Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
File:                     _AVdqSFUGMKhRWbvVna4pPTSCzA.mft (raw, json)
Hash identifier:          v4+w9LljQ0JfWnYwR8d2BO6NaQv4oqcA5UrVs+dVZdw=
Subject key identifier:   9B:A0:0D:F0:C4:25:C9:88:A6:4E:BC:D6:46:E5:B3:9C:35:1D:76:90
Authority key identifier: FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30
Certificate issuer:       /CN=A91133DE/serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
Manifest number:          45
Signing time:             Thu 23 Jul 2026 10:25:41 +0000
Manifest this update:     Thu 23 Jul 2026 10:25:40 +0000
Manifest next update:     Thu 30 Jul 2026 10:25:40 +0000
Files and hashes:         1: _AVdqSFUGMKhRWbvVna4pPTSCzA.crl (hash: fk8ZMlUYLmcb/rrknWNopVsq+mRl2peNljvAvGEmMyE=)
                          2: 3F1CEAEC1D0311F1B8948CF0043D8C67.roa (hash: 1C1WKunXRhUP/ppMqilBjQAG9/WWODiA+ekMdQn1ktE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
        Validity
            Not Before: Jul 23 10:25:40 2026 GMT
            Not After : Jul 30 10:25:40 2026 GMT
        Subject: CN=6a61ec25-f3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:30:d6:62:37:7c:34:3f:b7:36:2a:23:a4:
                    49:4d:51:94:41:99:29:db:16:cf:bf:e9:37:92:50:
                    9a:14:2d:c4:52:3c:b6:2f:3f:12:c9:9f:0f:26:b8:
                    ad:88:59:49:38:4e:b1:05:2a:b0:35:34:21:c4:fd:
                    83:fa:1b:b5:30:16:d6:56:a8:73:6d:28:c5:db:72:
                    ad:a9:a4:4d:a6:d1:f2:cd:c7:25:17:12:87:ad:4d:
                    2e:10:66:0d:66:b6:22:ad:b9:2f:70:93:8e:cb:5a:
                    44:8f:85:f4:97:30:4d:d6:14:8c:bf:f0:9d:0a:75:
                    99:92:a8:58:4f:31:8f:01:e9:e5:50:8b:04:a3:ce:
                    1b:d4:df:0b:0e:b2:ae:10:3c:64:c4:1c:40:88:6c:
                    1e:79:16:d4:28:08:ad:4d:25:19:f2:df:0a:71:90:
                    51:a2:bc:e5:5d:34:20:ab:e8:54:8d:aa:b5:52:c3:
                    5a:8d:25:ec:94:d6:45:0b:7c:bb:83:f4:83:b9:a4:
                    35:cb:f6:93:ec:ff:e8:56:0c:f8:b7:10:af:a7:5f:
                    90:ad:f3:54:7c:22:72:a6:a6:ec:cc:c4:21:4d:a6:
                    90:09:ea:01:cf:b9:80:cd:6a:43:ee:3c:66:4e:a8:
                    62:27:c7:ba:09:6f:b2:a9:47:86:69:13:dd:30:3b:
                    8b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A0:0D:F0:C4:25:C9:88:A6:4E:BC:D6:46:E5:B3:9C:35:1D:76:90
            X509v3 Authority Key Identifier:
                keyid:FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d6:b7:0e:c1:f9:b0:43:d8:d8:24:ee:47:fe:b4:4a:de:47:
         98:16:bd:30:8a:8f:1f:ad:51:40:b0:b3:63:7e:68:6c:20:63:
         cf:b2:f0:7d:4c:97:7a:2c:07:1c:71:9f:f2:5b:2d:bf:18:61:
         a1:ec:72:17:f8:49:e8:af:26:53:75:64:47:6e:72:d5:f4:b1:
         7d:73:4d:95:6d:a0:eb:aa:4e:74:75:9a:c8:f8:34:9e:22:b7:
         ad:c9:27:1c:0d:58:65:ca:68:bd:11:ef:0c:51:b8:08:95:e1:
         b2:5e:69:d0:65:d0:80:fa:fc:c3:71:6d:aa:4d:65:16:4e:00:
         85:3b:ef:0b:0f:83:9d:b2:6b:85:be:9a:2b:5e:97:8f:bc:95:
         87:c0:2e:85:2f:a1:3c:1e:29:c7:8e:89:f4:17:03:97:5c:c0:
         b9:79:58:a2:11:03:d8:95:cb:76:cd:8c:6c:ea:d0:b5:65:42:
         52:a5:bf:b5:ad:12:11:43:50:a0:fb:86:9d:4c:18:fc:48:02:
         b1:43:e1:1f:b3:de:d0:ce:0a:cc:61:b8:e8:02:f1:7a:86:67:
         83:11:76:af:38:a5:bc:6f:c6:1b:f8:a1:cd:12:fc:7b:14:79:
         cd:4a:90:3b:b1:56:ff:6c:22:32:0d:f5:9c:d7:23:ce:7a:10:
         59:d9:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:04:03 2026 by rpki-client