Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
File:                     7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json)
Hash identifier:          3TqUyaja/6mpngHf4F2vBbFa7ZsX3Q83OMoIQxR+SQc=
Subject key identifier:   67:A5:2D:90:B3:9D:75:C2:B3:10:BF:A6:0C:37:E4:9B:7D:45:05:0D
Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
Certificate issuer:       /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Certificate serial:       3597
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
Manifest number:          41E9
Signing time:             Sat 14 Nov 2026 14:47:21 +0000
Manifest this update:     Sat 14 Nov 2026 14:47:20 +0000
Manifest next update:     Sat 21 Nov 2026 14:47:20 +0000
Files and hashes:         1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: h/eFSLOJgSfXX6j0Vh5jlRMdNJAcDP1t+uBSmbaaSf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
                          rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13719 (0x3597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5AAA, serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
        Validity
            Not Before: Nov 14 14:47:20 2026 GMT
            Not After : Nov 21 14:47:20 2026 GMT
        Subject: CN=6af87478-cf76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:0d:b7:4d:08:3c:67:ab:fa:5b:f6:2f:de:
                    e5:a0:9b:0d:1e:f9:4a:19:b4:12:3c:ae:d8:a0:5f:
                    57:27:1c:2f:e8:ab:83:8c:a6:fe:7a:c3:bc:53:18:
                    d3:c7:22:20:86:df:b0:10:50:a5:d0:fd:09:9c:18:
                    9d:c6:08:c1:02:aa:a4:a1:3b:c7:b6:07:98:ac:24:
                    2e:c4:ce:c2:55:c2:ef:a5:b0:a3:4f:5a:0c:f5:21:
                    96:e9:8f:52:46:62:b0:dc:fa:aa:f4:1b:06:e7:59:
                    28:e1:42:c0:48:95:d9:38:b0:af:f2:60:f5:04:0f:
                    5d:22:df:c4:87:39:d6:c0:ff:ac:67:37:40:7e:55:
                    a4:74:ec:7b:76:4a:98:b0:45:57:c7:e8:e1:16:83:
                    e1:02:84:ea:48:71:13:29:5d:71:de:b4:a4:42:46:
                    6f:f3:98:a1:34:51:7e:2a:6a:dd:17:6e:50:28:32:
                    d1:0d:49:60:84:e8:a6:56:0d:58:68:62:5b:3a:32:
                    11:ea:1b:92:39:7f:6e:c9:5c:18:9a:c4:12:5b:d8:
                    9c:96:39:cb:19:b0:07:19:4e:fb:aa:8c:22:3f:6b:
                    96:57:5d:33:f9:61:3d:6e:55:f2:60:16:0b:20:9f:
                    8f:73:50:e6:e9:bb:cc:28:b7:b1:82:15:b4:fa:08:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A5:2D:90:B3:9D:75:C2:B3:10:BF:A6:0C:37:E4:9B:7D:45:05:0D
            X509v3 Authority Key Identifier:
                keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ae:4c:b6:24:8b:a5:76:b0:8d:d2:92:6c:6e:3e:4e:a9:90:
         8c:1f:14:9d:50:52:55:8a:0d:8b:1d:2f:6b:f5:64:dd:1f:34:
         0c:3f:1c:21:19:5e:99:0d:b9:15:b0:4c:6c:9c:92:a2:ce:90:
         6b:ff:98:56:1d:09:ca:6b:9f:cb:bb:17:87:4b:af:88:88:d2:
         bd:71:e2:31:5f:28:13:99:b3:4f:8b:f4:08:6a:d5:6d:cc:64:
         b1:1d:14:d7:5b:d7:8e:43:ed:6d:cb:37:ec:cd:a5:f5:e5:19:
         30:4a:52:b5:4d:cd:e6:31:a4:e0:99:c0:b2:13:74:bf:d1:32:
         b2:0b:07:54:8e:d8:64:b9:0c:75:87:b6:24:0c:4b:78:77:84:
         d1:6e:ff:1e:7d:f8:4e:ba:0f:e3:f1:73:24:87:a3:25:02:a8:
         ca:62:70:f8:fa:be:64:7f:8a:fd:df:81:c3:2e:60:fb:30:c1:
         d7:2c:e0:ca:84:22:03:01:46:a0:b1:09:5b:cf:71:0e:35:6b:
         37:51:a6:3b:ba:be:60:af:9a:71:2c:11:0e:be:09:21:01:4f:
         78:d1:ee:a1:a9:bb:cb:72:e6:b3:a1:a1:6b:5f:a8:3f:b0:fc:
         a2:38:ae:6d:fe:96:a5:0b:a8:7c:c0:93:51:1a:a2:0c:a4:c0:
         81:b7:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:26:53 2026 by rpki-client