Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File:                     h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier:          Xyrr+Hp0BVPIwMEvA3j/JMHszEqu2V04VZ6eiCDaHBw=
Subject key identifier:   10:E4:42:88:A7:EE:9C:C3:91:7E:50:66:DD:62:9D:E7:B3:40:50:51
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer:       /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial:       0475
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number:          0461
Signing time:             Thu 23 Jul 2026 01:03:18 +0000
Manifest this update:     Thu 23 Jul 2026 01:03:18 +0000
Manifest next update:     Thu 30 Jul 2026 01:03:18 +0000
Files and hashes:         1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: E5GlgR9ZHAksagWegAPNIFX0Qp6B9AIi3/aoy5Dw0rA=)
                          2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=)
                          3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=)
                          4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
                          rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141 (0x475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
        Validity
            Not Before: Jul 23 01:03:18 2026 GMT
            Not After : Jul 30 01:03:18 2026 GMT
        Subject: CN=6a616856-0e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:d6:a0:14:67:49:27:7a:a2:7a:a5:a6:c9:
                    6a:7c:6e:0c:01:a7:07:a3:b0:aa:61:18:3d:f7:6d:
                    f7:a1:c3:fc:14:49:c5:99:d0:6a:ed:ec:fe:34:94:
                    5b:30:e2:79:7c:56:65:a6:a0:47:45:5d:4b:49:41:
                    39:22:94:8e:8d:16:94:fd:18:e9:2f:02:22:76:8d:
                    29:85:c0:83:c7:64:db:a6:c7:55:ed:bf:6d:2f:f3:
                    e3:7f:0d:9a:33:d6:20:a9:3e:1e:81:43:27:73:52:
                    8b:34:b6:72:3f:26:18:13:60:f9:26:bb:bc:e9:05:
                    74:45:28:26:b0:b1:f6:69:80:0b:bb:2c:f6:fc:74:
                    40:13:5e:cf:f4:92:c6:ad:1d:84:01:0e:ca:d8:35:
                    9e:42:4b:9f:2c:20:19:42:7a:18:93:91:f7:dd:14:
                    2b:4a:5e:05:e9:13:21:51:d8:e8:42:ea:4c:b3:d2:
                    db:33:10:45:78:be:ae:de:75:56:16:f5:20:1d:96:
                    b9:f6:91:62:6c:3e:7d:6e:71:8d:bf:91:57:6e:f7:
                    55:e2:3f:40:19:89:46:01:c7:fa:9d:3c:2c:93:6d:
                    ab:b0:9a:2c:32:d3:6d:15:84:d8:40:be:7a:76:5b:
                    22:54:be:5e:36:b1:7c:9e:62:7c:32:4f:ff:9d:d5:
                    27:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E4:42:88:A7:EE:9C:C3:91:7E:50:66:DD:62:9D:E7:B3:40:50:51
            X509v3 Authority Key Identifier:
                keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:32:17:24:b1:a1:f6:22:5d:76:0a:01:c2:58:aa:fb:ba:d3:
         5f:7d:69:aa:11:df:71:37:7e:0a:0b:45:a2:cc:51:38:87:a6:
         c4:d0:82:37:07:70:cb:90:86:4b:30:cd:6f:06:e6:45:6f:4b:
         6c:cb:31:bf:f3:ad:68:a2:09:93:30:cb:cc:e9:23:d4:2c:bc:
         17:e6:c1:1f:ed:5a:c2:79:70:d1:99:c8:97:2c:50:d0:69:5a:
         53:65:42:eb:46:61:73:bd:7b:da:32:65:6f:8f:2a:95:c4:ba:
         28:05:52:f6:d5:92:4d:4a:76:63:1a:e9:4b:2a:40:13:15:45:
         f4:91:a4:bb:4e:8c:e0:b3:ec:c8:57:1e:b0:4e:6b:d3:59:ca:
         dd:33:79:00:dc:3e:54:94:c4:60:08:07:24:ac:c5:4e:96:7b:
         13:07:ec:64:16:12:ce:8d:3d:7b:b7:41:43:ed:17:43:46:55:
         65:b2:a1:e4:76:2e:20:c8:aa:32:0e:d4:11:03:89:4b:08:a2:
         ad:ae:ae:1b:81:f1:66:20:ba:b7:9c:2d:2d:be:11:fc:b7:55:
         d7:88:71:c5:21:17:d6:6b:c4:b3:93:68:0d:35:f6:ac:2d:5e:
         f7:d9:41:51:c6:21:12:a9:7e:14:69:98:ce:75:0a:99:31:ff:
         65:0e:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:39 2026 by rpki-client