Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
File:                     4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json)
Hash identifier:          oUaVqQFOSi7xbfqB49oxRlUwS/RvgPvwtuZnnse+PVg=
Subject key identifier:   3E:04:64:FE:A7:4A:D6:C2:A2:08:11:98:DD:D6:56:9F:E4:86:93:6F
Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8
Certificate issuer:       /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
Certificate serial:       1FC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
Manifest number:          1FB5
Signing time:             Wed 22 Jul 2026 16:04:24 +0000
Manifest this update:     Wed 22 Jul 2026 16:04:24 +0000
Manifest next update:     Wed 29 Jul 2026 16:04:24 +0000
Files and hashes:         1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: V1Qm/TOFQ+PWuAU5w1bcIte5PhD+jg05yLc6vA8JQxc=)
                          2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: uDJZMcFCbLQlSQcLSBZkCu6SX9omctyPQYO3XpjloA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl
                          rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8129 (0x1fc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
        Validity
            Not Before: Jul 22 16:04:24 2026 GMT
            Not After : Jul 29 16:04:24 2026 GMT
        Subject: CN=6a60ea08-712e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:ba:94:cf:63:a9:a4:0c:b6:fe:b7:0e:d5:
                    80:21:65:ef:77:4c:c8:95:6a:77:20:80:60:df:fe:
                    f6:52:13:c0:92:91:c2:b5:f3:81:c0:56:d8:fe:8a:
                    9d:72:b9:48:9b:65:9f:38:9b:73:f7:fd:72:43:a8:
                    22:b3:14:43:0b:95:f5:13:09:c1:06:f7:1d:50:70:
                    46:04:44:85:dd:89:99:e0:c4:2b:1a:86:0c:ca:76:
                    70:d6:d6:fe:fa:a7:25:da:5c:5c:34:4b:15:f0:e4:
                    79:52:27:cf:72:d8:97:67:47:1b:8d:85:50:aa:2e:
                    00:b9:cb:37:0a:02:60:12:81:89:58:f5:a4:ef:b1:
                    3e:ba:e9:7d:1f:66:3a:25:c4:b7:d2:d4:85:cb:10:
                    d5:16:3e:2f:d3:d9:c5:72:1c:57:63:e6:b8:c2:0a:
                    16:9c:24:47:ca:78:6a:a0:47:ee:a7:4f:2f:34:a3:
                    1e:ed:47:f5:e1:6e:28:1a:47:b9:35:17:98:fa:cc:
                    5c:c8:e2:17:89:c9:6d:21:38:3e:a8:d9:2b:c9:2b:
                    8e:fb:03:55:57:82:4d:b9:89:0e:f6:1e:37:3b:e9:
                    04:9e:7b:19:de:ee:37:df:33:99:21:59:e6:65:dd:
                    3e:b0:dd:45:51:b9:52:cb:51:7b:e5:2c:dd:35:ab:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:04:64:FE:A7:4A:D6:C2:A2:08:11:98:DD:D6:56:9F:E4:86:93:6F
            X509v3 Authority Key Identifier:
                keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:02:e8:77:0d:86:51:c4:06:88:ab:57:2a:7c:6e:c4:77:76:
         d4:44:29:13:bd:32:f7:12:29:e3:90:13:71:4d:87:64:33:c8:
         87:5d:35:ce:c2:ab:3d:bb:36:30:89:b0:54:5b:9b:7f:c3:eb:
         4b:83:03:7b:61:b5:19:09:4d:e8:04:33:0a:c6:ee:08:87:06:
         29:e1:68:87:36:9e:97:75:96:0f:4c:e0:e1:79:05:4d:25:e7:
         59:85:35:33:38:c9:68:d8:5f:c6:f9:73:e1:f8:9f:5a:90:77:
         b8:be:0f:6f:61:0b:82:dd:a1:e1:a0:20:9b:c5:11:98:01:be:
         07:ab:67:44:42:72:5e:76:4e:06:6f:b0:41:38:97:f6:8e:ed:
         f4:12:9c:28:f5:79:4a:b5:ac:38:66:5d:16:f8:c7:db:14:14:
         f8:53:c9:42:04:d5:29:78:1c:79:9a:13:25:11:f1:2f:21:6a:
         b8:cb:31:73:26:65:8a:80:40:6a:56:e7:cc:73:af:c7:bd:10:
         2c:1d:7f:86:af:41:de:c5:b0:68:00:0a:7e:ae:c7:25:c0:6e:
         b5:53:2c:5d:a2:16:57:e8:df:7c:83:a4:fc:4c:6c:fb:ff:4a:
         b4:12:17:75:48:c8:4b:c2:62:22:14:1f:b2:c5:72:db:e5:cd:
         eb:bd:7d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:53 2026 by rpki-client