Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
File:                     -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json)
Hash identifier:          3tVFPTpwyIFmW4kWR6DxSO5NFWPXuOGB14/9qYbeIMQ=
Subject key identifier:   DC:89:46:78:35:63:70:5E:40:9C:D3:66:FB:10:AA:D2:D0:73:2B:77
Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51
Certificate issuer:       /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
Manifest number:          9D
Signing time:             Mon 21 Sep 2026 07:17:12 +0000
Manifest this update:     Mon 21 Sep 2026 07:17:11 +0000
Manifest next update:     Mon 28 Sep 2026 07:17:11 +0000
Files and hashes:         1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: kf63iiYALf7LmS4ZrMLseXvt/kBUTZXnLsM5ElZZArE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
        Validity
            Not Before: Sep 21 07:17:11 2026 GMT
            Not After : Sep 28 07:17:11 2026 GMT
        Subject: CN=6ab0d9f7-37cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:fd:a2:dc:f7:68:d6:20:90:9d:82:37:16:
                    32:f5:af:b2:15:f2:e1:ab:da:e0:81:53:31:c4:ae:
                    90:63:bb:08:06:e6:0c:6c:26:37:39:9f:ce:39:b6:
                    79:c0:d3:34:28:cb:e3:d1:14:25:51:f2:e1:8e:8b:
                    67:70:08:66:5d:c5:b4:8c:87:af:7c:86:e0:29:bb:
                    30:f5:38:cc:8b:7b:60:22:ab:18:76:42:54:f6:04:
                    28:c9:95:08:30:d5:a2:be:b7:93:2f:f9:69:61:d1:
                    cd:a9:11:f8:5f:23:04:62:99:78:98:5c:27:fc:42:
                    b3:57:7d:b2:5b:13:34:b2:ba:87:0f:07:28:38:61:
                    37:01:df:27:66:47:ce:46:64:58:7f:b9:ad:f3:9c:
                    b9:10:89:9b:d8:aa:6e:f5:90:77:d2:b8:f1:d7:98:
                    f9:ad:4d:a8:fb:8c:a2:58:0f:f1:53:70:29:d7:b6:
                    62:0a:f1:50:27:69:1c:f8:74:6a:a3:84:dc:b3:09:
                    57:c0:a7:6e:8c:1e:55:f3:ab:ca:84:6e:62:79:0c:
                    89:41:3d:e7:ca:e1:57:79:61:2d:36:2f:3f:e4:3c:
                    14:47:63:a1:0d:91:5b:c6:03:26:d5:cc:d4:ef:95:
                    b1:24:a0:87:db:44:80:a2:7b:16:64:2a:bf:12:19:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:89:46:78:35:63:70:5E:40:9C:D3:66:FB:10:AA:D2:D0:73:2B:77
            X509v3 Authority Key Identifier:
                keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c5:d0:8f:99:dd:33:1d:95:bd:9d:82:db:a9:09:43:3e:7b:
         5f:91:10:ec:46:4b:b5:44:1d:52:dc:10:54:f1:38:c0:7a:1c:
         3c:88:e9:0b:af:76:8f:cb:3b:0e:a5:f8:fb:0d:d9:73:fb:28:
         c5:e2:62:0e:56:87:9c:e6:e5:36:7e:4c:c5:38:4e:2a:b3:a7:
         56:ea:18:02:19:4a:58:a7:df:f1:b6:aa:3c:60:81:a8:47:d4:
         33:48:df:f0:ad:82:12:cc:2b:cc:67:8a:a3:1c:f5:9c:17:b4:
         1e:f7:15:0f:d7:dd:08:0c:e2:3f:29:12:b6:15:0c:78:71:52:
         6a:54:e7:12:61:97:54:11:6a:d1:4a:5a:f9:5b:6f:97:06:0c:
         ae:ae:7e:19:8f:91:cd:db:45:ef:69:de:aa:93:16:9a:32:e0:
         78:f9:de:cb:3e:bd:3d:2e:7b:75:c3:0d:28:01:32:9c:72:8e:
         f7:fb:00:09:ee:44:80:4b:2b:0c:8b:4f:35:cb:64:23:be:11:
         c9:cd:70:c2:7a:7c:e2:f0:28:a4:cb:6c:04:83:49:bc:3b:80:
         d8:79:c8:98:52:9d:75:63:84:8e:68:88:0a:14:08:6e:e8:04:
         b9:06:e0:a4:cd:c8:fc:a9:42:83:6a:21:ac:7e:4d:e2:33:8a:
         0f:46:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:39:30 2026 by rpki-client