Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
File:                     7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json)
Hash identifier:          ydZ3FbF6LtJ7OLaCAWBIxAC5cz8LBrb55X4EsAl7Uks=
Subject key identifier:   BD:B2:41:49:58:1C:78:AD:52:85:D4:3B:F2:AA:8B:51:D1:D1:E2:A1
Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D
Certificate issuer:       /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
Manifest number:          020D
Signing time:             Mon 27 Jul 2026 04:32:24 +0000
Manifest this update:     Mon 27 Jul 2026 04:32:24 +0000
Manifest next update:     Mon 03 Aug 2026 04:32:24 +0000
Files and hashes:         1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: cDO4UfYNZ9/YohBNSkw36BRyoLI6I0I4XGvpaQosCUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
        Validity
            Not Before: Jul 27 04:32:24 2026 GMT
            Not After : Aug  3 04:32:24 2026 GMT
        Subject: CN=6a66df58-a19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:ce:ee:31:19:cb:d9:ae:32:02:0b:2e:42:
                    36:22:32:72:84:ad:57:f3:ee:c5:b3:7f:23:c3:4c:
                    f5:90:f1:db:0c:67:91:25:56:e5:d3:08:de:df:b8:
                    f1:42:0e:f0:a5:1d:c3:c3:3e:50:c3:40:df:ea:8d:
                    5a:be:12:c0:25:eb:5d:ab:86:5c:b1:35:e4:3c:83:
                    11:29:31:40:05:d0:4d:c3:0f:32:89:7a:6c:02:7f:
                    25:03:84:95:bb:07:8f:30:28:5e:44:ea:96:04:8a:
                    15:79:19:7a:43:d7:e6:32:0f:a0:3b:d2:91:82:74:
                    31:19:e9:e9:21:d4:61:97:a1:fe:85:3c:4a:ec:eb:
                    c5:ad:9e:0a:26:f0:a6:48:85:d0:e0:df:cc:e0:be:
                    26:53:a9:da:c9:e8:91:c5:18:a5:83:98:b8:d8:0d:
                    98:5c:fb:1e:01:5a:a8:38:16:e2:97:5c:91:e9:18:
                    a6:8f:bf:02:cc:5b:e8:af:b1:0e:45:2f:ef:c7:76:
                    ae:30:df:fc:9b:f9:b4:ab:12:f4:13:95:63:09:15:
                    a5:50:ff:16:3b:d1:9b:91:be:32:f8:d8:4b:a0:06:
                    94:a7:fc:42:2b:ee:43:56:28:59:08:a5:96:35:fc:
                    ec:e5:c1:3b:b4:e0:ed:39:68:df:6f:f1:c5:f7:fd:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B2:41:49:58:1C:78:AD:52:85:D4:3B:F2:AA:8B:51:D1:D1:E2:A1
            X509v3 Authority Key Identifier:
                keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b9:40:f4:80:78:66:c4:52:86:14:34:68:d9:0a:0d:49:76:
         92:9b:4b:bf:16:19:09:2a:4a:1a:4b:40:98:cd:2a:66:31:14:
         48:12:ea:e4:07:1b:a9:90:b3:73:bb:71:b8:ee:a1:b5:81:d6:
         ba:7d:e7:61:ee:a1:65:ec:aa:0b:df:0f:e4:48:f0:fd:8e:94:
         14:36:d0:b5:c1:c9:37:a6:53:14:9e:cb:57:6b:45:ea:c7:ba:
         51:c2:06:14:ad:c5:42:97:0e:e0:27:6a:76:0b:96:75:df:69:
         13:42:04:ce:32:d9:8a:f0:e1:40:d9:a5:c5:b7:f7:6e:d5:36:
         15:3d:ce:ad:e6:57:f6:36:26:3f:95:7f:5b:24:04:f2:a4:79:
         30:77:b8:c5:41:3d:d9:93:53:3e:12:87:db:ac:f9:42:cd:b0:
         41:d0:0d:5e:d9:d5:60:c5:25:09:94:fb:a4:1d:e9:1a:1b:3c:
         c6:0a:0b:fe:23:1e:31:d5:8c:36:c1:b3:20:c5:e9:2f:e9:f1:
         4f:2c:c2:23:db:3a:aa:5e:ca:e6:e2:2b:e2:ed:ff:cd:03:f7:
         13:60:35:21:a2:fa:a1:80:c1:92:e5:72:d6:7b:b6:78:8a:59:
         66:e0:db:c5:c9:05:64:07:4e:fa:ce:51:3a:43:65:b0:27:b1:
         09:a7:c1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:10 2026 by rpki-client