Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
File:                     jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json)
Hash identifier:          XEr7xgpv5gyMvBDGBB1i+TPdZc+G7RtM2Wo7EtDNZEs=
Subject key identifier:   F3:AE:C4:49:5C:36:75:9C:CB:89:5D:05:0C:13:F0:EA:70:AF:B0:D0
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Certificate issuer:       /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial:       01DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
Manifest number:          01D7
Signing time:             Thu 23 Jul 2026 04:58:16 +0000
Manifest this update:     Thu 23 Jul 2026 04:58:16 +0000
Manifest next update:     Thu 30 Jul 2026 04:58:16 +0000
Files and hashes:         1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: LzDyrbDVVvhokoYiahGD4zpfyybCJSraUdyimBDmhJw=)
                          2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: maTY8uJW9ok2Nd5jKcr1wzbCRMfOdEbNppY27f+QdBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
                          rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
        Validity
            Not Before: Jul 23 04:58:16 2026 GMT
            Not After : Jul 30 04:58:16 2026 GMT
        Subject: CN=6a619f68-89fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:53:ba:ab:bc:c2:af:f8:c7:66:bd:f1:4a:
                    96:a3:35:99:ee:81:8a:99:29:9c:02:93:df:fc:05:
                    9a:30:8b:0a:81:c8:01:8e:02:53:51:b2:f6:53:61:
                    30:80:54:15:34:aa:00:81:a4:d7:9c:e2:9d:fd:bf:
                    94:29:ca:64:1a:de:2f:da:db:dc:66:b9:fc:6c:a1:
                    e6:f2:6e:52:71:27:1e:6b:a7:34:f5:f4:e8:7a:97:
                    37:92:ae:8e:8f:c2:f2:9a:ed:aa:5c:4f:be:31:22:
                    b3:e3:14:e2:ec:3f:d4:b5:ca:2b:65:7b:87:04:12:
                    41:14:c5:ee:ab:9b:b0:22:ee:e7:e9:4e:cb:87:90:
                    10:9f:57:ff:f8:76:e2:c3:b8:09:63:39:c2:9c:dd:
                    9e:23:7f:80:5c:c2:54:4f:de:9e:22:b5:ac:06:fb:
                    f5:1f:0c:6c:13:93:ed:fd:e9:3e:75:25:ca:07:97:
                    e0:b5:d2:66:a1:f2:50:27:a4:8c:3d:1d:e9:4a:26:
                    8d:b8:a1:b7:98:97:24:85:38:8f:ba:f0:2f:d3:b6:
                    b1:72:f7:6c:b4:40:f7:b4:fa:d0:66:fb:d6:6d:5e:
                    48:42:ce:db:ba:31:f8:ba:a0:a8:ee:01:05:3d:0b:
                    89:4c:8c:82:89:a1:8f:80:97:cc:13:ad:3b:7f:d2:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AE:C4:49:5C:36:75:9C:CB:89:5D:05:0C:13:F0:EA:70:AF:B0:D0
            X509v3 Authority Key Identifier:
                keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:ef:e8:b1:4b:c6:a0:57:77:fe:c9:30:a2:a5:f5:68:bb:
         0e:a3:8f:64:5b:1f:0d:5e:08:e8:66:36:39:18:c4:67:b8:ad:
         9a:4a:03:8b:15:d4:1a:db:25:51:0e:42:c9:e5:54:f6:92:01:
         0a:50:13:97:7e:01:48:ea:00:1b:93:12:ac:b5:74:a7:ed:3d:
         85:08:51:04:bc:34:99:27:bb:25:47:fc:58:ea:13:79:e9:f3:
         6b:bc:9b:3d:f9:4e:7d:ba:d4:cd:6f:9a:52:90:18:d1:04:1e:
         3c:57:24:79:fc:38:b6:6a:be:fb:96:9a:57:2b:a6:5e:e5:52:
         20:1e:7d:04:96:a7:dd:cc:62:3d:04:02:3c:da:06:2c:0b:75:
         62:c7:67:37:c5:e2:73:eb:3c:ac:c7:0d:ed:2c:61:95:36:ac:
         b6:9c:68:00:32:ae:05:1c:48:71:09:bc:17:a4:cd:e7:43:68:
         2d:17:c6:bb:57:66:3f:d8:7d:13:a0:8f:ff:42:37:ef:27:fb:
         6d:e4:e3:29:dc:ae:8a:be:46:39:a1:80:69:90:57:33:59:6c:
         16:d6:55:a5:15:9b:cd:86:fc:9d:4d:b5:c8:c6:01:50:de:13:
         02:e1:5b:39:be:f1:2a:fc:7e:d1:37:4d:ad:a1:3c:7c:8b:51:
         28:01:3a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:56 2026 by rpki-client