Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft
File:                     _rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft (raw, json)
Hash identifier:          BfTI8y/GrZmEpiwLG2aQ19+d4r33Adrd+9ZG1NZOLkw=
Subject key identifier:   DD:33:53:C4:C5:AC:8B:BA:56:D6:7B:FF:9D:3C:F5:84:CA:4A:3C:FE
Authority key identifier: FE:B9:53:5D:9E:41:71:D8:7A:8B:F6:F6:CB:61:D2:31:BF:2F:36:2C
Certificate issuer:       /CN=A91665DC/serialNumber=FEB9535D9E4171D87A8BF6F6CB61D231BF2F362C
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft
Manifest number:          17
Signing time:             Thu 23 Jul 2026 11:05:11 +0000
Manifest this update:     Thu 23 Jul 2026 11:05:11 +0000
Manifest next update:     Thu 30 Jul 2026 11:05:11 +0000
Files and hashes:         1: _rlTXZ5Bcdh6i_b2y2HSMb8vNiw.crl (hash: uyVvDoOyjele1TxViULFiYPqBH5OlYP12LRyEq1zMO0=)
                          2: 407DE8A2653B11F19447D4298B47A888.roa (hash: 4uGgyHi+pahZitNop8GwY6mUioENqBPhA9aD2Qxg/D0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.crl
                          rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91665DC, serialNumber=FEB9535D9E4171D87A8BF6F6CB61D231BF2F362C
        Validity
            Not Before: Jul 23 11:05:11 2026 GMT
            Not After : Jul 30 11:05:11 2026 GMT
        Subject: CN=6a61f567-f4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:bd:77:77:97:fb:84:05:b7:67:76:49:d5:
                    6b:c6:06:0e:e6:23:ec:c9:78:c7:7d:52:04:c5:21:
                    25:29:b7:5b:10:65:b1:6f:d0:f5:7f:36:42:f2:c1:
                    2d:c6:36:aa:48:a3:7e:5e:37:96:81:82:c7:52:42:
                    38:99:a5:f4:54:7f:e7:0e:57:72:34:92:bb:ab:7f:
                    ad:1d:21:9f:fd:13:c2:90:b7:cd:6f:d1:cb:03:a7:
                    40:26:80:c3:5a:2c:ef:aa:07:e0:a8:e0:27:c1:c4:
                    c7:f4:8d:36:d1:ca:55:8a:1b:75:8f:ac:18:df:4f:
                    9a:5e:dc:a0:03:19:a2:b2:c2:55:eb:2f:43:13:32:
                    9e:c7:5b:65:d6:c7:eb:ee:87:dc:0e:81:35:2b:54:
                    68:7d:90:ba:11:33:13:29:10:92:71:a3:6d:30:e1:
                    c9:60:6e:bf:b9:b5:28:70:55:b2:8d:15:19:4b:2a:
                    74:78:45:56:c7:70:9e:6e:06:20:69:db:b7:f9:f4:
                    ca:ac:1f:47:81:bc:aa:a2:b2:87:00:28:24:76:f6:
                    40:a4:a2:93:ca:45:cd:7f:1f:c3:e6:87:b3:c4:46:
                    2c:96:25:6a:72:7c:e2:d7:94:3f:53:e0:05:06:9a:
                    5d:93:82:bb:03:71:7e:44:98:a8:6d:86:d1:14:1e:
                    f8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:33:53:C4:C5:AC:8B:BA:56:D6:7B:FF:9D:3C:F5:84:CA:4A:3C:FE
            X509v3 Authority Key Identifier:
                keyid:FE:B9:53:5D:9E:41:71:D8:7A:8B:F6:F6:CB:61:D2:31:BF:2F:36:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a3:78:79:82:6c:38:df:3c:31:23:ef:0f:85:87:85:c1:b1:
         f2:76:41:1b:81:11:16:3e:b7:56:33:89:5c:dd:c3:9b:fd:cf:
         14:de:82:04:c9:b0:07:98:2e:e9:af:a0:76:3a:70:21:c5:8f:
         fe:e4:cb:f2:27:64:a5:8c:0e:5e:7f:22:60:bb:c9:2d:c2:2f:
         10:10:98:df:63:92:cb:35:bc:1f:89:77:4e:28:2d:85:d6:03:
         33:90:3a:8c:02:20:5d:44:38:07:04:e5:76:4d:4d:b1:70:3a:
         07:29:0a:f3:8d:d8:2d:aa:96:c5:21:07:e9:cf:06:16:c1:92:
         22:ce:ff:50:8c:bd:dd:af:ca:54:90:9e:a5:f8:6e:96:f6:62:
         0e:c7:ab:b2:dd:4b:c8:56:3e:94:de:b5:d9:de:55:33:4a:91:
         4e:b8:d8:bd:d7:48:85:fa:18:55:f8:d5:ae:ef:9e:d1:a3:2b:
         83:e2:fe:50:4e:e5:ea:72:09:a4:46:45:21:da:4e:ca:ff:df:
         9e:24:e2:0d:92:3e:12:28:10:0a:9b:cc:84:0a:b6:70:99:bc:
         de:66:18:3e:ae:86:29:35:46:11:30:c2:a4:08:a6:9b:81:7c:
         75:4c:3e:36:66:e8:67:03:1b:71:4f:e8:4d:57:ed:a4:0b:66:
         5c:07:ff:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:41:29 2026 by rpki-client