:a0:da:d8:
         00:cd:a5:ef:8d:d3:99:14:b5:3e:9e:4e:b3:43:55:ff:c6:ce:
         3b:f6:78:27:8a:56:4e:f7:4c:22:02:6e:29:48:2d:d2:7a:14:
         02:07:c8:e7:88:b8:43:fb:29:b0:3a:d5:b9:e4:8b:b4:5d:70:
         ad:50:3f:73:81:86:21:36:e7:73:68:ae:d4:c1:62:2c:91:4b:
         98:91:fd:42:80:c4:36:28:f8:8b:da:aa:a5:5e:15:df:9c:8b:
         1e:cc:b5:83:8e:27:2e:c0:79:e0:fc:69:d4:66:40:28:fd:10:
         40:b6:94:74:fc:50:b6:fb:02:2d:56:26:e9:2b:8b:51:d5:09:
         a1:a1:dc:cf:1e:f8:9b:06:74:12:42:9e:bc:56:1c:d9:00:d9:
         8a:90:6e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:56 2026 by rpki-client