Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft
File:                     MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json)
Hash identifier:          gkgJX6oOp/QHgarWH5aAdHm8Do2xtQnAGZpfh65VUsw=
Subject key identifier:   0E:2F:13:4F:3A:2F:72:BD:A1:74:7E:C4:06:FB:31:7B:07:67:2B:6C
Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D
Certificate issuer:       /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D
Certificate serial:       3563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft
Manifest number:          3563
Signing time:             Tue 28 Jul 2026 15:15:02 +0000
Manifest this update:     Tue 28 Jul 2026 15:15:01 +0000
Manifest next update:     Tue 04 Aug 2026 15:15:01 +0000
Files and hashes:         1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: O7JkRitaRTj0KRjpFrmgQaFL5IG3IA2LEmUK1ZnX0Uk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl
                          rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13667 (0x3563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D
        Validity
            Not Before: Jul 28 15:15:01 2026 GMT
            Not After : Aug  4 15:15:01 2026 GMT
        Subject: CN=6a68c776-b45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:45:dd:94:e6:a0:ec:ea:4c:a1:2e:fc:0d:8a:
                    0c:d8:d1:c9:29:19:cd:85:f8:88:11:23:7a:ca:98:
                    e9:8e:32:73:14:2f:f9:84:68:a9:9e:0d:96:3d:bb:
                    41:bd:cd:0c:e9:9f:a4:8d:b1:4f:76:47:93:af:a8:
                    54:89:98:a1:ff:be:0a:d7:f9:b3:35:1b:0f:0a:55:
                    67:b5:44:8e:c0:a1:5e:ce:ec:53:1a:57:27:4a:d8:
                    5a:a3:4e:8a:97:ea:16:34:28:77:84:d0:88:ab:92:
                    fa:20:38:79:72:6e:6c:15:97:13:10:29:eb:b7:d0:
                    a3:97:41:fa:4e:d6:55:d7:1a:af:93:bc:c9:7b:18:
                    53:39:34:89:a0:cd:bd:53:16:38:ae:8f:55:4a:b6:
                    56:f8:a1:22:df:f8:0c:d3:84:d8:0e:f5:1d:4b:e7:
                    c7:50:60:d0:85:d8:8d:2b:94:4e:74:de:5d:c1:5f:
                    f6:c4:c5:ce:e1:5b:1c:51:87:4e:e9:79:ee:ea:53:
                    f3:71:f9:73:56:41:37:79:0b:3f:43:8b:52:ee:55:
                    09:ee:98:4d:08:d2:48:26:2c:75:19:46:81:4d:52:
                    aa:6f:85:1d:18:8e:2f:e3:de:27:37:d4:03:03:6a:
                    65:c7:f0:2e:a2:f6:b1:51:2e:21:af:e1:9f:b6:86:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2F:13:4F:3A:2F:72:BD:A1:74:7E:C4:06:FB:31:7B:07:67:2B:6C
            X509v3 Authority Key Identifier:
                keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9a:3f:39:4f:f6:4a:a1:79:52:9e:2b:02:4d:66:69:1d:c9:
         07:bb:d3:8d:be:58:9e:6f:1b:81:57:56:ac:be:b5:41:1d:d0:
         7b:77:64:7e:19:3f:1e:6d:a5:15:16:03:ec:60:85:f4:43:0f:
         d2:d9:31:e5:86:fc:93:6c:1a:f3:0f:8e:42:2d:67:57:f4:6c:
         f9:72:0a:3b:14:6c:2d:e5:06:08:41:11:81:66:77:db:fa:7a:
         95:41:c1:73:80:19:ac:d1:03:f2:84:40:3d:88:8b:d1:a5:1d:
         b2:15:38:ca:d4:a7:e8:76:f4:c1:5b:d8:be:38:32:9f:01:0a:
         f9:d7:74:bf:e9:75:a2:7a:75:db:35:35:a2:9d:2f:54:99:d7:
         3f:18:84:b8:d6:3d:b0:c2:99:4c:85:0d:4b:e4:8b:05:7f:87:
         a6:56:57:15:28:66:60:57:29:75:8c:47:68:72:1c:32:b3:b7:
         13:eb:e6:90:4c:75:47:04:9a:3c:b6:fb:5a:fd:1d:da:44:e2:
         93:13:f0:e4:28:43:2b:f6:f6:a3:56:d6:2a:71:6a:a8:84:3b:
         18:a2:df:af:81:95:c2:be:e4:b8:3c:6c:96:a1:0c:f8:bf:c6:
         34:c5:39:18:98:74:ab:2f:28:cf:52:5a:80:b4:e9:6a:eb:dd:
         b6:4d:ae:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:53 2026 by rpki-client