Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft
File:                     EDhLgnxFluWuq0OYhypdFG6ggV8.mft (raw, json)
Hash identifier:          pDjR4SfwXgnTZkDqPgSv89AbWISgsQ0DV0KGSKEiryM=
Subject key identifier:   1B:4C:04:94:89:8D:20:D6:45:AF:CD:BE:25:50:92:C1:ED:F7:09:98
Authority key identifier: 10:38:4B:82:7C:45:96:E5:AE:AB:43:98:87:2A:5D:14:6E:A0:81:5F
Certificate issuer:       /CN=A91BA3E7/serialNumber=10384B827C4596E5AEAB4398872A5D146EA0815F
Certificate serial:       02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft
Manifest number:          02
Signing time:             Tue 28 Jul 2026 02:19:30 +0000
Manifest this update:     Tue 28 Jul 2026 02:19:29 +0000
Manifest next update:     Tue 04 Aug 2026 02:19:29 +0000
Files and hashes:         1: EDhLgnxFluWuq0OYhypdFG6ggV8.crl (hash: EJ6BPyAqO+DKvQ5qvqupNIPL98Y3rE6qYcmI5mTUE+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.crl
                          rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 02:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA3E7, serialNumber=10384B827C4596E5AEAB4398872A5D146EA0815F
        Validity
            Not Before: Jul 28 02:19:29 2026 GMT
            Not After : Aug  4 02:19:29 2026 GMT
        Subject: CN=6a6811b1-7984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:04:99:f8:66:42:fb:d7:ec:96:3d:10:3c:
                    3d:00:92:8b:79:39:6e:21:71:af:92:05:eb:ff:8e:
                    9a:83:d1:02:26:b1:5e:8e:05:97:1e:62:9f:33:a8:
                    df:2f:6d:7b:5d:c7:89:5d:eb:07:50:aa:15:db:a4:
                    03:57:05:da:44:90:b6:14:c6:80:78:9b:0b:8d:95:
                    66:59:78:ca:69:f5:bc:eb:7b:b1:b1:b6:57:7f:bd:
                    53:e5:18:11:25:a7:8d:54:85:9d:0b:5e:81:ec:25:
                    24:7e:38:88:be:34:cf:ce:ab:a2:73:4e:a7:79:75:
                    2c:89:5b:46:60:d5:73:d3:5f:5e:24:d2:13:86:45:
                    fb:3e:03:76:09:0b:06:4a:74:16:c6:88:fe:b8:f1:
                    33:66:38:54:28:33:df:dc:d5:a4:ab:f5:2c:9f:43:
                    23:e6:a4:5f:25:cf:90:d5:5a:7f:66:60:a1:4c:fc:
                    39:39:aa:79:a5:46:14:b3:1e:0a:8a:93:b0:35:6a:
                    d8:7b:5a:64:fc:5f:fc:5b:40:fa:e1:a9:6a:50:9b:
                    aa:2d:2e:89:96:42:8f:f4:90:83:3e:21:53:a2:76:
                    b5:99:cd:17:16:b9:ad:ee:9f:f8:fd:2d:b9:69:c2:
                    39:95:d0:f9:1b:e2:ab:9b:57:9c:4c:08:44:75:c8:
                    9b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4C:04:94:89:8D:20:D6:45:AF:CD:BE:25:50:92:C1:ED:F7:09:98
            X509v3 Authority Key Identifier:
                keyid:10:38:4B:82:7C:45:96:E5:AE:AB:43:98:87:2A:5D:14:6E:A0:81:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a2:07:21:bb:32:17:b3:02:3c:15:88:09:43:09:de:90:e4:
         26:14:a3:ff:7e:ca:bc:39:33:ac:f5:7b:78:5c:cf:c4:3c:f1:
         5d:d0:1b:7b:2d:7c:e1:7d:79:65:a1:fe:7a:d7:9e:ef:f1:7a:
         09:6e:76:bf:72:69:36:2d:23:ff:ef:e4:77:d3:42:09:72:92:
         dc:38:6c:39:4a:e7:b5:d3:b1:dd:82:8f:02:57:b2:9f:bf:7e:
         a8:2e:07:81:93:d4:af:9e:cc:77:e8:af:7e:73:4b:24:e4:d3:
         27:65:25:d4:08:ff:86:29:de:00:a4:8e:bb:a2:18:c0:e6:fd:
         73:3b:60:d9:7f:07:1a:03:e2:cd:39:14:6f:fb:63:64:6f:52:
         28:a9:4d:eb:28:eb:d8:93:ad:43:a9:cb:05:63:a4:4a:fe:44:
         57:cd:5e:7a:73:f1:d3:36:1d:42:76:21:d4:31:5b:1a:08:34:
         09:d4:87:2b:5e:b7:24:d4:45:10:4f:7b:5d:30:82:65:49:65:
         29:c1:ea:6a:54:8b:fb:1e:89:7a:0d:01:33:20:cf:9c:a2:f4:
         b1:10:f0:bb:7d:b3:96:8a:d4:a4:40:9e:99:af:88:b2:fc:8d:
         a8:82:4d:75:7f:eb:b0:7d:53:1b:83:76:5d:09:76:e9:b2:90:
         c8:db:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:26:48 2026 by rpki-client