Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft
File:                     9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft (raw, json)
Hash identifier:          CNo7XxPk0+ERlj/70JA91IAR2RYTA5W36hh8JrqBFDA=
Subject key identifier:   C5:2B:9D:C6:0E:F5:C3:A3:57:A0:CE:96:4F:D0:4D:F2:49:47:34:99
Authority key identifier: F5:5B:6C:27:99:8A:05:C5:F7:1B:3D:CA:90:8C:71:08:BC:CF:0B:71
Certificate issuer:       /CN=A91B3F7E/serialNumber=F55B6C27998A05C5F71B3DCA908C7108BCCF0B71
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft
Manifest number:          37
Signing time:             Mon 27 Jul 2026 10:55:36 +0000
Manifest this update:     Mon 27 Jul 2026 10:55:36 +0000
Manifest next update:     Mon 03 Aug 2026 10:55:36 +0000
Files and hashes:         1: 9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.crl (hash: i0AMrCJjbuBI2Dm1dOpR1fWBYyrJ8812u0SyAEqD3fU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.crl
                          rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3F7E, serialNumber=F55B6C27998A05C5F71B3DCA908C7108BCCF0B71
        Validity
            Not Before: Jul 27 10:55:36 2026 GMT
            Not After : Aug  3 10:55:36 2026 GMT
        Subject: CN=6a673928-ba32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:4c:fe:fd:b3:24:34:49:93:7a:43:70:a0:
                    ae:53:6a:21:0e:6e:ab:58:51:6b:56:b9:86:fb:93:
                    36:4c:dd:70:81:03:3a:9e:14:a9:02:a4:9e:e7:cd:
                    5a:4a:52:5d:2b:b6:13:2e:0a:b8:09:aa:45:59:f0:
                    5d:65:5a:1a:8e:7f:88:be:c9:f3:f1:9e:87:4c:46:
                    4c:18:32:41:72:1e:3e:b4:ab:11:b7:b6:ad:9e:e1:
                    7d:e0:b4:02:ce:e9:1f:ac:78:e7:26:87:03:0f:9f:
                    57:06:69:b9:d8:a9:53:47:0a:97:16:63:dc:ed:93:
                    5f:a5:32:70:3b:27:86:59:ff:2b:f1:27:69:df:df:
                    d7:0f:f5:9c:fa:ff:4f:35:c9:c3:bc:97:e0:ca:ca:
                    b4:85:66:8d:d3:b2:bf:b7:27:7c:e9:8e:eb:17:39:
                    5a:97:a2:70:53:b7:67:e7:b4:9a:00:07:48:78:1a:
                    73:e4:10:7d:e1:16:5a:9d:fc:0e:de:d4:64:9a:12:
                    17:ff:7d:09:d7:35:ec:56:e7:6d:61:6d:1d:1c:94:
                    bd:b0:ec:c9:1e:e0:ce:06:c2:bb:b2:47:3a:8f:e6:
                    6e:01:57:93:7c:0e:d4:1e:b0:40:75:fa:78:b7:75:
                    5d:49:39:a3:a6:c7:d0:17:17:ef:93:18:72:b2:be:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2B:9D:C6:0E:F5:C3:A3:57:A0:CE:96:4F:D0:4D:F2:49:47:34:99
            X509v3 Authority Key Identifier:
                keyid:F5:5B:6C:27:99:8A:05:C5:F7:1B:3D:CA:90:8C:71:08:BC:CF:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:26:c2:1f:f5:64:a7:a5:cb:bf:ec:cf:3e:85:5d:b1:b5:c1:
         46:75:b3:af:f0:0c:26:ac:1e:0d:77:03:b8:ff:bc:be:06:5c:
         93:4b:c6:f7:fd:96:56:89:96:60:60:64:ef:7d:28:44:b9:90:
         1c:ce:fb:03:90:e6:02:fe:86:ab:02:eb:73:6f:3a:92:61:0a:
         40:49:db:4d:30:e4:a6:72:d6:53:be:30:34:9d:b3:89:49:2e:
         01:7f:1b:4f:2e:01:d9:32:e3:a8:67:2f:0a:ed:2d:fb:ab:c1:
         60:a9:9c:63:b7:07:80:0c:1f:84:85:3c:ef:52:85:b6:7c:55:
         7d:43:55:5e:9a:8d:8e:83:df:f4:60:38:06:5a:32:50:14:4e:
         78:ab:5c:60:74:83:7b:ec:08:20:2a:af:63:8c:3a:d3:d1:2b:
         2a:7b:94:26:c7:1e:cc:ac:21:70:c3:f9:77:a3:26:83:68:c3:
         f7:da:04:fc:01:9a:20:63:61:d0:a1:6d:73:70:25:19:68:9a:
         f4:2c:00:01:01:2e:13:d2:27:4c:7a:46:a7:1a:fc:3f:c0:a2:
         27:9a:f9:c6:f5:4d:cd:e4:11:de:bb:99:55:8f:42:4f:54:a0:
         35:f4:00:af:b9:6b:8f:3d:b6:dd:8a:6b:3f:58:4c:8d:95:7c:
         c9:4f:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:38 2026 by rpki-client