Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
File:                     l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft (raw, json)
Hash identifier:          RZ9CvpIvdmB/TATMEzle0+7ZhNv3O2qGXrK+JaMyTRE=
Subject key identifier:   50:4B:50:AC:92:72:B0:BB:62:98:09:E3:C3:03:DB:46:79:03:86:B4
Authority key identifier: 97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8
Certificate issuer:       /CN=A91161EB/serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
Manifest number:          43
Signing time:             Wed 19 Aug 2026 09:10:09 +0000
Manifest this update:     Wed 19 Aug 2026 09:10:08 +0000
Manifest next update:     Wed 26 Aug 2026 09:10:08 +0000
Files and hashes:         1: l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl (hash: ced46spMJlUV8qgj/M0GfKNRqN76lYhwS+HMc7jC6js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl
                          rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91161EB, serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
        Validity
            Not Before: Aug 19 09:10:08 2026 GMT
            Not After : Aug 26 09:10:08 2026 GMT
        Subject: CN=6a8572f1-4ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:3c:ec:4c:2f:eb:9e:a8:78:35:6b:b3:a5:
                    ac:5b:e4:1d:67:8f:39:fb:d2:4f:ef:cb:34:fa:2c:
                    ef:a6:62:83:6c:8c:58:8f:ed:c5:ec:81:dd:79:cc:
                    50:6a:c4:b3:1a:2f:9b:7f:cb:ba:6a:89:8d:e7:50:
                    2d:e9:bd:24:0e:b4:da:2c:89:89:9d:19:b4:70:9f:
                    e9:86:80:0c:ed:fa:5e:a7:57:fe:d4:93:b0:db:0a:
                    72:ff:6d:d8:b6:b9:72:b5:41:a8:02:7f:50:4a:20:
                    16:bc:3d:26:77:e6:02:58:57:92:e3:15:b9:85:07:
                    46:5f:33:d8:c3:1b:de:e5:5e:76:fa:d7:de:5c:57:
                    fe:e8:40:18:4d:c4:24:08:d2:28:4e:0a:6d:9d:e8:
                    77:8d:fd:50:92:f0:d0:73:8e:f8:02:9e:02:b9:20:
                    fb:94:92:5f:46:c8:9a:8c:bf:6c:17:4e:49:b2:ed:
                    45:98:2a:ea:63:4f:50:96:7b:9d:f7:7e:d9:2d:be:
                    7d:3e:12:49:1b:97:d9:c8:c4:51:5e:1c:28:4b:37:
                    e8:0c:37:0f:98:81:0c:3b:f5:9a:ed:8f:71:26:68:
                    a2:ad:0f:7c:e6:a3:65:28:ec:b4:80:4c:dd:fb:75:
                    da:d0:ff:16:aa:83:e2:4f:4d:e9:ee:7d:93:89:dc:
                    6a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:50:AC:92:72:B0:BB:62:98:09:E3:C3:03:DB:46:79:03:86:B4
            X509v3 Authority Key Identifier:
                keyid:97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:33:20:d1:1c:82:89:fc:d4:98:10:e5:05:a8:a2:7b:fc:3b:
         60:45:30:2c:65:fb:9c:ac:13:74:d2:a3:42:53:d5:83:c9:07:
         61:67:95:8e:7c:24:24:31:cd:ee:56:8b:17:d2:d3:72:0d:e9:
         58:f1:d2:fa:05:01:fe:37:de:22:81:8d:0a:b9:e5:2e:ca:0f:
         13:ee:98:5e:83:7b:ab:05:a4:2a:b1:18:6f:d2:5f:84:0d:11:
         82:be:8e:72:0e:c7:1a:d3:27:06:bb:fd:fc:53:0f:9e:ef:09:
         7e:5c:fe:dd:1b:92:e2:8d:5c:89:c8:f8:f5:4c:37:21:82:38:
         47:46:d9:4c:fb:e4:19:d3:57:0d:56:31:82:d5:b1:80:76:cf:
         f3:82:3e:aa:7a:ce:7a:5a:77:b1:b3:57:fe:d9:93:56:43:5e:
         1a:9a:7f:a7:fd:c8:2b:a7:4c:ed:b5:af:e1:fd:20:c0:4f:9d:
         ba:8d:1d:73:b2:4e:f6:c2:b3:17:68:38:fa:95:c1:8f:f0:fa:
         4a:da:18:c7:32:e1:88:07:9b:67:a0:d7:63:44:ae:63:21:c2:
         ff:7b:8f:95:ef:84:78:d4:e4:83:4e:75:10:fc:c3:84:d1:0d:
         7d:b8:4a:4f:cb:be:5e:5e:b7:26:7c:d2:31:8f:8d:e5:75:c5:
         55:e6:ef:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:30 2026 by rpki-client