Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft
File:                     7N0mV0PpIRvOCq3LsCLObzO-CwY.mft (raw, json)
Hash identifier:          6fCmG6cIV58C2alfZ/Y1x3m3Bh5MRXkLiLWtJDBWYHU=
Subject key identifier:   21:6F:8B:64:40:BC:86:43:F9:50:E2:85:36:26:46:53:64:95:56:F6
Authority key identifier: EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06
Certificate issuer:       /CN=A91C1710/serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft
Manifest number:          0996
Signing time:             Tue 23 Jun 2026 00:00:09 +0000
Manifest this update:     Tue 23 Jun 2026 00:00:08 +0000
Manifest next update:     Tue 30 Jun 2026 00:00:08 +0000
Files and hashes:         1: 7N0mV0PpIRvOCq3LsCLObzO-CwY.crl (hash: be3kCNs3HuePCUgd+/qpFY82Ji+htbyeb1PmoQc5w7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 00:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1710, serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06
        Validity
            Not Before: Jun 23 00:00:08 2026 GMT
            Not After : Jun 30 00:00:08 2026 GMT
        Subject: CN=6a39cc88-0f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:22:82:a8:b6:c7:f4:62:62:6d:d0:6b:be:
                    d0:e7:cf:66:b4:51:9f:67:87:59:f1:45:5d:b9:b4:
                    70:68:ee:01:31:bd:32:9b:c6:13:7b:ef:cb:01:37:
                    e1:d5:5a:6f:a2:7a:a4:ed:92:f7:f6:e5:8f:b7:fc:
                    84:78:d6:a8:2f:9c:cc:bd:3a:84:59:86:46:86:d4:
                    54:ff:07:df:f0:ae:fa:0e:6c:dc:e2:a0:06:98:25:
                    44:70:4c:da:3f:7a:78:5e:e9:7b:7e:28:d1:ec:5a:
                    b3:9c:d0:5f:d3:69:65:34:0e:33:fc:61:d0:c5:23:
                    a8:a1:4c:45:68:06:c4:3e:08:31:f0:36:d3:a3:8e:
                    1e:c7:fa:7c:15:f0:aa:67:fb:7f:32:1c:3c:d0:f8:
                    e5:f6:d8:11:df:a6:82:0a:af:59:9c:f7:c4:15:b7:
                    7d:61:fb:22:32:db:0d:91:4a:06:d8:03:d2:84:cd:
                    52:94:c8:18:2c:36:f6:80:d3:c1:fe:e3:7b:80:89:
                    bd:a9:8e:bf:00:35:26:c2:a4:e0:d5:24:75:67:31:
                    26:12:71:c4:41:5e:0e:63:16:e1:63:53:a5:c8:fa:
                    26:e0:dd:d7:6c:0a:5f:b7:ff:a0:57:85:35:2e:6c:
                    83:b6:a7:9d:07:63:9b:85:8c:34:9c:e6:9b:a7:77:
                    c3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6F:8B:64:40:BC:86:43:F9:50:E2:85:36:26:46:53:64:95:56:F6
            X509v3 Authority Key Identifier:
                keyid:EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:62:df:58:a5:4b:96:0a:af:64:a2:05:d6:42:24:8b:f0:31:
         2f:71:08:f5:b7:d3:7c:98:08:94:b6:10:1e:d4:1f:d7:31:1e:
         f2:b8:c6:59:e5:86:98:08:fd:e5:ad:70:72:04:a4:aa:12:74:
         56:44:0a:cf:6d:20:56:62:d0:0c:01:d4:f1:16:ee:f8:23:7c:
         d1:ee:1c:c8:aa:ff:e6:2f:39:17:41:a5:38:f9:d2:96:1c:52:
         a0:a0:88:aa:22:64:47:ec:b5:86:76:20:ba:21:a4:20:bd:4e:
         65:c8:5c:8b:97:42:c6:d1:22:bd:b7:a3:d5:52:c9:74:56:e8:
         5d:71:23:ac:1c:f5:e9:40:89:1e:cc:d6:00:34:c4:f5:36:9f:
         84:07:15:88:8f:b5:e4:a6:77:76:44:4e:2a:e3:d1:08:1e:c9:
         69:d1:5e:99:fe:ad:f5:2e:3c:39:44:ac:42:54:cc:3f:71:cc:
         91:b8:7f:7b:89:73:6e:6e:3e:96:ca:be:cf:d3:38:fd:ac:67:
         41:de:7f:8f:66:52:35:4a:ab:c2:4e:8e:a8:3a:9d:01:e2:cd:
         f7:9e:f4:4e:4e:2e:f5:12:a6:48:87:b0:e9:13:92:c0:2e:dc:
         67:f2:53:6e:f5:be:80:b9:b8:c4:0a:eb:b9:40:7c:f6:3f:23:
         2c:f5:18:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE3MTAxMTAvBgNVBAUTKEVDREQyNjU3NDNFOTIxMUJDRTBBQURDQkIwMjJDRTZG
MzNCRTBCMDYwHhcNMjYwNjIzMDAwMDA4WhcNMjYwNjMwMDAwMDA4WjAYMRYwFAYD
VQQDEw02YTM5Y2M4OC0wZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuKoigqi2x/RiYm3Qa77Q589mtFGfZ4dZ8UVdubRwaO4BMb0ym8YTe+/LATfh
1Vpvonqk7ZL39uWPt/yEeNaoL5zMvTqEWYZGhtRU/wff8K76Dmzc4qAGmCVEcEza
P3p4Xul7fijR7FqznNBf02llNA4z/GHQxSOooUxFaAbEPggx8DbTo44ex/p8FfCq
Z/t/Mhw80Pjl9tgR36aCCq9ZnPfEFbd9YfsiMtsNkUoG2APShM1SlMgYLDb2gNPB
/uN7gIm9qY6/ADUmwqTg1SR1ZzEmEnHEQV4OYxbhY1OlyPom4N3XbApft/+gV4U1
LmyDtqedB2ObhYw0nOabp3fDoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFvi2RA
vIZD+VDihTYmRlNklVb2MB8GA1UdIwQYMBaAFOzdJldD6SEbzgqty7Aizm8zvgsG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy
NkIxMUVDQTExQkE1MkJDNEY5QUUwMi83TjBtVjBQcElSdk9DcTNMc0NMT2J6Ty1D
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdOMG1WMFBwSVJ2T0NxM0xzQ0xPYnpPLUN3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi83TjBtVjBQcElS
dk9DcTNMc0NMT2J6Ty1Dd1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPmLfWKVLlgqvZKIF1kIki/AxL3EI9bfTfJgIlLYQHtQf1zEe8rjGWeWGmAj9
5a1wcgSkqhJ0VkQKz20gVmLQDAHU8Rbu+CN80e4cyKr/5i85F0GlOPnSlhxSoKCI
qiJkR+y1hnYguiGkIL1OZchci5dCxtEivbej1VLJdFboXXEjrBz16UCJHszWADTE
9TafhAcViI+15KZ3dkROKuPRCB7JadFemf6t9S48OUSsQlTMP3HMkbh/e4lzbm4+
lsq+z9M4/axnQd5/j2ZSNUqrwk6OqDqdAeLN9570Tk4u9RKmSIew6ROSwC7cZ/JT
bvW+gLm4xArruUB89j8jLPUYNA==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:08 2026 by rpki-client