Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
File:                     xL9bEU_BXXDIgNvBbowaMCo6LyE.mft (raw, json)
Hash identifier:          5h9Q5OSKOY0NwqcEeJc2sp/bK09OX+9pMowiupeHsNM=
Subject key identifier:   A5:70:3A:56:02:FF:3A:F0:A0:2D:D8:2B:AF:04:8A:A4:BF:D8:27:D7
Authority key identifier: C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21
Certificate issuer:       /CN=A9192920/serialNumber=C4BF5B114FC15D70C880DBC16E8C1A302A3A2F21
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
Manifest number:          08B6
Signing time:             Tue 18 Aug 2026 21:25:14 +0000
Manifest this update:     Tue 18 Aug 2026 21:25:14 +0000
Manifest next update:     Tue 25 Aug 2026 21:25:14 +0000
Files and hashes:         1: xL9bEU_BXXDIgNvBbowaMCo6LyE.crl (hash: ATNGmVZeSZVsSATT6mJl+kl7BMhwatHeNnL4Jo9ZAEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.crl
                          rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192920, serialNumber=C4BF5B114FC15D70C880DBC16E8C1A302A3A2F21
        Validity
            Not Before: Aug 18 21:25:14 2026 GMT
            Not After : Aug 25 21:25:14 2026 GMT
        Subject: CN=6a84cdba-2285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a6:22:b2:5d:18:43:5f:c2:3a:db:b4:36:4b:
                    d5:da:d5:cf:68:f5:dd:91:c6:97:97:23:40:d4:13:
                    4d:c8:d7:fd:2a:e9:a4:b9:84:2f:ea:a3:ae:0b:e6:
                    93:fd:d0:e5:d5:c5:48:67:24:39:91:a6:49:39:9f:
                    2a:ae:42:39:2a:13:cf:f5:e5:b1:28:65:60:38:49:
                    12:5a:b5:db:af:94:31:9c:e4:36:89:82:88:52:27:
                    59:0d:16:bc:7a:36:6b:3c:30:3e:86:61:4e:ee:b0:
                    2a:cb:3c:aa:7a:7b:62:32:77:c4:57:83:db:c7:c4:
                    34:a5:96:d3:5b:2a:e5:35:2c:df:77:97:0c:e9:24:
                    c0:e5:de:ba:07:2f:8e:c6:29:ee:4d:57:8f:39:98:
                    c5:bf:a4:fd:58:00:bc:6b:ef:d2:23:9c:30:0b:0a:
                    3c:d3:b9:a0:15:df:f1:e7:db:47:f2:33:d7:0d:50:
                    91:39:6a:fc:47:6b:ce:f0:38:c3:85:c9:8b:1a:57:
                    1a:95:50:ea:7d:a7:aa:32:a1:47:fc:b7:aa:11:7e:
                    bc:c2:8c:00:5c:ef:b0:3a:db:69:b8:f0:c3:5e:0b:
                    34:b6:31:bd:83:b7:7b:35:b2:1a:6a:e8:c5:14:00:
                    88:fe:bd:25:bf:4a:b1:4d:cc:64:c8:af:fe:ac:e2:
                    8f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:70:3A:56:02:FF:3A:F0:A0:2D:D8:2B:AF:04:8A:A4:BF:D8:27:D7
            X509v3 Authority Key Identifier:
                keyid:C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:92:23:ba:2e:44:e6:f8:cd:19:0e:cf:68:e2:28:05:a9:7a:
         7e:56:4a:bb:ad:fc:2f:4b:46:1e:0f:f6:ce:ec:a8:81:bf:39:
         b8:3d:9f:ab:e3:af:96:d5:14:a0:29:65:e6:ad:73:44:99:0c:
         41:5d:4c:1d:03:2f:12:92:b1:63:70:0c:c3:3b:d4:01:67:eb:
         fc:1c:d1:cc:6f:00:b3:a5:6b:26:9b:da:e5:19:a0:46:1a:20:
         38:a9:d4:5e:0c:bc:f4:73:f5:91:23:7c:ca:a7:a3:13:73:e1:
         10:31:9f:60:86:6b:16:9a:bd:5f:2c:26:a4:d0:dd:54:4f:75:
         6f:88:63:78:18:58:f3:77:b6:7f:43:0c:60:1a:69:00:1b:e1:
         8f:aa:68:8b:b9:89:f0:26:40:28:19:b6:b1:b8:78:ae:61:4f:
         42:3f:db:e2:e3:d6:d9:99:79:88:a4:ee:83:52:73:36:1a:1b:
         93:a7:f3:d6:30:51:79:79:de:04:5b:9e:20:73:ae:4f:a3:76:
         8b:7b:95:34:be:34:a4:c9:d8:9f:38:20:71:9f:12:8e:95:65:
         62:ed:26:38:92:c6:f7:4b:10:b0:10:54:f9:af:a9:47:c3:71:
         d3:cf:0f:f2:4f:a5:7b:47:86:e3:0a:58:95:46:d5:ff:5b:32:
         43:da:14:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:23 2026 by rpki-client