Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
File:                     fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json)
Hash identifier:          nx+03JC5bLVRQxDP4IoC3Za3yK5IbJGv4kiZAMjGzLM=
Subject key identifier:   F4:CA:C8:AE:DF:F6:44:EF:4B:59:34:05:FA:22:7F:EE:63:7C:0E:B9
Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8
Certificate issuer:       /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
Certificate serial:       355D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
Manifest number:          9CB6
Signing time:             Tue 28 Jul 2026 15:19:47 +0000
Manifest this update:     Tue 28 Jul 2026 15:19:47 +0000
Manifest next update:     Tue 04 Aug 2026 15:19:47 +0000
Files and hashes:         1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: R8s2iosmwTXsQ6s+NgKBKWZvGPoUWK5seW/tBxy167E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13661 (0x355d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
        Validity
            Not Before: Jul 28 15:19:47 2026 GMT
            Not After : Aug  4 15:19:47 2026 GMT
        Subject: CN=6a68c893-ff9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:23:43:a6:d2:f7:eb:d6:e0:79:5b:92:a3:
                    3c:20:87:e8:9a:c8:73:dd:0b:ca:9b:82:92:3e:df:
                    b3:a8:d3:50:3e:11:56:7d:fc:23:43:c9:0a:4b:e2:
                    a4:23:00:86:e3:e4:fa:4e:fd:b9:7a:46:94:0b:0b:
                    b6:12:01:b6:d2:ea:3e:eb:17:ca:4a:8d:53:27:90:
                    2a:cf:cd:75:0f:eb:8c:f5:e9:fd:d8:16:61:50:a5:
                    74:37:41:4f:34:97:43:f6:e6:ec:8a:08:34:23:a4:
                    d6:18:52:6c:6d:0f:10:5d:bc:61:8f:50:c3:e8:38:
                    62:a1:59:0d:27:bc:d4:0a:28:ee:ca:60:7e:d5:67:
                    02:81:68:25:c6:07:bc:f4:d9:de:1d:00:6f:51:1c:
                    f8:61:a7:58:69:2c:4f:e5:a1:86:0c:91:9e:d2:c1:
                    33:9e:38:37:36:f6:2f:b2:f4:cc:20:4f:38:2c:f5:
                    ee:5d:56:8c:34:dd:18:2a:5d:48:ec:bd:ea:5c:e4:
                    c9:c6:72:d8:65:78:fd:48:9c:b9:69:3e:2d:d0:b1:
                    39:60:13:c6:64:a1:bd:e7:f8:dc:8e:22:71:32:22:
                    77:e4:ee:41:bd:15:b5:a0:b6:d3:b0:ec:1c:84:5b:
                    67:5e:32:9b:54:03:45:1d:4e:aa:75:51:92:d6:04:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CA:C8:AE:DF:F6:44:EF:4B:59:34:05:FA:22:7F:EE:63:7C:0E:B9
            X509v3 Authority Key Identifier:
                keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:78:97:aa:3a:21:a5:27:c3:16:84:53:e0:37:a1:e1:cc:
         87:ba:00:6a:ec:8d:ed:dd:b3:72:9b:1d:76:49:0d:5c:4b:8d:
         03:9a:d5:15:5b:e9:d1:a4:c5:95:38:b4:48:0c:62:30:d3:5b:
         7b:32:a9:b1:01:db:34:ed:b2:d4:c5:79:ef:c9:90:34:cf:e6:
         7d:e6:63:f9:5e:70:ed:23:32:72:78:71:67:3e:74:92:02:7d:
         4c:f5:79:1b:77:70:2d:b0:0d:01:e6:a2:1b:93:94:e1:c5:93:
         fb:de:bc:f2:bc:67:71:a9:d5:c7:31:15:62:4a:d0:b3:98:12:
         73:1a:20:f6:f1:a0:b0:b1:c6:f9:4c:39:79:28:0b:9c:7d:65:
         af:fa:67:63:b2:d1:6b:f4:6a:62:ea:1b:10:07:74:03:ec:51:
         7c:58:8b:77:f1:cd:fc:49:03:0f:16:2b:fc:47:46:28:c3:1b:
         1b:e2:61:80:98:07:d4:33:5d:c7:ee:f0:42:52:1c:02:cc:d4:
         f2:a9:67:6e:86:a1:00:57:80:1b:03:33:b4:0b:6d:a4:ca:19:
         d1:22:c7:98:46:49:97:ac:c4:d2:70:2e:aa:cb:1a:51:55:e3:
         8a:ac:f6:dd:b4:7d:b6:b3:0a:03:cf:d3:28:40:69:06:af:dd:
         77:43:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:32:20 2026 by rpki-client