Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
File:                     529w4WvXl_FHD9HglUZu2f_XC94.mft (raw, json)
Hash identifier:          2Lhb9tWhzKbEwFaRF3UkNG0DlrV0h8Y0VQo/vVaYri4=
Subject key identifier:   7D:F6:E6:F8:F8:C5:42:08:0E:98:A2:61:8B:61:F1:94:20:FC:E7:CB
Authority key identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE
Certificate issuer:       /CN=A914B6D8/serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
Manifest number:          86
Signing time:             Wed 22 Jul 2026 18:18:08 +0000
Manifest this update:     Wed 22 Jul 2026 18:18:08 +0000
Manifest next update:     Wed 29 Jul 2026 18:18:08 +0000
Files and hashes:         1: 529w4WvXl_FHD9HglUZu2f_XC94.crl (hash: o6kREa2pMv3j6KHDvyk0H/TCdeJ3I9VR13UAYd/xQRc=)
                          2: 551B0760BEBD11F0AD50D23AC4F9AE02.roa (hash: 5yaxUN0WdNPJcEJkf69PFh/CxSo68teL13Z+Mjg2H+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl
                          rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B6D8, serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
        Validity
            Not Before: Jul 22 18:18:08 2026 GMT
            Not After : Jul 29 18:18:08 2026 GMT
        Subject: CN=6a610960-780f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:a9:73:b6:ab:3b:12:a3:e5:21:d7:67:a2:
                    99:4b:6e:1b:a3:a1:03:87:b1:cc:d1:4f:96:ea:d6:
                    72:11:84:22:05:a1:5d:9c:ec:c6:fa:78:92:cd:49:
                    45:26:7b:b1:f8:6d:8c:10:17:82:b2:25:9e:26:21:
                    94:45:fb:46:c9:d0:b6:0a:5b:f3:4c:cc:52:b4:df:
                    c6:75:1f:ac:92:16:47:bd:0f:db:ea:40:c2:cc:e6:
                    2f:d2:04:b6:3b:d9:ff:69:d1:24:03:e3:37:ed:7f:
                    b3:a8:4a:22:6b:e1:ec:5d:5a:7a:f0:74:e8:7d:59:
                    6c:35:dd:fc:0e:72:36:db:c4:5a:42:44:cd:0d:6e:
                    17:2e:c6:5d:47:87:14:dd:c6:2a:ea:c4:81:62:50:
                    22:e9:1c:b9:ca:e1:7d:3d:c4:c4:fe:23:63:c9:b4:
                    06:73:c8:04:c6:4e:0f:31:18:27:54:15:f6:fc:67:
                    32:e5:af:93:cb:79:40:cd:f5:f5:c3:58:ad:fe:77:
                    a9:24:39:63:3e:2a:69:24:19:83:0c:74:4d:a4:e5:
                    5a:de:9a:2d:31:8d:b8:ad:c7:b0:b5:f4:42:62:62:
                    bc:15:d3:88:1c:20:79:f0:0a:55:8c:5f:c6:0e:7b:
                    76:a1:cb:51:bc:1e:92:3e:04:ab:ee:a3:52:41:94:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F6:E6:F8:F8:C5:42:08:0E:98:A2:61:8B:61:F1:94:20:FC:E7:CB
            X509v3 Authority Key Identifier:
                keyid:E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:88:29:02:24:0d:80:02:15:ae:3b:c5:47:d8:94:a8:f5:cc:
         1e:7d:44:f8:97:10:61:fb:45:d0:cd:86:dd:f4:6d:8f:15:be:
         71:84:93:f6:69:c4:cf:c2:ed:c3:e4:24:31:e3:d7:3d:b3:93:
         38:c4:cb:f6:f3:64:d7:8b:a3:ac:6a:65:84:b9:a8:b8:04:0d:
         e9:04:f3:66:1c:67:ed:64:f1:73:9e:36:89:07:b9:01:0d:9d:
         11:f2:bd:0d:44:1e:91:83:1d:8f:0a:bd:9b:52:5d:cb:9d:3a:
         8c:2e:ca:5a:f5:88:0b:4e:de:31:38:70:1f:0a:d7:86:8b:00:
         7e:f9:1b:d7:fa:a1:4f:6c:34:1f:4f:ba:e1:15:fd:26:ce:dd:
         e1:44:ab:e1:2e:29:6d:19:15:8f:47:57:f2:5f:5f:97:22:02:
         96:2e:c8:77:95:ea:86:d2:b3:37:33:70:41:a5:49:09:2b:b2:
         c7:c9:46:66:b1:d6:49:92:45:1a:bd:6e:1c:00:b6:e3:a4:5b:
         fd:7a:f2:ff:34:bc:40:45:f0:47:28:39:3f:42:b3:f5:87:da:
         06:dd:a6:2d:31:b1:71:9f:ee:06:c9:74:e7:92:a9:b4:ed:50:
         8c:12:33:fc:e5:82:8e:b9:ef:87:16:a8:43:e1:c3:9f:2a:d9:
         5c:d7:42:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:47 2026 by rpki-client