Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
File:                     lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json)
Hash identifier:          Ehqp3D96Fzx6A7pDXxZQgle/2v4F5fFL4ELO5PMqMCs=
Subject key identifier:   6C:46:E2:98:7F:EA:2A:39:70:AD:27:5D:7B:1C:DC:36:B2:33:F2:9F
Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
Certificate issuer:       /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
Manifest number:          0115
Signing time:             Tue 21 Jul 2026 07:31:32 +0000
Manifest this update:     Tue 21 Jul 2026 07:31:31 +0000
Manifest next update:     Tue 28 Jul 2026 07:31:31 +0000
Files and hashes:         1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: K4EyRpDi3UUNvijTJo5XIgJH2IKdo3FBD/GOKMsbeNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 07:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
        Validity
            Not Before: Jul 21 07:31:31 2026 GMT
            Not After : Jul 28 07:31:31 2026 GMT
        Subject: CN=6a5f2054-defc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:95:3d:c0:61:c9:52:94:3f:f0:ab:2c:16:
                    05:96:f5:b2:6b:dc:36:b5:de:18:ee:96:61:eb:bc:
                    37:3c:06:2f:e4:dd:dd:2c:9c:1b:9b:57:3a:b2:4e:
                    a2:c3:16:6b:55:b0:c5:06:5e:b0:12:03:e1:8b:67:
                    99:9e:63:29:c4:64:56:99:a0:ed:fc:f7:80:df:2d:
                    9c:7e:1d:a1:83:64:61:f3:08:d7:08:61:94:1e:4c:
                    a6:e9:76:f5:a7:18:74:29:f3:d4:aa:49:ae:b7:fb:
                    ea:f9:bf:78:f3:30:0d:c8:e1:d5:75:74:46:56:b9:
                    b8:fe:df:7c:cb:05:82:a8:3c:40:55:90:18:d3:a6:
                    a3:20:b9:55:00:20:b2:c6:4d:2e:0d:e7:db:f0:33:
                    9a:10:09:03:93:5e:6f:c8:a6:d8:a3:7d:3b:84:e4:
                    bd:4e:ed:ce:cd:27:b7:cc:86:4e:17:4b:df:cd:7e:
                    d3:87:a6:3f:a4:64:10:f9:c6:90:3d:2e:68:9c:f5:
                    28:35:e3:25:56:7f:82:4f:00:36:1b:d0:b0:2b:90:
                    46:00:18:85:c6:86:95:8d:ec:0d:de:47:7a:a1:45:
                    42:94:02:85:1e:34:0b:80:5c:c9:19:d6:e0:08:85:
                    c9:97:6f:c4:53:19:8e:61:aa:58:da:cb:a1:b2:e6:
                    3f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:46:E2:98:7F:EA:2A:39:70:AD:27:5D:7B:1C:DC:36:B2:33:F2:9F
            X509v3 Authority Key Identifier:
                keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:32:a8:45:40:58:0c:79:2c:cb:07:54:2d:a5:b8:4f:b4:a1:
         59:00:d5:00:d0:9c:ed:c6:6c:12:e0:02:81:d1:7d:ed:37:8d:
         a4:07:03:de:f7:6b:ac:f4:f2:b1:f7:a3:c2:db:9b:64:ee:48:
         dc:ee:71:c2:d7:c4:82:fa:83:e6:15:00:84:40:3e:9e:e1:15:
         39:50:d8:f5:80:eb:bf:24:67:e1:01:71:97:fc:9f:fe:e1:3e:
         ee:65:90:6e:9a:2e:4d:fc:dd:53:45:ea:78:7a:86:32:fe:6c:
         e4:66:4e:e1:4f:d8:77:8a:25:e2:55:fd:2a:b4:b1:63:22:ed:
         00:a6:45:81:e7:fe:ac:71:e3:8a:ea:5c:44:86:c4:b6:52:b5:
         05:b9:80:83:47:cb:71:0b:98:8f:33:1d:22:b9:97:f5:c8:f7:
         46:d3:d5:72:b2:d8:0c:b8:87:d1:13:12:3f:7e:eb:8f:77:83:
         1b:53:9a:26:fa:86:a5:ca:07:4b:74:64:1f:17:25:81:23:c2:
         53:13:7e:28:77:42:a7:7d:f8:5e:1b:bc:f4:67:49:6f:d3:aa:
         12:dc:ae:1c:b9:84:87:b8:97:52:f7:5b:b2:0e:71:46:f4:9b:
         7b:aa:0f:da:20:dc:95:42:e4:5e:88:e3:05:48:65:93:64:35:
         cd:4e:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:57:23 2026 by rpki-client