Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
File:                     -94EjDgE9v13dFfXTlx8bq-XMcc.mft (raw, json)
Hash identifier:          yTc4DaBRsIoiplEe1J2WrmqzigXSdfRJTQ4pq0z1FFY=
Subject key identifier:   8A:E8:0A:66:1C:79:CA:3A:BA:29:35:0D:4C:D3:71:C4:72:6F:97:E9
Authority key identifier: FB:DE:04:8C:38:04:F6:FD:77:74:57:D7:4E:5C:7C:6E:AF:97:31:C7
Certificate issuer:       /CN=A91F7113/serialNumber=FBDE048C3804F6FD777457D74E5C7C6EAF9731C7
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
Manifest number:          32
Signing time:             Mon 21 Sep 2026 08:39:09 +0000
Manifest this update:     Mon 21 Sep 2026 08:39:09 +0000
Manifest next update:     Mon 28 Sep 2026 08:39:09 +0000
Files and hashes:         1: -94EjDgE9v13dFfXTlx8bq-XMcc.crl (hash: 6cOIQ98BdYNnFCUVSPLzEG+XzH0cvpqscQKSvzSykJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.crl
                          rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7113, serialNumber=FBDE048C3804F6FD777457D74E5C7C6EAF9731C7
        Validity
            Not Before: Sep 21 08:39:09 2026 GMT
            Not After : Sep 28 08:39:09 2026 GMT
        Subject: CN=6ab0ed2d-2820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:97:fc:00:4f:86:7d:eb:7b:93:1d:48:34:
                    d9:ff:46:42:c3:f9:80:c5:bf:65:1a:b2:be:1e:0c:
                    87:b5:aa:74:38:f2:83:5f:19:b0:6b:eb:0f:81:cb:
                    30:c3:5c:31:4a:01:e5:6e:89:17:3c:ab:78:5c:8b:
                    6e:ce:f2:cb:78:c9:04:23:69:8e:7a:46:dc:6a:dd:
                    70:00:db:82:58:7a:6e:d0:ec:b7:77:37:46:1c:83:
                    fd:12:a7:77:57:0b:91:b1:11:a1:d5:6c:6e:c8:05:
                    7e:18:61:8b:fb:26:0d:1c:c3:fa:98:1a:c9:fb:09:
                    99:4c:dc:e5:8c:81:67:ea:4c:c4:40:50:c7:fb:68:
                    86:29:11:3d:10:0d:24:64:b9:ec:c4:71:30:f3:91:
                    a2:2a:6f:31:38:a9:ca:1a:e5:93:c4:14:1c:e8:98:
                    4a:7d:2e:91:05:82:82:0d:26:80:c4:9c:78:e5:01:
                    bb:d2:a0:6d:bc:73:51:e9:bf:7f:26:2e:6d:45:5c:
                    51:5e:08:4e:07:dc:4c:b7:c4:08:c2:2a:42:59:2c:
                    e2:4b:9f:d2:60:aa:7f:41:a7:34:2a:e6:c4:86:1a:
                    82:a9:d6:68:4a:6d:2e:3a:d4:5a:12:db:d2:b6:78:
                    45:03:4f:b6:e6:0b:1d:8f:20:11:34:cc:d0:57:61:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E8:0A:66:1C:79:CA:3A:BA:29:35:0D:4C:D3:71:C4:72:6F:97:E9
            X509v3 Authority Key Identifier:
                keyid:FB:DE:04:8C:38:04:F6:FD:77:74:57:D7:4E:5C:7C:6E:AF:97:31:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e4:40:d0:26:52:e4:15:3d:c9:35:b3:d9:40:b8:55:4a:0a:
         82:e7:57:ec:bf:94:eb:82:83:8d:be:c3:6c:27:e6:4c:00:e5:
         4c:ee:c8:bc:82:bc:e0:34:33:44:4c:c4:ef:df:b1:b4:16:77:
         e3:f8:fc:a4:63:08:24:ea:af:6e:54:59:7e:53:48:1d:92:8b:
         8d:8d:0f:89:ad:ff:77:4b:90:bd:ec:06:ae:bf:2e:77:e5:81:
         05:7c:c3:ae:eb:66:4d:8b:42:c7:b4:18:26:ba:de:2c:69:ca:
         dd:56:10:57:4f:11:0b:77:0d:9a:4e:42:8c:8e:7e:13:21:53:
         ef:65:be:64:66:d6:3e:02:b2:73:cd:8a:5f:01:24:86:72:5f:
         c0:52:d3:30:11:6b:3a:ee:26:21:b3:81:19:ef:db:fd:47:f3:
         ac:fc:05:9b:c8:44:10:65:8a:65:0b:fd:a1:29:cc:b2:e4:08:
         7d:c6:00:c1:2a:01:33:69:33:dd:13:44:5b:db:9d:c7:e2:f6:
         0a:b2:12:e1:fe:05:04:1a:66:7e:68:d8:9b:3e:82:cb:f6:8d:
         b7:60:42:a3:e8:be:65:1e:b6:42:4f:be:34:ba:5f:0f:6c:93:
         ef:b6:d4:19:68:e8:56:f0:33:33:69:56:cf:1c:ff:07:c2:fb:
         4e:ea:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:11:24 2026 by rpki-client