Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
File:                     dDFnWL6MokPEalI5oF7P8EkIOTc.mft (raw, json)
Hash identifier:          vtIVWiiKXXVj84dvarjAiV8rKHMuuqVEifJ3UrPXt8w=
Subject key identifier:   23:41:D6:61:3B:09:E7:EC:9D:8A:28:99:D3:04:2D:41:27:2E:DD:09
Authority key identifier: 74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37
Certificate issuer:       /CN=A91968B6/serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
Manifest number:          56
Signing time:             Fri 03 Jul 2026 09:07:53 +0000
Manifest this update:     Fri 03 Jul 2026 09:07:52 +0000
Manifest next update:     Fri 10 Jul 2026 09:07:52 +0000
Files and hashes:         1: dDFnWL6MokPEalI5oF7P8EkIOTc.crl (hash: BM/AVUcl4FRQzpZLo5XTO1j8AlaItu01cN0pe5DXyAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl
                          rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 Jul 2026 09:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91968B6, serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
        Validity
            Not Before: Jul  3 09:07:52 2026 GMT
            Not After : Jul 10 09:07:52 2026 GMT
        Subject: CN=6a477be8-a00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:60:79:5e:a8:1f:3e:0c:ac:36:a7:ae:b9:
                    d7:55:f5:af:6c:3b:76:c7:44:83:70:78:1c:9f:6f:
                    c6:49:53:4c:f0:be:19:e1:a2:92:3f:bd:2c:6f:fc:
                    02:5f:7a:c8:25:ee:80:48:74:e8:74:b4:5c:54:84:
                    3e:71:a5:0a:73:af:0f:4d:55:bd:1f:6f:1d:f3:08:
                    85:fd:6a:17:84:20:c3:01:f9:e3:9a:1e:11:66:be:
                    ad:64:82:eb:c3:d8:8e:ba:47:bc:03:4d:05:73:13:
                    8e:5d:6f:7f:54:89:26:6f:30:c0:6c:19:8e:05:3b:
                    a6:a1:b0:36:13:55:65:b8:21:a0:e0:88:86:d7:c0:
                    66:8e:c5:17:c1:c4:c9:f0:5a:72:95:5a:d3:24:2e:
                    6f:e3:11:cf:30:2e:4f:6b:2d:df:73:6d:85:14:ef:
                    7b:a9:48:fb:75:e4:e0:00:4a:c2:78:50:bb:82:ff:
                    ca:64:55:ec:86:49:2e:dc:67:b3:aa:25:41:25:65:
                    88:0d:e0:9d:c7:b7:12:c3:50:5c:2d:73:12:bf:48:
                    38:a9:f7:3a:09:16:37:89:6a:a7:a7:7f:d6:3b:fe:
                    c4:02:e4:52:17:b8:de:5e:be:f4:6a:02:fe:a5:14:
                    b3:be:76:65:ee:4c:ac:4d:87:c1:e8:98:a2:fe:8a:
                    98:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:41:D6:61:3B:09:E7:EC:9D:8A:28:99:D3:04:2D:41:27:2E:DD:09
            X509v3 Authority Key Identifier:
                keyid:74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:b4:b9:36:1c:6a:da:2a:20:a3:03:2b:0a:ed:0d:2b:4c:
         7a:a8:aa:c9:66:2a:c1:ed:51:b4:3d:ae:63:23:84:80:b2:01:
         2e:6d:b7:38:4f:23:66:96:2d:c8:38:ea:8f:7d:ed:0c:7b:9e:
         6a:e9:83:4a:8b:35:c7:14:f4:40:04:22:a1:99:92:13:75:c7:
         e2:4a:d6:15:d3:31:02:be:9e:e2:0e:bf:a6:f8:30:86:af:bf:
         54:7b:1a:73:b3:b2:2b:29:00:ab:0f:30:90:52:a6:9c:4a:80:
         05:78:02:8e:b9:51:e7:fc:e1:c5:13:ed:c4:b5:9f:cf:b9:ac:
         b7:3d:50:80:a3:52:dd:89:35:9c:3a:1f:80:f8:20:4e:60:aa:
         de:c7:1d:63:97:96:cd:99:20:40:93:01:40:6b:4a:5b:d4:0e:
         9d:54:d4:c2:ad:33:9d:d4:d8:f7:62:19:a4:a9:4b:87:75:23:
         50:f8:df:94:dc:42:ae:a0:aa:4d:86:1d:05:ff:c6:4e:09:df:
         55:bb:48:e4:fd:76:f0:6d:0c:3f:0b:72:1f:82:07:40:81:2c:
         7f:63:22:b9:1d:6c:8c:db:71:be:55:32:21:70:b9:30:d3:44:
         2c:32:3e:55:dd:ff:09:91:76:16:c1:ed:0d:e0:c3:7d:b6:72:
         93:ed:79:f2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NjhCNjExMC8GA1UEBRMoNzQzMTY3NThCRThDQTI0M0M0NkE1MjM5QTA1RUNGRjA0
OTA4MzkzNzAeFw0yNjA3MDMwOTA3NTJaFw0yNjA3MTAwOTA3NTJaMBgxFjAUBgNV
BAMTDTZhNDc3YmU4LWEwMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5EWB5XqgfPgysNqeuuddV9a9sO3bHRINweByfb8ZJU0zwvhnhopI/vSxv/AJf
esgl7oBIdOh0tFxUhD5xpQpzrw9NVb0fbx3zCIX9aheEIMMB+eOaHhFmvq1kguvD
2I66R7wDTQVzE45db39UiSZvMMBsGY4FO6ahsDYTVWW4IaDgiIbXwGaOxRfBxMnw
WnKVWtMkLm/jEc8wLk9rLd9zbYUU73upSPt15OAASsJ4ULuC/8pkVeyGSS7cZ7Oq
JUElZYgN4J3HtxLDUFwtcxK/SDip9zoJFjeJaqenf9Y7/sQC5FIXuN5evvRqAv6l
FLO+dmXuTKxNh8HomKL+iphDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI0HWYTsJ
5+ydiiiZ0wQtQScu3QkwHwYDVR0jBBgwFoAUdDFnWL6MokPEalI5oF7P8EkIOTcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2OEI2Lzk0MzlCOUFFRkIy
NzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQRWFsSTVvRjdQOEVrSU9U
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZERGbldMNk1va1BFYWxJNW9GN1A4RWtJT1RjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2
OEI2Lzk0MzlCOUFFRkIyNzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQ
RWFsSTVvRjdQOEVrSU9UYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBFmrS5Nhxq2iogowMrCu0NK0x6qKrJZirB7VG0Pa5jI4SAsgEubbc4TyNmli3I
OOqPfe0Me55q6YNKizXHFPRABCKhmZITdcfiStYV0zECvp7iDr+m+DCGr79Uexpz
s7IrKQCrDzCQUqacSoAFeAKOuVHn/OHFE+3EtZ/Puay3PVCAo1LdiTWcOh+A+CBO
YKrexx1jl5bNmSBAkwFAa0pb1A6dVNTCrTOd1Nj3YhmkqUuHdSNQ+N+U3EKuoKpN
hh0F/8ZOCd9Vu0jk/XbwbQw/C3IfggdAgSx/YyK5HWyM23G+VTIhcLkw00QsMj5V
3f8JkXYWwe0N4MN9tnKT7Xny
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:54:39 2026 by rpki-client