Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft
File:                     g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json)
Hash identifier:          2XhyOI7TO/RZEfiudfTeHqJ7JmLwOjyyIXveLN85nDM=
Subject key identifier:   50:34:E5:12:1A:D0:A1:94:E8:E5:26:FE:52:FE:30:3F:C8:A9:02:76
Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E
Certificate issuer:       /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E
Certificate serial:       0BAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft
Manifest number:          0E11
Signing time:             Tue 18 Aug 2026 19:21:29 +0000
Manifest this update:     Tue 18 Aug 2026 19:21:28 +0000
Manifest next update:     Tue 25 Aug 2026 19:21:28 +0000
Files and hashes:         1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: uuvGcXkIEhu7lHkeG2fcj1CT8LbsCtGXN+ZJ34oJmz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl
                          rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2990 (0xbae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E
        Validity
            Not Before: Aug 18 19:21:28 2026 GMT
            Not After : Aug 25 19:21:28 2026 GMT
        Subject: CN=6a84b0b8-9d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bf:1c:e3:cf:75:5f:ab:a5:c6:d8:d1:e8:17:
                    62:93:44:7c:e2:70:5f:2a:d1:a3:fb:4d:8a:5e:cf:
                    a7:91:71:23:d1:63:9e:ce:06:18:1c:78:b4:69:a1:
                    4c:92:dd:69:7b:2c:96:62:8e:2f:9a:4b:ef:9e:56:
                    86:b1:8c:19:82:85:d7:4e:39:44:f1:2b:7c:3e:5b:
                    f4:f0:c2:5f:94:14:2f:b8:19:73:78:a8:89:40:0e:
                    51:da:78:84:eb:f5:04:9f:21:aa:aa:b0:a8:ad:e3:
                    6a:a9:39:70:39:3a:4f:2e:79:76:2a:aa:9a:9d:ad:
                    50:08:fc:40:27:bc:44:d5:37:52:1d:1a:fb:21:3f:
                    e5:bb:c4:a6:a3:6e:ee:4f:bb:24:c0:1c:61:70:cb:
                    6e:c1:ea:b4:fe:be:36:e2:78:1a:e5:84:53:ca:08:
                    d4:a9:b5:94:31:a9:dc:d9:3f:fd:59:22:e8:93:60:
                    d1:e8:39:e7:30:93:f2:e3:aa:06:62:ae:56:c4:07:
                    b8:62:9d:45:37:71:2f:42:4c:07:e4:19:11:4d:53:
                    ef:2a:e9:ac:bb:b3:70:ba:94:55:b0:32:60:b0:d2:
                    f3:a9:ec:c1:07:af:fc:77:91:24:54:0c:3f:b6:72:
                    6e:74:ef:a4:43:06:7f:7e:4c:3e:8e:1b:37:98:63:
                    db:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:34:E5:12:1A:D0:A1:94:E8:E5:26:FE:52:FE:30:3F:C8:A9:02:76
            X509v3 Authority Key Identifier:
                keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:cd:cc:8a:36:fc:09:fa:bd:48:e1:85:9a:57:aa:7b:d5:14:
         34:33:61:c8:f3:25:eb:80:16:96:3e:5a:ee:e2:7b:b9:b9:ee:
         c1:d2:a3:71:03:07:b9:42:20:61:08:be:c3:46:69:cb:4a:b9:
         de:de:82:13:f8:96:4d:94:ef:9a:93:62:46:4e:54:70:41:de:
         2d:aa:14:2c:bc:7e:f7:b5:8b:b1:77:76:f9:c7:ad:e3:02:59:
         dd:2a:0a:9d:a0:4d:36:a0:00:a4:4f:44:9e:cd:f5:53:5c:7e:
         fd:2c:7d:4d:f9:36:47:f5:a4:4d:cb:6f:99:fd:a9:83:8f:a4:
         2e:26:a6:d1:41:47:47:be:d8:cb:fd:a9:37:0a:f2:08:cc:94:
         c6:0d:c5:98:04:f7:f3:2f:ae:68:f3:6e:5a:cf:58:89:cc:aa:
         e9:c6:63:d2:39:09:4b:23:9f:fe:47:94:11:39:4b:4f:60:22:
         ac:d0:cb:9e:ac:0b:5e:22:d2:a6:d9:20:43:80:d6:98:a3:1e:
         ef:d5:96:be:79:27:e8:00:61:7f:14:e9:ce:41:95:f4:dd:74:
         55:99:61:37:e3:d6:c9:0f:d2:9c:08:09:47:1b:8d:11:16:8f:
         fa:d6:63:83:3c:cb:f3:37:26:c2:6b:eb:ec:ac:67:a7:9c:fc:
         07:35:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:04 2026 by rpki-client