Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
File:                     MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json)
Hash identifier:          xXqN6dgpqTQKOnRpzWETx/o9k8kipZtvxmtcNuyf1k8=
Subject key identifier:   7E:3C:09:E5:AA:73:C6:16:27:CA:60:11:06:BE:E0:45:A0:CA:82:5C
Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC
Certificate issuer:       /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
Certificate serial:       055B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
Manifest number:          055B
Signing time:             Sun 20 Sep 2026 23:13:31 +0000
Manifest this update:     Sun 20 Sep 2026 23:13:30 +0000
Manifest next update:     Sun 27 Sep 2026 23:13:30 +0000
Files and hashes:         1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: 4Kc338838KzulJEU6F6j7CtwRljaaaWNEZSI3PfrJ/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
        Validity
            Not Before: Sep 20 23:13:30 2026 GMT
            Not After : Sep 27 23:13:30 2026 GMT
        Subject: CN=6ab0689b-0f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:03:a9:52:46:f4:68:28:6d:a8:f2:81:07:
                    52:6f:64:8a:4b:13:17:88:c1:03:0b:86:7e:93:c2:
                    6f:d1:fb:00:51:d7:f0:63:98:ae:43:a8:40:34:eb:
                    e8:35:33:44:ab:ab:86:4d:73:14:f5:20:16:ce:d6:
                    e5:2c:0a:bd:35:ab:ec:52:c0:16:e0:55:8a:66:68:
                    8c:32:15:d6:57:5c:ef:92:a4:61:70:96:a3:9d:d9:
                    16:40:c7:a1:9a:62:d2:27:8f:a4:51:42:3f:19:ed:
                    92:c7:78:05:3b:d9:07:23:04:25:72:1f:32:66:a7:
                    9b:2e:63:04:df:e6:57:f3:ce:4f:cb:55:81:17:c0:
                    c4:a4:f3:45:d7:a1:2a:79:ab:a5:17:ca:83:9c:1a:
                    d2:d6:3a:a8:65:e7:6d:75:bc:dc:7b:0c:6e:5a:2a:
                    95:db:f7:b4:e1:25:2c:9b:9d:d9:5d:91:2e:5d:38:
                    a6:71:97:cc:21:69:78:09:58:2b:c3:67:1c:73:6a:
                    69:70:72:6a:67:c7:9f:0b:0e:88:62:5f:43:fe:49:
                    b9:1f:29:51:31:73:d9:bc:5b:76:b2:ac:00:b3:81:
                    65:c2:c1:89:b4:1e:2a:c1:87:19:6e:48:fe:5d:64:
                    81:f5:19:30:bd:a4:15:25:14:12:24:07:e5:11:fa:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3C:09:E5:AA:73:C6:16:27:CA:60:11:06:BE:E0:45:A0:CA:82:5C
            X509v3 Authority Key Identifier:
                keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c1:93:32:99:49:37:d0:9f:49:72:0e:43:bf:eb:ca:f4:62:
         fe:b6:69:b8:63:66:47:a8:2b:84:ab:b1:2a:5a:94:b5:48:d0:
         bb:a1:0f:a5:6e:0b:8a:d3:1a:49:04:33:9a:b0:d0:ea:89:de:
         86:68:33:13:ed:b6:bd:f0:75:e8:67:c5:5b:31:76:28:4f:b2:
         0f:be:11:dc:81:6e:33:66:23:6e:a7:99:5b:0c:4f:fc:14:aa:
         00:61:98:55:ef:66:aa:bc:fc:bf:72:82:b5:64:1e:dc:e9:8d:
         b9:03:c7:79:77:cc:f3:b3:a2:5c:92:b9:e5:b1:6b:d3:ad:6f:
         6a:7b:97:22:a6:ff:04:e2:7c:36:c5:ad:38:ef:93:8b:f4:41:
         6b:f9:b5:50:08:fd:ad:bc:b2:d0:74:4d:00:ce:e2:95:03:20:
         80:9a:2e:c7:59:74:2b:da:ed:a8:c4:ed:b2:66:05:d8:2d:04:
         9b:12:96:bf:19:bb:80:1c:58:d0:4a:8f:f0:8a:0d:64:d9:70:
         0e:71:8a:40:db:ab:aa:05:4d:35:ff:ed:93:7c:a2:f5:63:cf:
         a1:27:bb:89:13:44:ca:c8:e6:c4:43:c0:5e:f6:ea:d2:75:40:
         a6:84:3c:0f:d7:55:17:b7:6b:83:63:5c:45:dc:76:f3:56:dc:
         aa:76:26:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:43 2026 by rpki-client