Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1745/F3D363D0450811F18B2E22CC91833773/Cpc9X6thK5jWWbIunuT0KK0mjxs.mft
File:                     Cpc9X6thK5jWWbIunuT0KK0mjxs.mft (raw, json)
Hash identifier:          I0Vl9NBbC4VHHWWXFzAkW7ieJm78eWmcyBA8UKB4yxU=
Subject key identifier:   7F:56:B1:05:3B:9B:80:57:33:A2:5A:1F:4D:87:45:39:78:BA:21:6C
Authority key identifier: 0A:97:3D:5F:AB:61:2B:98:D6:59:B2:2E:9E:E4:F4:28:AD:26:8F:1B
Certificate issuer:       /CN=A91F1745/serialNumber=0A973D5FAB612B98D659B22E9EE4F428AD268F1B
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cpc9X6thK5jWWbIunuT0KK0mjxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1745/F3D363D0450811F18B2E22CC91833773/Cpc9X6thK5jWWbIunuT0KK0mjxs.mft
Manifest number:          2C
Signing time:             Mon 27 Jul 2026 11:05:02 +0000
Manifest this update:     Mon 27 Jul 2026 11:05:02 +0000
Manifest next update:     Mon 03 Aug 2026 11:05:02 +0000
Files and hashes:         1: Cpc9X6thK5jWWbIunuT0KK0mjxs.crl (hash: ad8wwFsrp4dMuD9waRijUHCHdVuTB4xDDYEIzK2Ajy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1745/F3D363D0450811F18B2E22CC91833773/Cpc9X6thK5jWWbIunuT0KK0mjxs.crl
                          rsync://rpki.apnic.net/member_repository/A91F1745/F3D363D0450811F18B2E22CC91833773/Cpc9X6thK5jWWbIunuT0KK0mjxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cpc9X6thK5jWWbIunuT0KK0mjxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1745, serialNumber=0A973D5FAB612B98D659B22E9EE4F428AD268F1B
        Validity
            Not Before: Jul 27 11:05:02 2026 GMT
            Not After : Aug  3 11:05:02 2026 GMT
        Subject: CN=6a673b5e-feea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:e0:90:39:b2:a6:8f:10:69:b8:a1:f5:48:
                    32:94:0f:40:ad:47:46:63:96:00:c1:0d:e8:e0:51:
                    68:03:8a:bb:f8:9a:a9:cd:b9:29:2d:85:25:6f:3d:
                    51:54:51:a3:70:83:72:4f:a0:50:12:fb:39:44:10:
                    28:14:5c:2a:31:00:a9:b9:66:e4:db:25:66:fc:73:
                    fc:ad:df:5e:56:b8:11:19:6f:9b:12:f0:0e:d6:6a:
                    53:92:48:7b:e5:39:1e:6e:eb:82:01:bc:04:38:d5:
                    c1:ad:7d:fc:2a:73:9f:1c:2a:8c:e6:fb:81:a3:8f:
                    60:f6:44:c6:38:2e:bf:2f:b1:fc:04:f3:7e:c6:5a:
                    4b:a9:f7:07:38:fb:43:48:b6:21:cf:87:fb:8a:25:
                    7c:5e:56:4e:9e:39:c7:9d:18:e9:71:2f:23:fe:49:
                    dc:77:75:28:ce:43:6d:ca:e5:58:66:11:a9:92:2c:
                    c9:e1:1d:14:e2:c3:64:69:d3:b0:45:2b:65:2a:90:
                    05:14:4e:3f:48:d6:f2:4b:a6:ac:71:fa:c3:fc:49:
                    3f:2d:00:5a:b4:56:99:d1:33:00:f2:fd:2a:30:53:
                    17:5e:88:ca:1c:cf:bd:e3:ef:83:99:2d:7f:57:39:
                    05:a7:07:58:a0:d5:3f:91:a2:f4:36:c0:8a:48:06:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:56:B1:05:3B:9B:80:57:33:A2:5A:1F:4D:87:45:39:78:BA:21:6C
            X509v3 Authority Key Identifier:
                keyid:0A:97:3D:5F:AB:61:2B:98:D6:59:B2:2E:9E:E4:F4:28:AD:26:8F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1745/F3D363D0450811F18B2E22CC91833773/Cpc9X6thK5jWWbIunuT0KK0mjxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cpc9X6thK5jWWbIunuT0KK0mjxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1745/F3D363D0450811F18B2E22CC91833773/Cpc9X6thK5jWWbIunuT0KK0mjxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:d4:29:1d:69:91:c9:70:e7:41:b2:c0:d3:ed:c8:7d:00:
         97:93:c9:b3:e4:f0:38:d3:8d:dd:a6:3e:41:49:62:10:a2:e1:
         a9:e3:bf:31:a3:a7:d4:b7:09:48:a8:d9:0b:53:09:3b:93:34:
         e1:65:d3:69:ea:c2:11:f6:ec:b7:b2:f3:05:11:d9:1e:27:9a:
         d8:71:5f:60:b2:5b:a9:e3:56:fe:9a:07:53:d2:a8:b1:5d:dd:
         de:7e:28:2f:8f:e1:9d:85:67:bb:49:64:9e:11:91:e6:c1:01:
         eb:96:17:ef:28:6d:c7:a0:7d:68:57:95:c3:d5:09:8e:99:f7:
         bc:18:f8:f3:51:08:5b:b7:f4:d1:ae:49:7e:6a:68:1f:b7:ab:
         91:16:8a:f9:59:ad:31:43:c5:23:d6:ec:15:0d:dc:a1:27:48:
         cf:87:af:24:73:28:3f:00:1f:08:48:05:d1:d8:9c:93:fe:a8:
         e2:eb:2a:36:7e:d2:67:98:c1:ea:d2:e3:1b:65:0f:ab:20:fd:
         a8:d6:9f:25:ad:ee:41:cf:f1:20:4f:d9:25:a6:ba:05:a6:fb:
         1a:64:69:c8:a1:93:42:4a:f7:9b:fb:b8:83:ba:2f:3d:63:14:
         33:3d:6c:3d:27:3f:d1:4d:6f:92:99:b8:df:25:9d:54:25:50:
         62:a9:07:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:08 2026 by rpki-client