Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft
File:                     1u0VCduHw0xGCiZBoZt_SE5NxEU.mft (raw, json)
Hash identifier:          17kjXRfdmWuXtAh0jiu432paAIcIc8Xx9Z4tNOevAVg=
Subject key identifier:   61:56:B0:82:FD:03:61:64:23:0D:56:F7:59:B0:A4:C4:BA:7B:AD:F5
Authority key identifier: D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45
Certificate issuer:       /CN=A91F5216/serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445
Certificate serial:       02A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft
Manifest number:          02A1
Signing time:             Sun 05 Jul 2026 02:03:59 +0000
Manifest this update:     Sun 05 Jul 2026 02:03:59 +0000
Manifest next update:     Sun 12 Jul 2026 02:03:59 +0000
Files and hashes:         1: 1u0VCduHw0xGCiZBoZt_SE5NxEU.crl (hash: 88uA6BpH3gXVii4Q6u6HjgFSAaT7RgTs5mi/3qbeRnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl
                          rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 02:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5216, serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445
        Validity
            Not Before: Jul  5 02:03:59 2026 GMT
            Not After : Jul 12 02:03:59 2026 GMT
        Subject: CN=6a49bb8f-c2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:54:1c:41:c1:fe:c4:84:e1:d9:4b:be:89:
                    b3:a6:fd:11:8d:b8:78:4f:e3:90:fc:10:e3:49:08:
                    c2:cc:b5:20:81:bb:e8:b9:29:ad:a6:57:47:93:3d:
                    51:ac:86:4f:89:14:1f:2e:49:3a:90:8c:cb:e3:87:
                    7b:61:25:ab:88:c8:49:f4:54:74:01:38:b4:22:4d:
                    5f:09:7a:f4:8b:a8:d6:46:50:8b:70:ce:b5:78:ec:
                    fc:dc:f1:64:50:33:bd:e8:28:3b:21:c3:49:7c:ea:
                    97:59:fc:b6:1b:ca:96:a6:43:58:77:bb:85:37:57:
                    a0:ec:35:cc:4f:14:2a:39:26:bf:cf:bf:b7:99:53:
                    44:4d:ce:2f:30:d3:06:33:e7:d9:ba:88:42:c8:5a:
                    33:d8:a5:01:5d:19:67:bc:68:56:d0:18:84:e4:93:
                    a5:e8:e7:62:f2:b2:c8:99:f7:37:da:1b:10:b5:55:
                    31:c5:0c:1a:3f:0d:1a:7a:86:2c:8f:72:64:0d:fb:
                    62:13:14:44:54:b1:02:53:a0:67:b9:d4:e8:57:8a:
                    c1:31:88:90:75:1a:2b:53:d0:bf:16:e7:37:79:76:
                    2a:07:60:2b:15:c6:c6:f5:17:01:c3:46:ba:fa:9c:
                    8f:33:1f:33:91:20:55:88:0c:d0:36:a4:ac:68:dd:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:56:B0:82:FD:03:61:64:23:0D:56:F7:59:B0:A4:C4:BA:7B:AD:F5
            X509v3 Authority Key Identifier:
                keyid:D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:61:28:12:6a:d9:cc:73:7b:f3:b8:e9:5b:9e:2a:f3:3c:0f:
         d5:92:a2:86:84:a8:66:af:4c:94:38:21:29:6d:e3:1e:a4:b7:
         df:a2:c7:f7:8f:4f:8d:aa:ca:20:f0:de:27:3b:4d:a6:b5:d5:
         d5:fe:01:ab:f6:81:d1:c5:5b:14:23:8d:be:e3:7b:b6:df:fb:
         73:ea:81:ae:d9:3a:d4:2a:3a:13:59:83:ed:dd:9e:0f:76:0d:
         16:5e:d2:a5:68:3c:a7:7f:cf:92:39:ae:cc:52:27:0c:fa:41:
         b6:03:82:e6:91:21:88:c2:14:4f:e9:dc:72:e2:61:e2:e0:4e:
         cc:54:82:4f:b0:77:35:d8:20:23:bb:50:55:e7:11:5d:a0:90:
         18:04:33:e5:04:dd:93:1c:29:03:b5:18:01:0f:bf:3f:14:47:
         2b:b1:cf:e3:d9:99:5b:39:39:38:f7:4c:7a:85:dc:3e:1d:85:
         ff:05:4b:76:bf:9d:11:ef:c0:2b:18:20:16:85:d7:53:d7:0b:
         fe:28:17:8b:ef:34:b6:b2:b4:b4:54:d8:0d:e1:6b:26:4f:7d:
         4c:fd:01:1f:12:80:ee:37:a9:f3:ef:33:05:e8:eb:d8:ba:ad:
         b7:3e:5a:2f:19:be:d4:47:c6:2d:45:26:93:37:d6:3f:82:01:
         1c:10:7b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:16 2026 by rpki-client