Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File:                     1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier:          WKVXE06ftsRyy4a08Atgw4v8pw+TQ7XG6ZuV1199wis=
Subject key identifier:   B7:05:F4:3F:BE:A7:0E:16:08:23:B2:80:83:41:B1:C2:A0:7B:53:B6
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer:       /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial:       029D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number:          084E
Signing time:             Wed 22 Jul 2026 23:52:11 +0000
Manifest this update:     Wed 22 Jul 2026 23:52:11 +0000
Manifest next update:     Wed 29 Jul 2026 23:52:11 +0000
Files and hashes:         1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: I6kCvWY6PRrGbYvZZwUCsukY56/f0sVNKlMkk7F3rwE=)
                          2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: W2iKZuwFXrIaEg1oki94Jl0a2awSnqHnroRhsj7WeDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
                          rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
        Validity
            Not Before: Jul 22 23:52:11 2026 GMT
            Not After : Jul 29 23:52:11 2026 GMT
        Subject: CN=6a6157ab-3316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:77:a1:07:ec:be:1d:4d:b4:3b:42:91:23:
                    7c:69:e9:16:d6:05:78:12:70:34:8d:15:9c:dc:54:
                    93:18:5d:f8:c0:8e:74:23:6e:32:bd:cd:49:9d:87:
                    4f:af:74:85:b2:b3:9f:75:57:90:78:71:29:13:71:
                    65:7c:fd:d1:0f:90:66:b7:15:e4:36:22:40:98:f8:
                    de:4c:56:e9:c2:e6:60:94:d8:ab:09:5a:91:e9:0a:
                    f3:6d:47:6c:bd:cc:58:13:4d:eb:07:f8:25:61:84:
                    1d:d5:de:55:7d:91:fa:3f:be:ce:54:06:44:b6:70:
                    83:8a:a8:19:8b:dd:91:18:20:e4:32:3c:d2:dc:c8:
                    c6:2e:1e:c5:54:1c:b5:d2:c5:97:cb:b1:a8:72:fc:
                    4e:2f:a9:e6:e6:bc:17:23:2b:5c:e0:0a:97:18:1b:
                    be:fa:73:ac:67:ef:c2:03:4b:33:52:ed:5e:3e:c9:
                    8b:21:87:f7:62:60:2e:21:8b:24:81:e0:84:3f:d2:
                    10:4d:23:f4:79:a6:32:cc:2b:4a:93:33:e1:c4:4d:
                    bc:3f:dc:5f:bc:ce:3c:55:e5:7a:e3:b0:56:5c:3a:
                    fb:81:ea:cf:c9:cc:27:ec:5f:d8:c4:ba:f1:3a:1d:
                    b8:c8:77:48:55:a7:9a:2f:f2:88:62:50:11:99:d8:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:F4:3F:BE:A7:0E:16:08:23:B2:80:83:41:B1:C2:A0:7B:53:B6
            X509v3 Authority Key Identifier:
                keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e7:45:d3:e5:e8:e9:38:a2:11:c8:e6:6f:08:91:0a:8f:0b:
         18:85:57:52:6d:8e:c6:40:cc:45:41:8c:a7:39:54:ec:71:e6:
         86:06:72:bb:e1:b8:1a:1c:47:71:47:24:54:da:9c:59:49:be:
         71:11:f4:76:b7:f2:1d:4c:ad:c0:ee:dc:19:7d:18:0c:0e:c3:
         28:36:64:f1:52:a6:3b:16:89:6d:41:7a:6b:91:ec:2c:3d:3c:
         5c:6d:9e:3e:5f:e2:ae:3e:85:df:7c:7b:d9:a7:79:e5:c5:be:
         df:85:63:33:5e:70:57:ea:0f:13:f3:9d:7c:1b:35:44:b7:ba:
         30:0d:9c:fc:a8:61:f8:dd:d6:b9:db:c3:58:bd:b5:03:91:2c:
         9c:c5:fd:9a:60:7e:a4:f7:5a:c8:34:8a:16:bc:4e:4a:2b:d8:
         2f:4c:1c:82:89:70:1d:57:72:ab:bf:14:22:ec:0c:5b:cc:b3:
         39:17:6f:84:aa:bc:cf:5d:db:02:27:43:bd:e5:b8:d4:99:05:
         41:ff:dc:13:e0:a3:1b:e0:2d:cb:31:90:82:1c:cd:fc:97:91:
         4f:56:3b:5d:4c:04:5c:44:c9:fd:b2:9a:1f:96:6d:b5:f8:3d:
         4e:cb:74:a9:a2:98:55:cd:f9:5c:2e:eb:33:84:05:a7:bc:3a:
         21:af:99:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:31 2026 by rpki-client