Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
File:                     _ZFHrvajMNGN1MnP2GQvDtqnuQc.mft (raw, json)
Hash identifier:          89zPuyjvZA97M6j0JvvrP+rx/suf03zpu8vh8BP0XYE=
Subject key identifier:   8E:04:C3:D1:4E:C8:57:A9:0C:7F:D8:E6:39:67:E9:22:11:12:DA:0E
Authority key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
Certificate issuer:       /CN=A91E1853/serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
Manifest number:          8C
Signing time:             Mon 27 Jul 2026 09:45:34 +0000
Manifest this update:     Mon 27 Jul 2026 09:45:33 +0000
Manifest next update:     Mon 03 Aug 2026 09:45:33 +0000
Files and hashes:         1: _ZFHrvajMNGN1MnP2GQvDtqnuQc.crl (hash: Yo6+DGzul9L2AdAuRfDTYMST0E890tXMpQ6PPQ3F2qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
                          rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
        Validity
            Not Before: Jul 27 09:45:33 2026 GMT
            Not After : Aug  3 09:45:33 2026 GMT
        Subject: CN=6a6728bd-4764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5d:80:a9:90:64:7e:05:2f:00:dc:45:5d:9d:
                    29:4f:74:08:43:29:b7:37:b1:20:10:78:7d:bf:79:
                    04:98:68:e2:76:5f:b7:28:17:d3:ce:10:67:58:a2:
                    c8:08:a7:f1:b0:62:a9:e9:13:a7:4b:3a:df:15:8d:
                    64:fb:29:ea:f5:df:84:b0:e6:99:c5:45:d6:53:e7:
                    56:a9:1c:6e:15:7d:bb:e6:5d:e7:d2:13:9e:77:e8:
                    81:79:7f:03:93:70:6b:ca:c9:7e:36:df:46:61:a9:
                    45:31:ba:06:ba:9d:f6:b0:2d:97:eb:2b:de:50:cb:
                    49:e5:d6:a4:33:f2:39:f3:8e:98:6c:74:d7:bf:a2:
                    04:70:3e:ec:4e:2e:39:73:79:a7:cd:99:aa:b6:a6:
                    9c:7f:55:19:d7:ed:14:10:78:22:5c:e4:3b:a9:29:
                    fb:a3:94:23:68:b6:37:8d:86:74:c3:83:d9:04:9b:
                    33:15:a4:4c:ac:34:2b:c5:83:9e:9d:eb:6f:32:89:
                    ef:07:c8:38:93:33:e6:e5:2c:95:f7:b0:a5:c9:3e:
                    53:ab:69:a7:55:b2:51:b4:1a:07:bc:da:6b:cf:1a:
                    d5:5d:a4:27:4c:42:ef:87:69:db:96:0b:09:e8:ac:
                    01:41:1a:81:43:41:e6:90:13:e6:d6:c2:a1:9b:69:
                    01:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:04:C3:D1:4E:C8:57:A9:0C:7F:D8:E6:39:67:E9:22:11:12:DA:0E
            X509v3 Authority Key Identifier:
                keyid:FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:71:6e:17:07:aa:52:fe:bd:e9:5c:dc:82:f0:3a:d9:18:77:
         f2:e4:bc:c0:88:66:3a:15:59:b4:4a:f0:fc:2b:9c:58:d6:6f:
         94:ac:c2:e5:5e:29:d2:f6:b7:ff:9a:aa:75:90:11:87:98:19:
         eb:de:96:cb:cf:f6:0b:6f:79:53:46:32:10:a8:b5:2d:db:f1:
         99:45:dd:82:c6:5b:e7:6e:48:4f:5e:68:94:10:5a:f2:d3:53:
         80:9c:9b:5f:69:d2:6e:9e:84:38:9b:72:b2:96:ca:08:12:b3:
         5c:6a:1d:49:a0:04:69:84:33:b0:b2:c5:e3:34:69:35:d4:aa:
         62:f9:22:5e:34:a1:45:f1:09:bd:40:fb:36:c3:52:b3:31:4a:
         c1:d1:59:54:2d:78:92:cd:6f:a4:6d:dc:a6:61:36:f9:04:99:
         e4:25:7d:09:75:e1:ed:f7:07:8b:ac:12:92:fa:0c:de:99:eb:
         b8:e3:24:46:6b:8f:b6:4e:e8:69:06:72:7c:b8:92:e0:00:89:
         80:43:3c:80:4b:5f:b1:76:0d:b1:33:7b:63:ae:97:41:d4:56:
         84:98:fe:d4:fd:97:b9:db:a5:cf:5e:9f:43:49:96:95:a1:b6:
         e5:b6:e8:48:d4:cb:18:f9:31:33:a6:6c:c9:df:b3:2d:1d:6e:
         ab:ad:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:27:55 2026 by rpki-client