Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
File:                     d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json)
Hash identifier:          I9gllPoWm3YGEuMTOa191ibfG6y2PEN1wE9BdGzuBbo=
Subject key identifier:   1B:62:C2:C9:F2:16:D6:C4:8D:04:8D:B5:10:C0:BE:41:6A:5B:D6:66
Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF
Certificate issuer:       /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
Certificate serial:       3569
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
Manifest number:          3569
Signing time:             Tue 18 Aug 2026 15:06:25 +0000
Manifest this update:     Tue 18 Aug 2026 15:06:25 +0000
Manifest next update:     Tue 25 Aug 2026 15:06:25 +0000
Files and hashes:         1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: FeRb75ZyeEa/ePDlQ+L7sz9qsnxFEpnr++jltpUudyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl
                          rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13673 (0x3569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
        Validity
            Not Before: Aug 18 15:06:25 2026 GMT
            Not After : Aug 25 15:06:25 2026 GMT
        Subject: CN=6a8474f1-77be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:23:58:5c:ac:76:11:62:6d:55:7f:ac:21:
                    b7:7b:fb:f7:82:af:bf:e9:4e:62:b9:f8:4d:f7:bc:
                    59:3c:f2:0f:91:9d:bf:4c:2e:a1:06:0e:ab:de:8e:
                    31:23:e9:b3:93:8e:be:fe:fa:ab:6e:26:6e:24:b9:
                    0a:4e:50:86:ad:85:28:af:f5:d9:4b:e3:f1:c7:5d:
                    c8:fb:4b:15:be:ef:8c:a1:8a:44:96:ad:72:db:ce:
                    15:d1:bf:6e:9a:2b:b5:68:d9:b7:0b:ed:85:a2:a0:
                    e9:a3:ce:81:1e:e7:3e:f1:20:0a:c5:23:22:5e:37:
                    56:1a:2f:73:e2:35:b0:3d:91:f8:9d:07:21:70:7e:
                    54:60:ea:a1:f3:f3:2f:97:c3:8d:12:d6:6c:72:b4:
                    a9:5b:b9:20:57:64:ac:dc:2f:bf:dd:04:70:a5:e4:
                    a0:65:83:6f:23:f9:e5:9b:3c:30:be:09:5a:46:2f:
                    1e:6b:a3:90:95:47:81:dc:c6:8b:8a:60:b6:2f:3b:
                    ed:e7:37:51:e4:5d:c6:37:c9:07:9c:24:22:18:a8:
                    60:8f:4b:7d:fa:7e:27:60:53:24:9f:a7:cf:0c:c8:
                    4b:7d:a1:40:86:5b:01:20:1b:54:03:3a:cb:d1:c1:
                    3c:73:df:fc:6f:31:bb:44:49:0a:6f:e5:94:de:d2:
                    43:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:62:C2:C9:F2:16:D6:C4:8D:04:8D:B5:10:C0:BE:41:6A:5B:D6:66
            X509v3 Authority Key Identifier:
                keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4e:8a:5a:63:8e:43:dd:10:3a:3a:0e:cc:67:91:d4:cf:dd:
         bc:dc:eb:ae:bd:fa:68:8b:9c:34:80:33:7c:61:c9:22:ac:37:
         c1:07:0d:96:28:8a:84:c9:e9:12:cc:69:57:d9:8b:e7:fe:5c:
         e5:bf:65:05:51:bb:94:55:94:ac:55:92:4d:02:42:37:33:88:
         06:8e:9d:46:05:32:b0:5b:c9:5a:ff:13:3e:ab:31:73:59:d4:
         8c:45:e8:82:d1:d2:90:4e:4c:93:c6:7d:00:bd:8d:1b:5f:0d:
         f6:ee:25:db:61:87:a4:00:c5:a2:14:ae:fa:11:07:d9:90:40:
         86:fd:20:5c:dc:5b:ed:e9:1d:5f:9b:ec:b6:e9:a0:9d:f7:13:
         89:0b:40:0c:73:58:40:1f:2a:02:95:71:a1:e9:9d:4d:83:d5:
         da:40:ed:62:2d:72:45:13:cd:46:dd:53:a2:f2:dc:90:80:13:
         4a:e7:34:e7:72:f5:b9:14:93:c2:31:a7:d2:22:a4:12:59:c5:
         24:b3:9c:00:86:a6:1b:98:52:51:69:ff:fc:e2:d6:f7:4a:ae:
         ec:38:39:f2:7b:52:ea:48:f3:ec:45:68:27:a0:07:cc:31:e8:
         2c:b9:c1:a8:25:03:f0:1c:85:5b:3f:bc:5a:28:55:51:bc:78:
         78:39:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:27:58 2026 by rpki-client