Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49D2/2D52BC4C697011F1AE32D1EB7B47A888/p-pV__DfLKs1BxlXYgFwfKISh_o.mft
File:                     p-pV__DfLKs1BxlXYgFwfKISh_o.mft (raw, json)
Hash identifier:          DK+2Lx/Sk0j+JvfNVL3Fu543S5VSZyKjJXS7LzzIeQk=
Subject key identifier:   FB:9B:98:CE:EC:17:FB:54:B2:FF:FF:40:02:D9:E6:70:F9:F8:6D:3B
Authority key identifier: A7:EA:55:FF:F0:DF:2C:AB:35:07:19:57:62:01:70:7C:A2:12:87:FA
Certificate issuer:       /CN=A91B49D2/serialNumber=A7EA55FFF0DF2CAB350719576201707CA21287FA
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-pV__DfLKs1BxlXYgFwfKISh_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B49D2/2D52BC4C697011F1AE32D1EB7B47A888/p-pV__DfLKs1BxlXYgFwfKISh_o.mft
Manifest number:          16
Signing time:             Mon 27 Jul 2026 11:24:52 +0000
Manifest this update:     Mon 27 Jul 2026 11:24:52 +0000
Manifest next update:     Mon 03 Aug 2026 11:24:52 +0000
Files and hashes:         1: p-pV__DfLKs1BxlXYgFwfKISh_o.crl (hash: nCXHPCazkJzmY2TsRsHHWdwhBVPEqHfhP3zIvBnzNnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B49D2/2D52BC4C697011F1AE32D1EB7B47A888/p-pV__DfLKs1BxlXYgFwfKISh_o.crl
                          rsync://rpki.apnic.net/member_repository/A91B49D2/2D52BC4C697011F1AE32D1EB7B47A888/p-pV__DfLKs1BxlXYgFwfKISh_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-pV__DfLKs1BxlXYgFwfKISh_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B49D2, serialNumber=A7EA55FFF0DF2CAB350719576201707CA21287FA
        Validity
            Not Before: Jul 27 11:24:52 2026 GMT
            Not After : Aug  3 11:24:52 2026 GMT
        Subject: CN=6a674004-79c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2c:2d:6f:30:16:8a:e8:4c:ee:c0:c1:53:33:
                    5d:b4:0f:bf:cf:e8:a3:2a:55:bc:d1:f7:89:51:14:
                    7b:66:0f:de:08:ee:09:6d:17:f3:b2:39:7c:10:44:
                    80:69:fe:6f:79:61:dd:d4:a3:b2:ab:c5:cf:d4:a5:
                    6a:ce:95:85:58:91:f5:b7:c0:de:4e:30:a4:e8:0c:
                    de:43:13:fd:dd:f4:f5:b0:21:5a:02:30:1e:ac:ba:
                    e7:5e:1a:96:36:c1:92:7e:a2:df:b6:9a:ca:19:c9:
                    14:93:e6:6f:ec:39:95:9b:8e:00:2c:7a:fd:ad:57:
                    0f:fe:aa:a1:d6:a7:c4:11:e6:c7:03:54:7b:ac:6f:
                    34:02:71:25:63:63:3f:d2:86:ef:3c:32:73:b7:e3:
                    df:c2:cb:64:d9:f2:36:34:76:c9:4d:1d:6a:ab:f5:
                    a3:51:0d:8d:67:48:10:2f:d1:81:68:c0:6d:dd:80:
                    8c:36:81:c6:08:c6:10:e3:21:b0:29:a5:e3:22:47:
                    0c:32:0b:13:0a:2d:ba:46:d3:6e:c2:74:3e:d0:51:
                    b3:fd:21:ca:76:de:01:ab:7e:fd:d4:78:fd:40:c1:
                    6b:1b:ee:53:3a:db:f5:6e:04:c8:13:86:cd:86:8b:
                    1d:60:38:4f:29:a7:0f:ee:a3:e4:d6:68:00:7d:3f:
                    e8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9B:98:CE:EC:17:FB:54:B2:FF:FF:40:02:D9:E6:70:F9:F8:6D:3B
            X509v3 Authority Key Identifier:
                keyid:A7:EA:55:FF:F0:DF:2C:AB:35:07:19:57:62:01:70:7C:A2:12:87:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B49D2/2D52BC4C697011F1AE32D1EB7B47A888/p-pV__DfLKs1BxlXYgFwfKISh_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-pV__DfLKs1BxlXYgFwfKISh_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/2D52BC4C697011F1AE32D1EB7B47A888/p-pV__DfLKs1BxlXYgFwfKISh_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c1:28:67:22:a7:6e:ee:57:1b:7d:d5:5c:20:a2:88:83:f4:
         76:de:f3:e8:58:d8:f8:36:f9:e7:77:d0:f3:49:25:84:52:35:
         ca:6a:8f:68:cc:84:3d:c4:6b:0b:a7:87:fe:74:3b:44:b8:3c:
         82:dd:4c:15:54:db:7d:8b:a6:78:75:1b:ef:77:49:6c:f9:dd:
         d5:83:03:e9:32:fd:8a:17:f0:c7:fc:0e:13:77:91:3b:a3:62:
         15:46:b7:df:87:d7:bf:54:36:9b:8d:ed:50:c4:61:4a:58:0a:
         1e:03:e9:32:0f:50:9d:04:e7:f1:ba:a5:9e:21:a8:13:a6:0b:
         90:2d:da:01:b6:f3:c2:39:88:e6:03:a1:7a:54:79:97:b4:67:
         fc:1a:48:ba:1e:b3:91:2e:d5:5b:06:34:e5:b9:e9:15:a0:30:
         37:a4:22:1f:bc:53:5c:15:f2:05:08:4b:41:f3:c0:fd:47:88:
         1c:84:cb:64:e4:9b:13:94:1f:89:31:f6:8d:f9:7f:5a:c4:49:
         cf:e5:28:02:16:92:d0:7c:88:8a:aa:80:d0:76:70:fc:e4:62:
         90:f2:ca:af:6b:23:fe:52:ba:30:25:a5:3b:03:07:9b:ee:84:
         68:d1:74:82:71:40:29:3e:67:9c:56:9d:ad:65:e9:60:a3:46:
         ce:77:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:39 2026 by rpki-client