Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
File:                     hmRWQenizPzosun9-5X-a_CfBcU.mft (raw, json)
Hash identifier:          GjU2fx/cMLAr3tYm10JQHqZjj0tlFYDYgGJlbE9EyvY=
Subject key identifier:   5E:AC:E4:8E:E7:A3:A7:3C:30:EF:7F:E6:EB:14:B5:C0:D6:12:9C:A2
Authority key identifier: 86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
Certificate issuer:       /CN=A91C3DEA/serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
Manifest number:          5E
Signing time:             Mon 27 Jul 2026 10:23:58 +0000
Manifest this update:     Mon 27 Jul 2026 10:23:58 +0000
Manifest next update:     Mon 03 Aug 2026 10:23:58 +0000
Files and hashes:         1: hmRWQenizPzosun9-5X-a_CfBcU.crl (hash: +qzPXacIc4m+sWTwqqy12aTGcSEbM1gDNcIc6Qg+WGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl
                          rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3DEA, serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
        Validity
            Not Before: Jul 27 10:23:58 2026 GMT
            Not After : Aug  3 10:23:58 2026 GMT
        Subject: CN=6a6731be-f8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:90:9d:88:19:f6:3a:03:b7:6e:cd:7c:3c:
                    07:ac:10:1d:1d:52:1d:37:70:3f:30:4e:15:78:df:
                    39:cf:5d:a9:ef:4f:d9:4a:05:9d:00:1f:31:35:8d:
                    a9:4a:e5:31:e2:d5:85:58:7f:e3:a4:64:b5:19:96:
                    a0:44:50:29:16:02:ee:bd:05:25:dc:f1:ca:dc:6e:
                    05:79:25:1e:c3:09:3e:d3:1a:c7:35:1f:e1:a1:a8:
                    62:15:ea:69:8e:d8:f0:13:31:24:24:c7:0e:e4:9a:
                    68:92:22:25:9a:9e:19:0a:06:eb:43:73:dc:85:b5:
                    1e:37:4c:d6:6b:b6:d2:55:50:3a:93:0e:a3:91:4f:
                    c3:ac:14:d1:0f:3c:0f:6f:38:60:51:df:32:18:f2:
                    3a:24:26:a8:a2:6d:e2:dd:e2:9e:45:75:82:fc:46:
                    35:5f:06:cc:3f:b6:b5:9f:6e:b0:7e:1f:a5:fb:33:
                    1e:f8:03:e8:86:87:ad:c2:03:00:68:56:31:87:7e:
                    44:68:41:2f:fa:f8:b8:10:72:a2:9e:d4:d2:f8:ca:
                    f3:04:7f:ec:35:e0:83:4a:4d:0e:cd:8a:e4:13:94:
                    5e:6f:a0:a3:07:b1:67:02:9d:1f:21:72:4e:79:e4:
                    38:db:45:66:ef:6b:75:90:30:24:5f:02:75:87:da:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AC:E4:8E:E7:A3:A7:3C:30:EF:7F:E6:EB:14:B5:C0:D6:12:9C:A2
            X509v3 Authority Key Identifier:
                keyid:86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:01:f5:dc:a2:1e:88:7b:cb:a3:37:b4:aa:32:ef:49:2c:
         21:c6:7a:cf:92:f5:da:52:3d:86:1b:4e:2e:43:7c:6e:0b:47:
         32:bb:eb:9e:12:41:aa:76:c1:cd:89:68:01:3f:31:ac:90:a6:
         fe:70:d9:b6:15:cb:4f:82:af:29:2d:c8:3d:3c:7e:59:a4:9f:
         bb:c8:2b:f7:77:10:72:ea:e6:50:93:64:f2:ad:00:a1:f1:e7:
         fb:8c:79:50:ab:74:9a:8e:b7:61:8d:96:7f:e0:26:36:69:74:
         cf:e2:74:fa:4f:aa:b0:49:7e:f9:70:3b:3f:57:c2:a0:9b:53:
         46:3f:67:b0:9c:79:cc:0d:e8:ae:08:15:cb:1c:b3:8f:19:5c:
         8e:1c:9e:4a:cb:00:5a:ec:66:0a:20:8d:22:a7:0f:1a:17:6b:
         c2:96:d9:c8:33:53:78:46:a4:b5:60:24:8f:b6:79:a3:cd:d8:
         d9:c4:61:ca:0e:69:13:a5:9e:53:97:d3:9e:22:f4:06:60:22:
         b3:bc:a7:cf:fe:8c:60:f7:e4:8b:38:4f:64:f0:47:00:1c:7a:
         06:45:d0:52:4d:91:e5:0b:4a:53:34:ca:2b:f0:df:82:d1:b4:
         27:b5:8f:d9:4e:06:72:7a:f5:81:2d:4a:23:40:65:40:19:a8:
         92:38:26:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:57 2026 by rpki-client