Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
File:                     -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json)
Hash identifier:          5TLVbeo7rYSPvwwYMF7jlLkkMIgVKBaYPRl/WRZnpc4=
Subject key identifier:   2B:CF:B6:38:86:2E:06:C6:DB:3F:E9:38:90:8E:41:E9:33:EB:29:B9
Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51
Certificate issuer:       /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
Manifest number:          80
Signing time:             Mon 27 Jul 2026 09:49:51 +0000
Manifest this update:     Mon 27 Jul 2026 09:49:50 +0000
Manifest next update:     Mon 03 Aug 2026 09:49:50 +0000
Files and hashes:         1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: 3glJDpkcICVoAtVMA+mrmiLazTQ25JdcOLVNNm34TBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
        Validity
            Not Before: Jul 27 09:49:50 2026 GMT
            Not After : Aug  3 09:49:50 2026 GMT
        Subject: CN=6a6729bf-e0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:67:27:55:1e:1e:89:5b:7f:d9:cd:99:e4:
                    9a:7f:c8:5c:59:e0:9a:1c:04:73:aa:a4:fa:e6:8b:
                    14:9a:17:a9:f0:d8:3e:b5:a7:04:7c:9e:b0:63:57:
                    3e:06:cc:dd:ab:7a:c9:b2:c2:62:d7:4e:4c:1c:f8:
                    65:63:d9:70:99:6a:26:b8:76:a3:7a:41:79:3c:b1:
                    47:3f:ef:66:00:86:01:a8:25:1e:63:bf:91:6e:d5:
                    1e:1f:e2:c0:a9:2d:ce:45:f9:e5:e5:25:62:1e:ba:
                    07:81:c4:67:63:b9:80:3c:d3:37:e6:2e:0f:a8:11:
                    d5:4a:c7:7b:12:29:07:5b:f8:97:29:2c:07:1e:16:
                    ba:33:43:1a:d0:30:0b:50:b3:e0:4d:8b:d6:fa:a1:
                    7d:2d:c0:5b:66:20:43:ed:4c:0f:71:14:77:6b:6f:
                    13:c6:16:40:b3:e8:f1:56:5b:ae:f7:62:75:9b:77:
                    77:7b:b8:82:1a:d2:76:ce:a2:89:25:2e:70:2a:d9:
                    32:7c:b6:00:c9:36:db:ce:2c:38:48:e7:20:74:c2:
                    ea:08:b7:26:f4:8d:d6:cf:c4:58:1c:ea:fb:a7:32:
                    bb:48:7f:62:50:14:c6:b6:31:3f:d7:8c:44:8d:92:
                    bb:87:fb:b7:41:1a:b1:31:e4:5d:69:59:23:00:a3:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CF:B6:38:86:2E:06:C6:DB:3F:E9:38:90:8E:41:E9:33:EB:29:B9
            X509v3 Authority Key Identifier:
                keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:c2:f6:9c:1f:e2:76:15:77:9e:ac:8e:c1:ef:18:ce:e0:
         62:a6:2b:ea:b9:0e:1e:4f:b9:78:af:db:37:14:5e:a5:70:7f:
         a8:0b:e6:10:62:fc:de:2d:20:bf:78:45:6b:0c:56:8b:35:ee:
         58:99:e1:87:34:65:10:8e:ab:9d:4d:d9:0f:a4:98:c2:ac:54:
         c4:d8:17:1f:0e:5d:81:e5:d6:c3:a1:5c:67:13:28:be:64:9a:
         d7:82:5a:e8:60:d5:11:f9:28:20:93:37:84:6b:78:19:54:4d:
         89:77:4d:36:75:b7:18:cd:b5:41:07:60:ca:37:64:f8:3e:e0:
         72:6a:61:0e:74:3a:e0:fb:60:44:82:0a:d3:4e:da:d3:a0:fa:
         9b:80:fd:ff:94:08:2e:87:f2:98:84:77:4a:c2:83:a9:c0:4e:
         f7:30:67:65:15:5a:a8:d4:f2:94:ca:43:cb:b4:fd:c9:fd:66:
         bc:f0:89:0a:70:35:13:44:fd:b7:ad:86:7a:c9:2c:aa:b2:3b:
         b5:ca:d6:7e:3d:75:d9:27:59:ef:75:ce:de:81:5b:5a:49:06:
         05:70:b1:74:d6:57:d4:7c:8b:22:21:3a:55:e7:7b:d6:08:27:
         ef:ae:41:8b:0e:12:39:d0:3a:4e:10:31:70:72:7b:af:5d:28:
         40:95:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:10:44 2026 by rpki-client