Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
File:                     9IjcYHyL28iy8lnlOSk-EQeDPa0.mft (raw, json)
Hash identifier:          QTgnz5lF+BLl2Fys4J1iaWs1LRyAkzHEOsSF/SHb4vU=
Subject key identifier:   96:7B:44:09:77:C8:34:1E:39:E0:2C:80:14:4D:17:42:AE:16:1A:60
Authority key identifier: F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
Certificate issuer:       /CN=A91DDB11/serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
Manifest number:          17
Signing time:             Tue 23 Jun 2026 09:16:30 +0000
Manifest this update:     Tue 23 Jun 2026 09:16:29 +0000
Manifest next update:     Tue 30 Jun 2026 09:16:29 +0000
Files and hashes:         1: 9IjcYHyL28iy8lnlOSk-EQeDPa0.crl (hash: 9qoEoX+MJt4Sn3xco37i0pSdPxRc4gKhMFSWpiVJ/qQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl
                          rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 09:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDB11, serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
        Validity
            Not Before: Jun 23 09:16:29 2026 GMT
            Not After : Jun 30 09:16:29 2026 GMT
        Subject: CN=6a3a4eed-2c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:50:30:43:4d:e9:6c:aa:65:92:b9:fe:2b:
                    32:26:cf:bb:97:d0:c7:65:6f:4a:17:be:05:d5:b1:
                    41:07:9f:3d:af:c2:d5:52:5f:6c:fa:d9:36:cb:3f:
                    a3:61:15:12:47:f3:01:6f:5c:53:ed:c5:e7:73:91:
                    0b:04:9d:77:75:18:c0:4d:d2:a2:4e:ed:f6:04:43:
                    74:77:17:aa:9a:84:47:5e:77:8f:70:5d:20:4c:87:
                    53:34:3f:8b:b2:11:dd:4f:a1:f3:ab:d6:f8:64:c6:
                    85:96:a6:f0:86:da:84:16:06:2a:5c:aa:35:ab:64:
                    3b:ca:e4:60:23:12:54:ae:fc:86:20:e9:f8:33:98:
                    bc:13:61:75:51:28:8e:0a:c9:fd:e1:5f:24:fe:e2:
                    d6:08:30:96:b2:8e:01:ea:12:19:13:9b:83:9f:d3:
                    64:54:72:a4:db:89:d9:df:71:53:ad:13:94:d8:71:
                    0f:7b:d7:f4:2b:e2:b0:bc:44:33:37:6e:b7:23:58:
                    af:32:a0:68:43:e9:6b:5a:ba:94:1f:23:ee:a2:9c:
                    4a:7b:52:b0:1e:bb:d5:b8:47:cf:e8:5e:02:aa:bd:
                    43:18:42:1d:f4:a4:7c:63:73:c6:28:7c:41:3e:be:
                    13:06:76:aa:75:e0:0a:97:b9:a3:af:fc:f2:34:3d:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7B:44:09:77:C8:34:1E:39:E0:2C:80:14:4D:17:42:AE:16:1A:60
            X509v3 Authority Key Identifier:
                keyid:F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e1:6f:60:7a:5c:20:47:be:58:a8:67:3d:8d:d9:03:00:04:
         66:ce:4b:43:81:59:53:ef:78:21:c2:46:e2:6e:ee:48:40:c2:
         65:b2:65:16:05:bd:e3:1e:12:eb:71:88:10:e4:50:f7:01:9e:
         a6:d1:98:be:6e:7f:cf:64:79:0b:3f:f5:9a:82:24:8c:a3:13:
         2d:fc:f4:1b:5a:e9:b3:1b:fe:b6:a0:38:56:db:38:69:73:0a:
         a1:85:27:fb:c5:c5:1f:43:a9:27:87:5a:70:7b:ec:5c:fb:2a:
         79:5d:93:25:75:f9:c4:54:c4:47:c1:a7:61:8b:4e:ee:aa:4c:
         f9:93:d1:00:72:39:7d:1d:30:a4:2e:62:4e:ab:20:e7:08:99:
         13:c6:cf:ae:44:e2:9d:b4:a9:2f:d6:6c:3a:17:0d:4a:26:bc:
         57:59:06:6f:87:8a:8a:ec:cb:b1:38:be:10:e7:77:38:da:b5:
         00:54:c0:cb:88:f1:be:89:67:82:fe:e3:4a:c0:90:16:35:29:
         fc:ee:f2:19:61:8f:c3:21:24:a9:22:2f:54:93:a0:48:1b:88:
         2a:02:d4:14:a6:75:6d:54:4a:e7:84:bb:9c:ed:a7:9e:b2:82:
         44:be:3c:51:e2:97:79:33:3f:2e:6d:fc:26:4b:be:da:81:4d:
         db:ed:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:10:06 2026 by rpki-client