Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
File:                     RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json)
Hash identifier:          Us/PuuPv1GUR61aTeZn/zHVGC1HT9KXp2OmNrKOCwDw=
Subject key identifier:   F2:56:4B:03:8E:73:D2:0D:87:AA:E4:E1:58:46:59:7E:6E:1F:CE:CB
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Certificate issuer:       /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial:       1608
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
Manifest number:          15AE
Signing time:             Wed 22 Jul 2026 16:53:06 +0000
Manifest this update:     Wed 22 Jul 2026 16:53:06 +0000
Manifest next update:     Wed 29 Jul 2026 16:53:06 +0000
Files and hashes:         1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: OOqlC7SuRc+hJCsHYz7DLfnPDpM0oZDUEBRrSUogpGc=)
                          2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: Aeg61XcuOkOdleV15Q4+Qk8RtuldUKElhU+Yjo/HRrk=)
                          3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: BQsuQrikdwhD5Mc0XBMqkQHD0Ua6D0EyN+F6ar++uGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
                          rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5640 (0x1608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
        Validity
            Not Before: Jul 22 16:53:06 2026 GMT
            Not After : Jul 29 16:53:06 2026 GMT
        Subject: CN=6a60f572-a079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d1:85:9e:ba:01:e0:07:ef:5c:24:17:9d:a6:
                    41:60:b4:4c:d3:c0:86:46:e2:63:67:4a:2e:9e:b3:
                    c9:4e:3d:3b:9e:16:c9:20:8f:90:b0:07:3c:c6:17:
                    76:85:f6:58:fb:1b:b4:0d:7a:38:e9:89:44:16:08:
                    8a:ab:2b:e4:b3:49:55:c5:3f:52:11:28:88:b6:fc:
                    65:61:cc:e4:5d:6d:3d:c3:0e:f5:83:9b:e0:85:00:
                    24:2b:c4:2e:df:9b:ac:40:98:a9:51:20:e1:e0:7c:
                    90:58:19:8d:ea:19:10:2d:66:88:0b:af:fc:9f:80:
                    56:7b:92:56:b9:d6:2c:06:8f:3f:3f:27:33:43:71:
                    7b:51:6e:d5:eb:d3:e6:4c:f4:70:34:d6:9a:54:68:
                    a0:f6:92:89:29:0a:7f:19:3c:55:45:66:63:93:9a:
                    9c:d1:2c:83:4b:1a:a9:96:3f:db:7b:41:87:57:4b:
                    6b:95:b8:09:4b:49:e0:39:37:09:3a:c7:6b:ca:e2:
                    d5:3a:cf:2b:0f:4f:f8:6a:a6:7a:c1:f5:34:ba:61:
                    ac:db:e6:b0:a1:49:71:af:2c:9a:77:9a:8f:73:81:
                    28:3d:68:dc:84:7f:d4:0d:36:ff:d5:ae:fa:9c:59:
                    97:2f:55:b2:79:31:fc:28:1c:ae:f4:51:73:df:7f:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:56:4B:03:8E:73:D2:0D:87:AA:E4:E1:58:46:59:7E:6E:1F:CE:CB
            X509v3 Authority Key Identifier:
                keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a0:3c:c9:3b:a9:0c:57:e2:66:31:a7:17:df:fa:42:1e:0f:
         d9:99:b1:f2:3e:fe:5c:05:22:b8:0c:e7:b9:ce:e1:7a:a3:98:
         0f:f1:22:d2:15:49:59:54:13:55:11:be:9a:46:ed:e0:40:43:
         da:97:d2:c6:8a:a3:4d:83:54:2c:0e:10:62:6c:ae:72:bd:f9:
         7e:24:16:e8:9c:63:ba:e0:04:36:e9:08:60:24:e3:2a:9f:69:
         cc:0c:4b:52:7d:53:83:6c:7f:b8:6a:84:dc:5f:21:fd:d0:67:
         3c:02:03:81:cc:f2:09:fc:20:54:d5:0a:22:80:81:a7:9e:17:
         c1:b5:24:19:01:02:95:ab:d1:21:36:69:d0:a6:23:bd:9e:1d:
         d4:7d:30:2d:8d:03:ff:40:64:bf:29:e3:5b:da:07:24:ed:d1:
         84:78:14:ef:ad:87:d3:20:e6:55:60:85:54:ec:44:8c:be:75:
         2c:e4:ec:f3:b7:76:e0:95:ea:80:94:71:5d:cb:60:ac:09:af:
         54:a1:66:5d:f0:05:2f:df:69:20:1f:82:0d:1b:f1:1e:9b:e7:
         ec:e7:aa:6c:01:f7:52:11:27:2b:2e:03:0d:68:b4:d1:b5:00:
         0d:8a:7a:d8:54:6c:1a:3b:a7:6e:d8:1c:b7:49:97:ac:2f:ff:
         bb:da:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:05 2026 by rpki-client