Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft
File:                     0F9LZe-AtS0_ehTy3BlczyY5I8M.mft (raw, json)
Hash identifier:          h7MnoI2varFyAUKlbkaqgiViBj5BPIf3ESn80Oo+mag=
Subject key identifier:   9A:82:49:74:A3:5B:8E:CA:22:3A:EE:CE:CC:B1:9D:2A:31:43:E0:C9
Authority key identifier: D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3
Certificate issuer:       /CN=A91C7836/serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft
Manifest number:          03
Signing time:             Fri 17 Jul 2026 10:35:04 +0000
Manifest this update:     Fri 17 Jul 2026 10:35:03 +0000
Manifest next update:     Fri 24 Jul 2026 10:35:03 +0000
Files and hashes:         1: 0F9LZe-AtS0_ehTy3BlczyY5I8M.crl (hash: 5KdgbWqJvvNg5paGJMEptLWfW6n6EDYFXCzyNCypLQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl
                          rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7836, serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3
        Validity
            Not Before: Jul 17 10:35:03 2026 GMT
            Not After : Jul 24 10:35:03 2026 GMT
        Subject: CN=6a5a0558-47fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:52:78:aa:c7:de:2a:53:fd:f0:5f:87:64:6c:
                    67:6e:4f:3f:b9:67:5a:5e:a5:d6:00:c2:f2:c0:b3:
                    96:7f:fe:0b:a8:ab:22:a6:bd:2e:5f:1c:64:d9:f3:
                    c5:b8:2f:ed:86:ab:f8:94:64:8b:fc:0e:d3:70:34:
                    16:a3:a1:aa:ee:33:d3:00:e8:51:f5:36:dc:95:2f:
                    85:50:84:96:2f:55:f3:93:31:3c:5f:27:f5:95:4e:
                    49:db:62:15:02:da:04:78:8c:bc:a5:26:b6:7e:8b:
                    91:2e:40:93:20:83:cc:7b:1d:47:19:f5:ad:83:fb:
                    ba:c3:30:b2:08:b9:51:74:2a:5c:b9:6a:00:af:5b:
                    a7:5e:19:57:85:2b:ce:ca:27:75:80:a8:af:0e:aa:
                    7a:49:c9:81:df:fc:22:fa:58:fa:8a:00:07:76:cc:
                    13:f0:e3:e8:e0:e4:e7:f8:4a:ce:72:85:a1:f8:b2:
                    a0:4a:3f:80:7d:65:1b:0b:04:c6:23:67:ec:15:08:
                    27:f8:66:ce:ab:d6:0a:d6:49:de:71:5f:9c:2f:4d:
                    09:72:8a:25:11:94:48:65:08:b5:f7:aa:39:ee:c5:
                    cc:11:dc:3f:95:1d:19:3e:ec:48:37:e3:3e:4a:6f:
                    49:70:05:8f:9d:82:4f:54:5c:02:12:0c:e8:14:ed:
                    7c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:82:49:74:A3:5B:8E:CA:22:3A:EE:CE:CC:B1:9D:2A:31:43:E0:C9
            X509v3 Authority Key Identifier:
                keyid:D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7c:40:ae:df:7b:f4:55:88:89:cb:18:e8:0e:1d:20:97:5e:
         cf:d3:b6:33:3e:a1:e6:a2:1e:98:1d:e9:05:eb:20:0c:a4:4d:
         24:2d:b0:16:a0:fb:5f:74:1e:c3:87:2a:92:b3:2f:4e:87:5d:
         47:87:c8:96:e3:e0:73:6a:57:b4:93:da:72:cd:1c:9e:39:6d:
         f0:b0:c6:f5:b5:17:ad:0d:43:8d:c3:b5:0b:bd:6e:0e:34:96:
         bd:a8:3f:de:37:9e:7d:15:66:7a:eb:6b:b8:bc:22:00:81:39:
         04:cf:25:a6:e7:e8:9e:7c:a7:8e:f1:52:e1:5e:4b:50:cb:21:
         32:55:88:2b:27:f4:e2:0d:67:39:4a:06:76:48:93:ba:1c:f4:
         2f:b8:e0:fa:aa:9b:1e:87:82:f0:8f:62:ab:49:5f:4c:87:ac:
         63:88:c0:60:a9:c1:22:84:dc:09:ca:92:a4:d4:5e:df:9e:58:
         0f:3d:15:70:4d:a6:e3:d8:20:7a:55:f7:7b:38:57:a7:54:ac:
         50:12:fd:24:b8:61:bc:9c:01:66:72:31:31:26:8f:1d:c0:16:
         5e:97:6c:ce:f6:07:e3:16:8b:11:44:0b:b1:fe:f5:ac:57:0c:
         b5:c0:6c:8e:e9:28:a3:e2:62:ae:fc:74:4f:35:ee:fe:d1:98:
         c4:a3:4f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:17 2026 by rpki-client