Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
File:                     FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json)
Hash identifier:          R3JLf9u+Jh0PvZgr92z1LVHQ6oSlLJVrpJMqvIs2r90=
Subject key identifier:   74:B3:AF:27:C1:EF:6A:4A:E3:7C:DC:D2:49:FF:06:24:86:C1:34:3E
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Certificate issuer:       /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial:       0BC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
Manifest number:          0C49
Signing time:             Tue 28 Jul 2026 19:19:19 +0000
Manifest this update:     Tue 28 Jul 2026 19:19:18 +0000
Manifest next update:     Tue 04 Aug 2026 19:19:18 +0000
Files and hashes:         1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: n/TPrX2YLNOcULTZlDMEcqtriG6vKkDcXKZFCMN/wTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3009 (0xbc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
        Validity
            Not Before: Jul 28 19:19:18 2026 GMT
            Not After : Aug  4 19:19:18 2026 GMT
        Subject: CN=6a6900b6-8be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:78:49:00:10:44:16:0e:3c:7b:79:7f:b4:
                    4b:fe:16:69:5c:ee:62:f9:d5:51:44:12:1e:04:c4:
                    b2:04:8f:77:70:33:9d:55:43:a6:c0:a7:3e:3b:af:
                    05:2b:23:a8:de:30:1d:30:d3:64:48:c2:f7:65:65:
                    c6:6f:09:41:47:d9:f7:b0:ec:63:44:bf:76:7b:f4:
                    bd:4e:c2:1e:05:5b:16:a3:8f:45:0a:1a:80:95:d6:
                    98:bd:44:91:f6:fb:b8:48:0d:68:a6:74:8e:e6:3d:
                    31:e4:83:eb:1b:fa:52:90:ae:d3:9c:27:00:d6:85:
                    9c:d9:82:50:5b:40:03:e9:ee:b9:4c:1e:ea:6b:92:
                    bd:c0:33:a1:4b:d5:1c:51:81:03:92:81:b2:fe:eb:
                    76:d6:d3:0b:31:97:c3:1d:e0:60:b4:ce:5b:52:96:
                    72:4d:a8:ec:8a:ed:ed:86:d1:2a:ae:5e:82:c5:a8:
                    06:14:71:ae:66:17:4f:08:18:03:1e:aa:7a:e3:bd:
                    7f:1d:0b:5b:17:26:4c:f9:1d:de:80:8a:32:a2:63:
                    b5:60:65:1e:62:cd:c2:9e:e1:8d:0a:0d:0b:e0:d8:
                    a6:62:ac:78:52:4e:54:24:97:64:1f:09:d1:74:10:
                    44:f8:fc:68:ee:b8:e6:51:36:e1:03:e5:01:79:7e:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B3:AF:27:C1:EF:6A:4A:E3:7C:DC:D2:49:FF:06:24:86:C1:34:3E
            X509v3 Authority Key Identifier:
                keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:50:af:e2:4e:0e:82:80:ac:7b:59:ac:db:b3:97:4d:76:06:
         22:e2:8d:18:1b:5b:99:de:bd:5d:7b:17:13:bd:d9:2a:c1:15:
         d8:cf:b2:3c:2a:60:19:b1:46:5a:24:be:44:27:11:c9:72:4b:
         7f:b8:eb:14:74:b2:2d:f2:2f:f0:3b:70:04:14:19:29:fa:1e:
         85:1d:c0:4b:bd:6c:3b:9b:09:87:15:64:4b:a8:b1:82:2d:e3:
         da:a7:b2:91:fb:d3:a3:9b:a2:1e:3b:8b:5c:3e:ac:c2:21:c0:
         84:4e:e0:a7:91:a3:e2:e7:35:1d:e9:a6:35:91:ba:5b:b1:c6:
         ce:3f:c5:d1:34:72:98:52:f8:52:38:c0:1a:bc:e8:88:30:05:
         24:43:65:1a:9d:f9:3f:b6:a4:fa:28:32:5e:f7:85:b4:58:2e:
         b3:c7:0a:09:c4:bf:9e:6d:b9:76:6c:f9:83:49:b9:d5:78:a9:
         6f:c5:de:35:58:08:c6:22:90:e4:17:f0:63:c4:41:aa:1a:ea:
         95:2b:c7:4f:ce:59:5b:e1:e0:97:cb:d3:60:94:3e:06:ef:76:
         e3:09:6a:22:11:4b:be:7e:2a:62:70:7c:15:db:e3:55:16:a5:
         87:b0:5c:15:9b:e6:e7:3a:6d:e3:34:ee:c2:97:c1:f8:d5:7a:
         ab:89:4d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:23:50 2026 by rpki-client