Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
File:                     x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json)
Hash identifier:          pOn5LsdHyVpjJM7pJFpZFyIkjMJqoH7MCW87ghDMsM0=
Subject key identifier:   80:0F:A0:39:DB:B0:1F:77:60:44:7D:C7:A2:04:A5:74:2A:24:2D:35
Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
Certificate issuer:       /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Certificate serial:       07B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
Manifest number:          15C2
Signing time:             Sun 20 Sep 2026 18:15:45 +0000
Manifest this update:     Sun 20 Sep 2026 18:15:44 +0000
Manifest next update:     Sun 27 Sep 2026 18:15:44 +0000
Files and hashes:         1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: aePiTIHRqguKzpUXYnBtO/O0IBDi4q0vMw3AmO4LhNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
        Validity
            Not Before: Sep 20 18:15:44 2026 GMT
            Not After : Sep 27 18:15:44 2026 GMT
        Subject: CN=6ab022d1-a882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:6e:17:98:e1:db:91:8f:fd:ae:c2:9e:9d:
                    22:5b:42:16:51:27:0a:37:b5:9d:1c:b6:2d:12:b0:
                    a4:42:14:1f:73:73:cb:c6:9e:3f:19:8a:03:62:06:
                    ca:30:5d:da:a0:f4:ca:2b:c5:34:71:6d:26:3f:c8:
                    1b:7d:9a:2f:01:50:3e:8b:8b:75:d6:7d:88:cf:fe:
                    82:f0:22:17:5b:dd:82:7c:fe:0b:e8:73:ae:7d:7c:
                    48:a3:24:9e:5a:cd:76:b1:65:8b:02:49:0c:e0:8e:
                    29:90:eb:e2:67:4c:2d:87:a7:c8:f5:aa:60:a6:0a:
                    d5:0c:6a:81:3d:cc:39:73:d0:f4:c9:af:94:7e:79:
                    86:ca:c5:26:50:c9:9d:be:73:5e:de:b1:00:52:b9:
                    b0:8a:7e:39:2e:8a:7d:15:bc:81:60:7b:9e:07:17:
                    26:cc:21:3b:dd:2a:3d:3a:af:51:9f:5d:f8:07:5f:
                    6f:55:7c:92:8d:b8:6b:1b:bf:22:c5:ba:64:3a:f4:
                    41:96:22:07:e6:81:f1:61:5c:37:cc:9f:9c:24:ab:
                    c6:5e:c3:c2:29:5e:a9:6d:ed:11:12:68:ab:aa:56:
                    35:5f:df:ad:b5:b0:d2:42:be:13:98:bb:7b:be:f1:
                    40:b1:8d:02:a4:38:6e:6c:3c:25:6c:b7:82:79:b8:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0F:A0:39:DB:B0:1F:77:60:44:7D:C7:A2:04:A5:74:2A:24:2D:35
            X509v3 Authority Key Identifier:
                keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:3b:f4:14:19:d7:9d:71:64:94:16:47:a2:c0:3a:e8:11:
         7e:a2:2e:f5:59:7f:99:93:31:cd:f1:a8:4f:1d:4a:3a:4b:44:
         dc:67:44:5d:5a:5d:b8:c8:f9:0b:56:11:fa:e1:3f:33:60:b6:
         24:be:17:65:32:15:46:a8:d0:bd:7a:65:b4:f3:c1:51:c2:f1:
         a1:00:7f:eb:97:3d:6d:c4:09:12:23:ad:ae:33:ee:41:a9:81:
         f6:f2:f2:2b:85:a8:41:41:5b:a1:89:23:ed:0f:65:c3:3f:02:
         b1:8a:dc:1f:2a:d7:e6:90:4c:37:10:e7:f6:2b:7b:1a:24:26:
         b7:38:17:06:42:36:a5:b7:a9:a3:e9:3b:3b:2a:93:e3:10:cf:
         f6:49:8d:a6:e7:76:f2:57:8b:c8:ab:f5:d8:c8:d1:75:b6:20:
         1f:84:81:49:67:d5:28:97:40:e2:e3:0c:58:6f:76:e8:4d:54:
         8e:59:6e:85:60:59:d4:45:cd:cf:85:b7:83:09:80:ae:9e:5f:
         2c:92:f6:00:4e:7b:5b:70:88:12:44:74:37:92:69:b9:d2:0d:
         40:28:19:18:ae:93:3e:0b:b1:3b:0d:42:fa:b2:e1:a9:7d:7c:
         6a:3b:a6:b5:aa:3a:c1:47:0f:67:10:b5:dd:27:52:9f:8f:be:
         1b:8a:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:40:00 2026 by rpki-client