Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
File:                     IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json)
Hash identifier:          +fvQnXLJWWw76m7bdq9+rZaz4Dxc6bnp/QOGRwi9liI=
Subject key identifier:   8A:D7:F5:64:40:52:9D:0A:BF:55:24:E1:53:DA:7B:CD:25:B9:11:41
Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
Certificate issuer:       /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Certificate serial:       0DE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
Manifest number:          0DD6
Signing time:             Wed 22 Jul 2026 18:06:17 +0000
Manifest this update:     Wed 22 Jul 2026 18:06:16 +0000
Manifest next update:     Wed 29 Jul 2026 18:06:16 +0000
Files and hashes:         1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: Kg4d3YF1+NRi7A6+LcX1XJZCYYf8K2V8UO246ZbGKqc=)
                          2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: rkIEofZev6bDtd5nBARLbA+jCza/n/hXbR4AIclPFH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
                          rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3558 (0xde6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6
        Validity
            Not Before: Jul 22 18:06:16 2026 GMT
            Not After : Jul 29 18:06:16 2026 GMT
        Subject: CN=6a610699-5070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:fd:94:01:c7:cf:61:de:20:46:7a:71:51:
                    7c:5d:d2:f3:18:81:47:8f:aa:ae:7a:24:73:31:a1:
                    f7:dc:8a:8b:1f:15:ac:d4:f2:69:1c:ab:94:fc:45:
                    c9:ab:5d:e2:da:8f:e0:7a:02:0b:ef:06:30:93:48:
                    cb:b8:2c:94:01:10:5e:5e:e0:74:f9:b5:41:6e:57:
                    d4:af:a5:57:91:fa:4b:85:c8:ff:32:cf:0c:77:a1:
                    20:ca:8e:b9:b7:7d:9b:64:61:59:e0:f2:32:70:b6:
                    83:fe:c2:2f:21:ed:9f:97:e9:4d:6e:53:b8:95:1a:
                    77:a6:bd:1e:3e:75:79:cc:fd:c2:ef:9e:ba:1b:73:
                    89:cd:34:f6:05:dd:80:2b:3e:8f:74:5c:1b:34:ca:
                    91:b4:ae:b2:e5:f6:fa:16:ff:e3:36:3e:25:60:72:
                    f8:92:6e:a4:1c:fd:90:2b:df:ff:5d:35:33:ad:fc:
                    1a:59:94:91:87:a0:52:60:20:8e:94:fc:af:7c:34:
                    98:25:29:4d:21:e2:03:43:32:d6:0e:05:57:f1:e2:
                    29:9f:c3:48:6c:ce:ec:39:1b:46:f9:6c:e7:f0:79:
                    90:2f:c0:d2:d8:02:e8:96:2d:65:4f:13:be:07:43:
                    ba:0b:71:8b:cf:9f:f4:ed:06:72:50:78:9e:1d:b4:
                    86:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D7:F5:64:40:52:9D:0A:BF:55:24:E1:53:DA:7B:CD:25:B9:11:41
            X509v3 Authority Key Identifier:
                keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:78:30:33:b8:cb:f1:1d:23:c2:f9:cd:2e:01:ee:bf:bd:94:
         9e:1c:e3:5e:ba:05:85:03:fd:2a:a7:0d:a9:80:6e:fc:d4:8b:
         ae:0b:68:de:8e:af:e5:67:80:46:bb:08:67:b9:3c:00:34:bf:
         48:40:cb:37:43:70:fa:c3:d8:68:66:b0:11:39:0f:c0:71:ac:
         23:e8:04:44:16:3a:98:82:8d:ce:e2:58:f4:38:ea:dc:1c:57:
         1a:f8:2a:61:47:41:f6:62:64:cf:fa:07:12:3a:15:4e:98:b8:
         c8:cf:e8:21:2e:0e:ca:51:72:4a:de:6b:8b:2d:18:0f:3b:1e:
         77:ac:1b:b6:d0:4f:40:ec:5e:e3:1a:be:27:70:65:9f:61:4e:
         97:61:d3:a3:df:19:c7:a1:56:3e:34:fa:5e:ee:40:d8:d8:0a:
         ad:df:6a:74:74:0c:59:0d:52:eb:66:5b:dc:91:dd:2c:77:d9:
         a3:32:55:8d:48:04:c8:59:6f:da:3b:7b:c8:2f:de:e2:e0:b3:
         23:df:67:d6:0c:0b:2f:e7:72:31:52:bc:ad:ac:e6:5e:5a:09:
         f4:e9:9f:b5:a6:58:f3:ad:49:84:e5:a1:44:31:88:0d:d4:64:
         76:6e:9c:25:5e:1f:24:a3:79:1b:7e:c3:c0:0a:16:83:45:f3:
         e1:59:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:07 2026 by rpki-client