Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
File:                     aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json)
Hash identifier:          EDYLTMAl2OlbTjgfWcd6J6mWxu9j5y6YdsUmBq9/XK4=
Subject key identifier:   76:DC:57:0A:53:F7:E2:9D:EA:BE:F0:23:8D:81:C6:73:FD:28:5A:A9
Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
Certificate issuer:       /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Certificate serial:       04AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
Manifest number:          04A2
Signing time:             Thu 23 Jul 2026 00:49:28 +0000
Manifest this update:     Thu 23 Jul 2026 00:49:27 +0000
Manifest next update:     Thu 30 Jul 2026 00:49:27 +0000
Files and hashes:         1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: ID/T70AjhN/3pOEx3BQObe+a56wSlLHsqcUaT5tUhFw=)
                          2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: fjG3+8ZC22UxCMS8177A/y6FTGhegxZaMx8Kk6yByAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl
                          rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196 (0x4ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
        Validity
            Not Before: Jul 23 00:49:27 2026 GMT
            Not After : Jul 30 00:49:27 2026 GMT
        Subject: CN=6a616518-6448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ae:4b:d9:5f:9b:fd:f6:22:1f:84:5d:5a:8d:
                    c9:b4:b7:a3:aa:51:9a:b7:1c:b3:4f:13:ac:89:59:
                    c3:15:aa:2a:90:c3:e2:90:84:95:10:7d:a3:e2:a4:
                    90:53:64:01:bf:be:0e:45:3b:5c:96:5e:cb:cc:e0:
                    d7:a3:1f:28:4b:9d:4d:a5:97:56:71:38:c2:60:bb:
                    bb:a0:ca:8f:e1:1e:9e:75:a1:42:ff:35:07:a9:d1:
                    ef:c4:17:6b:97:f1:17:0a:3a:89:c0:0d:5a:58:fd:
                    fd:16:8b:b3:6a:5f:43:67:4c:44:b3:36:22:60:4d:
                    ce:a0:7d:3c:65:1c:cd:83:82:a8:d4:d3:80:b4:f1:
                    b6:7b:b6:9a:7e:b2:02:54:e7:8e:27:01:32:de:30:
                    a3:87:c7:86:32:c5:f0:8f:a5:e1:e4:44:6c:85:08:
                    73:59:46:62:4a:1a:a8:47:b8:d1:ae:f7:22:e3:3e:
                    de:45:ce:84:4a:77:2c:c9:bf:13:b8:ff:a5:43:4f:
                    42:80:90:05:70:a1:60:93:9a:f7:9a:07:69:f8:d5:
                    07:f7:40:9b:99:04:46:82:f8:92:52:bf:59:50:65:
                    66:89:7a:66:eb:b7:9e:32:0c:19:0c:4f:98:1d:2a:
                    c2:ba:6f:18:5e:e8:30:9f:72:68:68:93:a3:58:17:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DC:57:0A:53:F7:E2:9D:EA:BE:F0:23:8D:81:C6:73:FD:28:5A:A9
            X509v3 Authority Key Identifier:
                keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5a:d1:4c:67:5b:fc:0e:18:26:7b:e8:75:1b:13:4b:1a:27:
         03:f9:33:b6:21:48:b7:3b:b2:bb:50:82:51:87:56:02:69:da:
         06:a6:d8:89:28:3e:df:94:3a:3f:c4:4c:19:23:4c:3f:00:d6:
         23:f3:32:f6:83:18:81:75:69:27:b8:13:5f:00:f5:58:62:23:
         fd:1b:5b:00:4b:69:d3:a6:79:5d:8f:25:f0:c4:59:44:1f:f8:
         38:1a:7e:94:1f:12:61:75:94:34:ce:d4:ce:c3:40:91:f1:83:
         ba:35:53:e3:98:13:cb:90:2b:cc:82:93:bb:78:56:de:a6:0a:
         ca:db:60:5c:28:0c:d8:76:54:34:83:b9:c9:cc:1a:e0:d0:29:
         37:e8:e6:98:9c:0e:b5:35:38:fa:4e:09:b9:70:56:fa:49:c9:
         81:87:d8:44:6b:0a:35:68:2d:e6:13:56:9c:0c:82:25:ed:65:
         22:68:be:3e:10:79:8d:fe:bb:c9:92:12:fd:43:23:de:17:4e:
         01:f6:2e:53:d8:18:0f:27:df:42:d1:f1:97:49:29:16:ef:61:
         16:6a:a3:69:ad:de:5e:d8:92:86:0d:60:bd:15:d5:54:9e:7d:
         69:5a:04:84:9f:7c:f6:5d:2c:df:3d:34:70:c8:d1:cc:af:b4:
         88:ac:2e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:58 2026 by rpki-client