Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
File:                     x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json)
Hash identifier:          NiEy6yR6QHXtYMaiEBzZxLd0X+hrHfmBJ9AAlDZCbic=
Subject key identifier:   94:A0:8E:35:67:52:02:15:14:19:3C:BD:76:EF:0A:06:CF:E0:A5:90
Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
Certificate issuer:       /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Certificate serial:       07B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
Manifest number:          15D7
Signing time:             Sun 04 Oct 2026 18:20:41 +0000
Manifest this update:     Sun 04 Oct 2026 18:20:41 +0000
Manifest next update:     Sun 11 Oct 2026 18:20:41 +0000
Files and hashes:         1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: pWjvgGoIdCOW/98UaZ1t+ZkSBZu4Dg9zmp4tLYSCxdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1975 (0x7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
        Validity
            Not Before: Oct  4 18:20:41 2026 GMT
            Not After : Oct 11 18:20:41 2026 GMT
        Subject: CN=6ac298f9-2f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f8:a2:96:42:aa:4a:6e:fa:0d:a1:a2:12:88:
                    fd:d9:a9:1b:4c:df:82:21:6e:b3:f5:35:e2:0c:89:
                    6d:68:e2:0c:2a:e6:f1:fc:15:fc:d6:ef:22:dc:5f:
                    e9:5a:ac:0f:28:32:96:68:0e:20:87:5a:29:d4:bb:
                    36:58:9e:80:ce:77:f5:bc:34:c0:7d:25:7b:62:08:
                    7b:be:3d:b9:c3:0c:ac:62:f7:18:73:2e:7d:0d:b6:
                    a1:02:0e:bb:ea:83:bc:3b:ac:f3:26:7e:1d:77:b5:
                    90:9f:ef:18:25:5d:cb:20:97:a6:4e:18:e5:56:dd:
                    51:98:1a:26:6b:a1:1b:b1:95:43:7c:c1:bf:66:1c:
                    2d:86:ad:2a:47:f3:ab:14:c9:6b:69:f3:a5:87:74:
                    be:cb:e2:4e:34:0f:8b:56:d7:ab:04:38:01:5f:a3:
                    c0:2f:41:ce:34:66:88:16:67:2a:0c:8c:40:b5:fc:
                    26:40:f0:29:0d:41:e9:d0:d0:9a:9b:dc:de:a2:0f:
                    fd:d5:cf:0d:b8:91:52:05:4d:0e:52:a3:e0:a8:cf:
                    b1:20:69:0c:cf:67:8f:30:c5:72:d4:c1:2b:59:ea:
                    54:0f:28:14:02:f9:80:55:4d:09:d1:03:09:b3:a0:
                    b9:a7:42:10:38:8f:d0:01:64:24:7a:4c:b2:34:e2:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A0:8E:35:67:52:02:15:14:19:3C:BD:76:EF:0A:06:CF:E0:A5:90
            X509v3 Authority Key Identifier:
                keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f7:c8:63:10:20:cd:91:0d:7a:9d:7b:03:50:1f:5a:59:43:
         d5:27:32:c7:1c:13:d9:e0:1a:cf:4c:1d:96:e0:94:6d:9e:82:
         a9:aa:c5:f7:07:49:6e:4c:51:bc:e9:02:db:fb:e4:41:0d:95:
         3a:8b:10:0f:5d:38:d7:fd:6c:ee:98:ce:07:db:ca:9b:70:fc:
         33:92:37:87:d6:a6:b5:88:0f:91:98:4a:5b:66:9a:a6:b8:1b:
         8d:a6:e8:a9:17:e1:4e:81:cd:67:3c:c8:8b:09:18:f7:f1:17:
         e2:1f:f5:f6:ad:cd:7b:52:56:d4:39:6e:b7:26:e9:b9:45:1a:
         7a:46:03:46:81:7b:06:c2:66:11:68:b3:58:e8:d8:22:50:d9:
         92:ef:5f:aa:8f:56:7a:cb:6d:1a:4a:52:c2:2d:96:86:9f:84:
         70:bf:f2:88:02:05:df:74:76:9b:a5:75:dc:90:22:f3:fd:a1:
         8f:e4:cd:89:82:fb:1b:88:c9:c9:81:29:19:aa:1a:01:9f:25:
         b8:93:f2:0e:be:98:f4:78:1a:11:22:80:dc:dc:e5:75:3b:db:
         b4:51:8b:4e:e9:a0:b9:77:5a:d1:0c:65:dc:40:98:33:a9:bf:
         53:46:e6:2c:56:b5:72:d1:40:9f:a0:92:1a:ff:e8:b1:2a:2e:
         4f:1a:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:09:32 2026 by rpki-client