Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
File:                     aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json)
Hash identifier:          uT2jBJSDDuryGO0rF2sGGfkteUXWEwF9TV8Yvg8k8W8=
Subject key identifier:   79:F1:A8:7D:67:C0:40:BF:F8:F7:D5:B5:3A:FF:8E:08:53:37:68:A0
Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
Certificate issuer:       /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
Certificate serial:       0813
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
Manifest number:          080A
Signing time:             Wed 22 Jul 2026 21:47:33 +0000
Manifest this update:     Wed 22 Jul 2026 21:47:33 +0000
Manifest next update:     Wed 29 Jul 2026 21:47:33 +0000
Files and hashes:         1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: 3ghsoS1mR2CkAMbKJt0RyzbwEEPM/VLXKYynWfDXSAA=)
                          2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: +dqj5dUwvw+xC7YK9g1ktDdByBUDI++m9TD2lt9C0Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl
                          rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2067 (0x813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
        Validity
            Not Before: Jul 22 21:47:33 2026 GMT
            Not After : Jul 29 21:47:33 2026 GMT
        Subject: CN=6a613a75-4cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:75:b3:87:43:73:53:5d:db:e8:e8:7d:b8:cc:
                    9e:47:b5:e3:79:d2:7d:e5:0d:88:a0:5d:8b:ba:46:
                    c0:84:97:8e:a7:34:1e:4c:4f:bd:f1:3f:75:42:a0:
                    0e:df:96:93:01:18:04:3d:92:d9:7b:12:99:81:fc:
                    15:40:70:e2:d4:a6:20:c1:88:60:87:ff:6e:06:19:
                    8f:57:d6:5c:a8:26:35:ca:80:22:c6:1b:ef:b0:a2:
                    0f:e0:9b:e3:b6:fb:68:0d:3b:ee:05:bd:18:ec:a3:
                    3b:1b:d7:99:7b:5f:e2:f4:77:6b:43:5a:f1:85:a7:
                    6a:53:d6:4d:66:2e:d2:b5:80:16:ef:7c:eb:f2:ae:
                    81:da:43:1a:60:c6:39:a8:d8:2d:35:8a:d3:bc:1a:
                    e5:9a:17:79:db:61:30:d8:68:98:1e:b3:e9:15:57:
                    ff:96:36:c4:80:0f:88:ae:de:90:d6:72:8a:c9:e4:
                    f6:dc:f8:e4:fa:50:a7:6c:44:17:ec:8b:18:e2:e8:
                    76:ee:96:82:c1:e4:20:bc:0b:58:a3:3c:c6:f8:55:
                    d1:49:55:5e:e3:49:fe:c9:58:c6:67:59:2c:9a:bb:
                    43:e4:43:45:ca:6c:67:df:d7:a3:f8:0c:0a:23:21:
                    02:82:7a:99:64:70:b9:f8:97:43:00:91:49:c0:70:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F1:A8:7D:67:C0:40:BF:F8:F7:D5:B5:3A:FF:8E:08:53:37:68:A0
            X509v3 Authority Key Identifier:
                keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1f:ef:8a:cf:8a:76:67:c1:47:25:0d:8a:15:78:fc:2b:92:
         5b:52:57:ed:d1:5e:80:3f:52:95:7b:ac:ce:7c:d1:1a:50:38:
         79:35:aa:1e:3f:9e:af:a6:4e:d2:ea:56:65:af:ef:15:5f:b4:
         3a:84:cb:e4:7f:ee:b5:fe:4f:74:64:0f:65:bd:f1:59:39:43:
         d2:67:76:5c:4f:1e:64:33:ea:c8:63:07:96:d7:32:d2:af:12:
         77:22:3a:74:9d:12:17:04:39:b3:dc:71:85:40:3e:4d:84:78:
         20:20:07:bb:12:66:8d:7d:5e:fb:c7:79:e7:00:35:35:e3:8b:
         45:7d:fb:57:de:1f:89:8c:ad:ce:fd:17:18:06:f6:3d:f8:79:
         28:7b:eb:37:24:a2:b5:e9:3c:b7:f6:b3:24:31:60:94:3d:d1:
         3c:10:cb:41:b8:e1:84:a5:d1:7c:47:9a:2b:b7:23:fa:da:83:
         f9:e0:f0:bd:2e:4c:a0:95:c4:72:8b:89:e1:0c:47:85:00:5c:
         2a:ec:eb:50:96:a9:a6:b3:60:d0:b9:6a:24:7a:d7:c2:0a:21:
         0e:ff:78:69:9b:a0:84:11:15:9e:7f:e4:4f:28:25:7f:00:89:
         54:e9:8c:66:cf:b4:15:cb:44:0b:3a:fc:bb:f1:ef:d6:7c:72:
         5f:fc:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:04 2026 by rpki-client