Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
File:                     jVurNwypLk9f14n8InMxD5rqOPY.mft (raw, json)
Hash identifier:          DMRl+VBgu05wVvNB+YDz+k8cURQofAyWWa4Psg2XAnU=
Subject key identifier:   98:0F:F6:41:8A:F3:5F:B2:5A:E3:8C:70:05:4A:68:A3:B1:F0:57:05
Authority key identifier: 8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6
Certificate issuer:       /CN=A91E7290/serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
Certificate serial:       0639
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
Manifest number:          0628
Signing time:             Sun 04 Oct 2026 22:54:33 +0000
Manifest this update:     Sun 04 Oct 2026 22:54:32 +0000
Manifest next update:     Sun 11 Oct 2026 22:54:32 +0000
Files and hashes:         1: jVurNwypLk9f14n8InMxD5rqOPY.crl (hash: wb/LrRf7GB3rqSGBBQWdAC+Gbee7w2CzWv5Dd7s+Y4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl
                          rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 22:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7290, serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
        Validity
            Not Before: Oct  4 22:54:32 2026 GMT
            Not After : Oct 11 22:54:32 2026 GMT
        Subject: CN=6ac2d929-87c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:64:81:9e:44:8b:80:fc:bb:8c:52:5c:2a:83:
                    c6:e7:7f:91:bc:2b:0a:27:54:f6:cb:c4:c8:e1:73:
                    c9:f8:75:dd:6a:c2:6a:36:1b:6e:17:79:f7:af:81:
                    16:9f:67:0e:00:89:50:36:b7:fc:65:0a:ed:c2:22:
                    56:8e:1b:4e:3f:a8:e5:97:6a:c1:9b:75:d1:5c:13:
                    73:88:5b:34:88:68:4d:e1:74:32:d9:e0:ec:26:9d:
                    3d:2d:4b:aa:7e:bd:fd:f2:05:3f:07:b2:a1:16:5d:
                    5c:63:9e:15:54:37:8c:04:59:90:43:f2:fc:6d:91:
                    38:ed:da:8b:e3:43:57:f9:dd:4f:df:3b:c9:cf:8d:
                    b8:ae:3a:5d:9c:70:31:24:39:e5:47:0c:cf:97:66:
                    94:b5:a5:c8:ee:71:a4:0d:a7:60:c6:33:e7:8b:fa:
                    72:60:a2:44:d2:48:85:09:e1:c7:40:02:4a:d9:08:
                    c6:ef:fd:7d:82:b9:8c:d6:95:8b:98:2f:73:43:33:
                    40:2f:b0:ae:2d:bd:3f:c6:73:eb:86:c9:01:10:1c:
                    a1:86:15:72:4b:ab:e6:db:db:56:52:fa:7e:dc:df:
                    1b:37:ba:9c:62:86:a6:64:01:cf:1f:0f:50:e0:a3:
                    00:80:d4:a6:de:33:20:e1:9e:b5:96:be:b4:88:d6:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0F:F6:41:8A:F3:5F:B2:5A:E3:8C:70:05:4A:68:A3:B1:F0:57:05
            X509v3 Authority Key Identifier:
                keyid:8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:25:b4:70:79:03:c5:03:53:80:21:ed:4f:e1:42:08:83:04:
         a5:48:8c:d4:13:45:b5:ce:ff:5b:bd:2d:df:27:e1:5f:47:06:
         4c:18:5e:16:42:6e:1b:56:4c:91:51:a1:25:49:95:2f:29:71:
         48:37:5a:68:da:b3:2b:09:c5:6b:f7:6f:ce:cf:31:b2:89:2b:
         c1:1a:1b:74:0e:26:75:45:ba:23:66:af:10:c0:25:56:a6:e2:
         42:af:d5:65:42:f0:ac:35:22:7b:3a:e8:bb:c3:1a:bb:82:97:
         7e:93:be:b1:0e:02:22:1b:df:d0:b6:e4:12:45:8b:df:69:b2:
         d5:37:76:6b:88:22:27:27:18:f6:e2:51:d8:e9:c0:33:a2:d0:
         fb:b0:e5:54:66:20:4f:14:96:4f:ff:8a:37:0e:37:e8:ea:c3:
         94:80:9b:a2:cd:f1:6b:a8:da:1a:c0:89:76:d1:9c:39:53:43:
         51:cb:38:1a:59:44:3f:99:c4:a3:fd:6d:c5:d8:fa:17:13:4f:
         58:f0:b8:29:7b:52:aa:94:4b:e1:75:04:ae:f0:93:67:ff:50:
         c9:c9:75:9c:67:dd:87:44:e3:7b:a1:31:03:85:aa:91:ca:b4:
         a5:01:b3:78:47:b6:18:a8:a2:86:2b:9c:ac:83:0e:4d:31:33:
         a1:0b:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:16:15 2026 by rpki-client