Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft
File:                     8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft (raw, json)
Hash identifier:          ptDzVJ45Ofn6ar4a47/DXtOEDStsMD7UG7LLf2JamRU=
Subject key identifier:   C3:FC:A5:A0:F2:3C:8D:9D:E4:F1:51:35:33:65:A9:E9:70:C2:A7:54
Authority key identifier: F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F
Certificate issuer:       /CN=A91CFBCB/serialNumber=F2170630A014F8218FF3075649F41242003D446F
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft
Manifest number:          60
Signing time:             Mon 27 Jul 2026 10:24:43 +0000
Manifest this update:     Mon 27 Jul 2026 10:24:42 +0000
Manifest next update:     Mon 03 Aug 2026 10:24:42 +0000
Files and hashes:         1: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl (hash: TQPjBBL64CBlOfbSHvtpJTfbDVn5n+vk/EWe5b5h5s8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl
                          rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFBCB, serialNumber=F2170630A014F8218FF3075649F41242003D446F
        Validity
            Not Before: Jul 27 10:24:42 2026 GMT
            Not After : Aug  3 10:24:42 2026 GMT
        Subject: CN=6a6731ea-fe8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:92:77:03:e4:40:42:c6:54:35:2c:bd:7d:
                    93:7b:2d:5f:0b:ca:81:a9:7b:37:99:fc:4e:37:96:
                    d4:9c:05:dc:a1:07:f5:46:a2:7c:f4:1d:08:a6:f7:
                    e5:87:10:54:fc:08:1e:56:ba:a7:a4:4c:69:7d:96:
                    a8:18:d5:82:da:81:c6:fb:e0:c4:a6:20:80:92:cd:
                    cb:8c:b9:22:57:e7:bf:14:bb:f3:ae:df:75:f9:b2:
                    27:a9:6a:74:88:fe:cc:80:f3:fa:f6:7c:00:6c:35:
                    91:46:f0:10:8e:1b:73:f8:3e:75:fb:07:df:59:b7:
                    f0:ec:ba:58:2d:31:f3:03:5a:c4:ef:ec:d1:87:c5:
                    95:b9:2e:39:8a:be:7f:60:4c:37:60:f2:18:58:00:
                    09:ce:b7:5b:65:f9:9e:7a:fd:cd:f9:1a:9b:f4:7d:
                    03:37:c2:fd:04:d0:9f:5e:9a:e0:85:19:06:c7:17:
                    e0:43:13:15:0c:f7:df:d9:7f:00:d6:e1:99:e7:d5:
                    17:31:1a:5c:82:51:f9:dc:1e:de:64:79:8f:19:d0:
                    db:84:c2:1f:a9:13:7c:b3:e6:6a:18:db:d8:54:df:
                    6f:e9:6f:65:32:0c:27:9c:90:51:7a:cd:6a:cf:d5:
                    c2:40:bf:b1:f6:5d:4a:13:9a:79:e0:68:de:92:d7:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FC:A5:A0:F2:3C:8D:9D:E4:F1:51:35:33:65:A9:E9:70:C2:A7:54
            X509v3 Authority Key Identifier:
                keyid:F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a2:53:ff:49:a6:14:66:c2:01:b4:98:15:5c:95:10:e6:a0:
         f5:fc:10:0b:63:29:a0:67:71:c0:99:15:74:dd:c4:70:3b:34:
         74:24:1f:af:32:30:55:65:e8:af:4d:0b:c5:ff:05:8a:56:74:
         24:7b:7a:2f:5d:04:ce:c5:af:bc:12:d7:56:fd:60:49:61:31:
         e3:99:ac:3a:62:93:bf:5c:b6:7e:1c:79:fa:c1:86:91:94:0d:
         b5:be:c1:ae:65:12:66:52:fc:cb:35:d3:09:0e:c4:6e:fc:a2:
         22:87:c0:24:1e:e7:62:2d:95:59:67:28:5a:57:b4:a2:05:5a:
         97:2f:cb:db:ad:40:94:ce:b2:c0:34:dc:74:75:d7:a9:fd:c6:
         69:d8:59:04:d6:3a:bc:9e:84:13:ee:fe:32:c9:5d:ea:30:43:
         58:e1:b7:3f:fd:4f:97:d9:53:ac:6f:2f:31:72:7f:20:e7:8e:
         40:96:f7:cf:da:c3:ad:cf:2c:38:b1:41:2f:d9:65:e5:dc:39:
         2b:74:3e:34:4c:db:9d:bc:f8:c7:f1:11:cf:41:10:5b:1b:f6:
         b2:bd:48:b5:b2:b2:50:73:2a:c5:5f:25:88:5d:d1:ca:38:59:
         46:d5:a6:09:aa:89:b9:fa:c8:8f:1a:09:64:34:b6:85:a6:b9:
         29:2a:9d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:11 2026 by rpki-client