Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
File:                     CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft (raw, json)
Hash identifier:          hnkj6rrZlbsp3Mro7A24zQHZGg5ivZZGIqTYvu5RHSA=
Subject key identifier:   33:F8:50:FB:EA:5F:8B:B2:91:5B:FE:A3:52:6F:AC:55:0B:B5:FE:87
Authority key identifier: 0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91
Certificate issuer:       /CN=A91201F1/serialNumber=0B1412EF126BFD8F08FD84A2F6024C806ADB1791
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
Manifest number:          7E
Signing time:             Sat 03 Oct 2026 08:26:53 +0000
Manifest this update:     Sat 03 Oct 2026 08:26:52 +0000
Manifest next update:     Sat 10 Oct 2026 08:26:52 +0000
Files and hashes:         1: CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl (hash: DtatIA3Hum5sUyWz4ukLDnvlWRhSadkMHqYfKgLSw5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl
                          rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91201F1, serialNumber=0B1412EF126BFD8F08FD84A2F6024C806ADB1791
        Validity
            Not Before: Oct  3 08:26:52 2026 GMT
            Not After : Oct 10 08:26:52 2026 GMT
        Subject: CN=6ac0bc4c-a762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:20:6b:5f:33:d7:37:63:1e:0e:fb:14:bb:
                    03:6c:b0:65:28:63:ae:62:ba:d4:6c:5e:9a:e6:4a:
                    af:d8:ba:ea:69:88:f1:f6:67:f2:18:7c:66:53:14:
                    14:7a:ca:ea:cb:e1:56:12:2a:05:4d:7d:81:c8:50:
                    b3:57:aa:71:3b:5e:e8:a2:70:40:77:50:25:c7:8c:
                    1c:59:c4:6f:0f:af:f2:d8:de:38:e9:87:9f:4d:4d:
                    3b:ab:83:3b:6e:7e:f1:fe:5e:54:66:0c:15:66:f0:
                    0c:c8:f6:81:5c:6c:47:bc:2f:0a:d0:d2:c6:27:d4:
                    59:04:62:8e:7b:14:89:d6:b7:ef:b0:1d:97:ed:25:
                    e3:bd:98:76:de:d1:6b:84:69:3e:00:5a:46:ac:c1:
                    44:e2:3c:60:4c:14:99:b3:53:5e:65:d7:ee:16:d7:
                    4e:9c:d4:69:3d:12:76:fd:3d:5f:f6:20:7a:0b:08:
                    98:ca:fe:b2:69:28:f8:d6:8b:30:97:79:57:77:14:
                    2c:65:3c:bb:60:11:5b:cd:2c:b5:b8:d6:79:1c:f6:
                    73:4f:d4:06:99:f0:ee:e3:b1:d8:aa:47:76:f0:96:
                    e0:d5:71:67:db:a0:4e:b4:fb:05:ae:52:dd:20:81:
                    e4:29:93:43:3d:f3:7c:95:17:88:7e:3e:40:37:8e:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F8:50:FB:EA:5F:8B:B2:91:5B:FE:A3:52:6F:AC:55:0B:B5:FE:87
            X509v3 Authority Key Identifier:
                keyid:0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:bb:c1:f1:60:35:d0:77:71:f6:71:fb:7d:fd:5a:7d:bd:ad:
         2e:9e:0b:33:fe:e1:17:af:ef:f6:18:e4:53:90:e0:fb:72:fa:
         56:d9:31:81:90:09:c5:41:96:3e:34:61:28:4e:73:6e:64:bd:
         ad:35:56:81:40:47:45:9f:7d:bc:bc:36:2a:a2:da:78:de:ba:
         39:19:15:3f:a8:fe:19:23:e4:23:9a:d0:1f:32:0a:3a:f1:e4:
         7f:a1:49:1f:63:1e:19:91:4b:e7:9a:37:aa:b2:92:f8:db:6c:
         49:b3:a3:46:b3:25:c1:f3:69:72:8c:1f:9f:05:ac:8a:90:ec:
         b6:76:b4:f1:9a:b0:40:97:6c:31:f5:37:71:49:8e:da:e9:1e:
         65:81:33:56:eb:11:cf:b2:ab:43:d2:46:62:9c:fd:30:57:01:
         4f:7f:a2:b3:5e:39:79:6e:20:9f:4c:02:08:ff:91:0c:29:cf:
         b3:e4:9a:6a:74:a3:bd:22:ef:15:a7:42:94:6a:7f:9a:81:dc:
         42:bd:4c:02:16:0e:d2:d8:1d:76:7f:b7:bd:46:e1:ed:a4:4c:
         1a:0b:51:76:c7:d2:1d:24:ab:21:6b:73:c2:cf:6e:04:70:4a:
         9b:6b:d8:ff:39:cd:a5:1d:1e:4d:4e:c9:a3:9d:01:3c:be:57:
         cf:f6:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:19:10 2026 by rpki-client