Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
File:                     O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft (raw, json)
Hash identifier:          ropGcnxLeKvJ6p5VT2EfTI7hXtPlAHbOZ20+qhtW/Lo=
Subject key identifier:   54:AC:AF:B2:4C:80:0B:79:8D:31:8A:7B:A3:7A:06:18:1D:08:B5:F2
Authority key identifier: 3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7
Certificate issuer:       /CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
Manifest number:          01C4
Signing time:             Fri 17 Jul 2026 02:47:33 +0000
Manifest this update:     Fri 17 Jul 2026 02:47:33 +0000
Manifest next update:     Fri 24 Jul 2026 02:47:33 +0000
Files and hashes:         1: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl (hash: rRB9lODolv1D1YaefZ2meK1srPLAG1YqSd7Aje3VAF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl
                          rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 02:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB92D, serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
        Validity
            Not Before: Jul 17 02:47:33 2026 GMT
            Not After : Jul 24 02:47:33 2026 GMT
        Subject: CN=6a5997c5-4c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:70:b2:24:bd:96:fc:63:0a:71:af:f6:e2:
                    89:1d:3c:dc:63:d5:09:11:09:83:43:0b:6c:d5:4f:
                    83:64:e4:62:1a:94:49:e8:13:cb:3f:1b:97:09:68:
                    60:6e:c1:22:e4:04:de:9e:88:2e:7b:d7:09:e6:bc:
                    34:5e:66:c4:7f:fb:c0:2b:80:d0:51:11:58:af:d6:
                    3d:86:12:d9:b5:55:a5:28:00:a8:16:88:70:c8:5f:
                    d8:53:8f:c5:b7:99:36:a1:19:a8:40:cc:df:2c:bf:
                    d1:55:21:62:03:94:f5:4c:65:01:ed:4a:3c:ea:0f:
                    29:4c:6f:da:36:0f:7e:81:ac:08:c2:bd:c7:5c:cd:
                    ed:e6:77:86:1d:b1:cf:29:10:d0:d8:c2:c5:18:e6:
                    8c:ae:2c:a7:ab:e0:01:43:0f:1a:9a:c9:71:be:ba:
                    33:3b:7b:3a:b9:ea:e8:40:dc:02:b5:ab:62:80:5d:
                    a6:23:67:fa:5c:3d:1e:71:d5:bf:98:c6:3d:7b:4a:
                    0d:46:cc:56:15:2a:c2:09:69:cd:b7:fb:4c:d9:aa:
                    bc:e4:b6:22:1a:19:f4:a1:f4:2e:55:56:1d:57:d9:
                    5a:76:2a:4d:0d:ca:db:08:aa:ff:c9:1e:4c:72:7e:
                    7a:0b:6d:65:fa:3d:e4:85:0a:80:9d:f2:31:a5:48:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:AF:B2:4C:80:0B:79:8D:31:8A:7B:A3:7A:06:18:1D:08:B5:F2
            X509v3 Authority Key Identifier:
                keyid:3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:33:47:2b:db:2a:c1:d7:76:98:65:46:ad:3b:3e:7b:98:43:
         57:ca:30:2a:f6:42:d9:98:1f:f5:4b:8d:50:28:c4:8d:ec:54:
         c8:00:14:0e:77:d9:82:6a:10:67:99:35:86:69:55:44:c2:0c:
         b5:94:43:36:31:64:af:f3:2f:c7:18:41:8c:73:a2:39:db:f1:
         fe:04:86:8a:d5:d9:e1:19:fa:c9:1e:e8:46:f0:ab:43:64:17:
         10:34:64:4a:13:68:86:43:92:4a:fd:f3:f2:6b:26:45:9e:a8:
         30:28:3f:89:b8:19:89:a2:c1:ce:88:4d:8b:b6:e4:ab:d0:c2:
         52:22:c4:52:1c:ed:0d:ec:43:cb:ff:12:88:3b:f1:82:3a:44:
         81:9e:99:d0:6d:de:51:42:76:d8:d5:e6:2f:99:43:46:5b:c9:
         18:13:71:97:3a:55:10:54:fa:3d:e1:9e:82:60:12:02:31:7f:
         31:94:e7:53:02:fd:ab:e5:d1:83:c2:51:2b:24:f5:b6:b2:28:
         5b:dd:b7:f3:a0:fa:b5:0c:67:9f:8e:2f:27:37:af:4a:f5:4c:
         9a:17:d4:86:d6:d9:2d:ab:bc:8f:3a:80:22:30:95:ec:3d:52:
         8a:1f:73:4a:0d:c7:1e:f2:cd:ee:9e:b7:24:fb:a2:ba:21:3d:
         11:73:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:16 2026 by rpki-client