Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
File:                     jVurNwypLk9f14n8InMxD5rqOPY.mft (raw, json)
Hash identifier:          GZ36btCCKoljOqDsGCK5WB60HgzxYEeeR2DlkHbKPL0=
Subject key identifier:   6B:ED:18:75:30:C1:2E:56:85:68:C5:35:C1:2C:10:FD:1C:3A:9D:D7
Authority key identifier: 8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6
Certificate issuer:       /CN=A91E7290/serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
Certificate serial:       0632
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
Manifest number:          0621
Signing time:             Sun 20 Sep 2026 22:45:50 +0000
Manifest this update:     Sun 20 Sep 2026 22:45:50 +0000
Manifest next update:     Sun 27 Sep 2026 22:45:50 +0000
Files and hashes:         1: jVurNwypLk9f14n8InMxD5rqOPY.crl (hash: jnXzFZ+gYcVoA/H+Zp45b0tBMVWl1YpRX5DOicTQogw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl
                          rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7290, serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
        Validity
            Not Before: Sep 20 22:45:50 2026 GMT
            Not After : Sep 27 22:45:50 2026 GMT
        Subject: CN=6ab0621e-9de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:bb:2d:a7:29:7b:3d:fb:b3:0f:d5:8a:11:
                    1c:e6:4b:ad:20:f5:83:a8:28:f8:2d:6d:60:98:38:
                    de:3c:23:92:57:2e:d0:e1:a3:99:e0:55:1d:ef:8d:
                    50:84:dc:92:99:57:66:4f:0c:90:cd:4e:d2:83:f2:
                    8b:3f:56:b7:8e:a5:8f:22:ee:8d:a9:19:0d:82:bc:
                    30:f2:72:22:aa:10:71:18:ae:e2:f2:64:55:3c:a8:
                    d7:15:3c:cc:e8:ca:96:f4:a5:02:63:08:09:7b:09:
                    cd:4b:06:36:e1:b9:7b:1f:aa:78:eb:e3:b6:98:d2:
                    ac:ce:17:35:e0:ea:28:74:e1:5d:c1:bb:bd:54:90:
                    ac:a5:9a:0c:86:00:70:71:ff:de:45:a7:63:9f:f1:
                    0f:25:f1:6c:e1:f2:65:8e:76:ad:69:fd:cd:3c:83:
                    ed:83:24:43:fe:a6:4d:02:58:77:a7:f4:ae:da:93:
                    1b:75:c5:5d:04:88:7b:30:c8:7a:56:02:3b:0b:1e:
                    9c:76:bf:e1:eb:2b:d6:60:5f:20:d9:44:ea:f0:82:
                    10:52:e5:61:ad:71:51:d0:cd:01:0e:e5:3a:60:27:
                    3a:12:35:6b:83:5d:f0:c3:35:f3:05:ec:7e:26:f0:
                    69:71:91:61:bd:94:54:15:d3:6a:d7:17:34:ed:b4:
                    1f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:ED:18:75:30:C1:2E:56:85:68:C5:35:C1:2C:10:FD:1C:3A:9D:D7
            X509v3 Authority Key Identifier:
                keyid:8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:fe:fa:c9:ef:85:6b:85:16:45:26:ea:ab:4c:57:ab:b8:b9:
         09:9b:88:34:7a:bf:dd:d4:ef:19:4b:44:72:ea:9c:54:d8:3d:
         2f:b7:5b:db:d7:2c:37:bb:85:e1:b4:ba:51:b2:54:c7:99:3f:
         50:79:a0:84:80:ee:04:7c:6b:36:45:bb:aa:44:23:58:77:6b:
         24:d4:51:e6:00:0b:9f:22:eb:da:9c:08:63:ff:82:2d:b2:bf:
         60:32:9a:0f:2f:b5:b9:a0:27:7d:70:0b:14:9d:36:92:c2:05:
         dd:23:ab:51:1d:c5:c1:60:a0:c3:ef:37:04:e8:78:10:b8:01:
         17:ac:1c:1d:3e:71:27:85:b9:91:a1:c9:dc:36:e2:65:1a:3c:
         fe:dc:f4:29:6c:78:a0:fe:9f:e0:cb:f9:08:ae:cb:9f:3d:27:
         d4:f2:c1:6d:63:be:d7:2f:c6:d8:55:68:be:9b:27:20:1b:6b:
         66:5b:b5:d2:17:f0:cb:d2:b5:b9:48:7e:c0:2f:7c:e8:38:54:
         f2:3b:7e:70:37:77:92:31:29:f8:0d:a3:7a:38:ca:7f:fb:50:
         04:f9:68:59:66:e7:7f:97:1d:f5:c5:14:b6:85:5c:fd:41:ff:
         f0:54:09:7e:14:b5:e4:2d:25:2c:4a:52:4f:4a:e5:8b:8d:32:
         08:d8:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:51:10 2026 by rpki-client