Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
File:                     szF8Z90Vsor6OYAEwZ0deLG_3oY.mft (raw, json)
Hash identifier:          IkK/ixXZj6DIkVc39l91OBml6pPpFYqWkQL2ay4FNhw=
Subject key identifier:   8D:27:5B:E0:52:CF:52:C1:89:D0:4F:6F:2B:85:0F:02:C0:C9:CD:4E
Authority key identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86
Certificate issuer:       /CN=A91736F5/serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
Manifest number:          6A
Signing time:             Thu 23 Jul 2026 09:54:26 +0000
Manifest this update:     Thu 23 Jul 2026 09:54:25 +0000
Manifest next update:     Thu 30 Jul 2026 09:54:25 +0000
Files and hashes:         1: szF8Z90Vsor6OYAEwZ0deLG_3oY.crl (hash: OJBizPgE7TKy960PIa/8Y5LVtAGo/eGByvMSOuhRSAU=)
                          2: DF325558E6EE11F09FA64894636F56BC.roa (hash: vEOW1RXhvztzL2HV82vJS53AY6+1wricRf5vvLZfhIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl
                          rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736F5, serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
        Validity
            Not Before: Jul 23 09:54:25 2026 GMT
            Not After : Jul 30 09:54:25 2026 GMT
        Subject: CN=6a61e4d2-2a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:34:3e:6f:ff:f3:2f:6f:bf:9b:cf:dc:93:
                    5a:66:c1:ff:17:b3:27:14:03:47:83:c2:06:e2:04:
                    b7:94:97:be:de:e1:b4:cc:c1:7c:e3:ca:62:61:64:
                    83:52:bd:64:27:62:11:17:c5:4d:3c:86:9e:b0:ae:
                    ac:b1:89:ef:fc:05:01:b8:d6:55:83:47:21:84:9b:
                    19:5c:c6:a6:71:fd:fc:84:90:6a:a7:e6:a2:6b:8e:
                    d2:ac:87:a4:f5:d7:cf:dd:f1:1b:02:a3:a8:43:2c:
                    25:d2:59:28:80:3c:7a:66:85:32:a7:2f:d0:2d:39:
                    e3:0b:e4:56:32:25:52:d0:6f:bb:6e:f4:71:37:ec:
                    25:af:58:47:cf:9b:2f:45:f6:eb:6d:d2:8b:d8:09:
                    25:40:a5:60:71:60:bb:9e:c4:04:78:8a:25:2b:b5:
                    c2:69:61:e3:b5:a2:bd:5f:c2:18:cf:00:1e:0a:6e:
                    d5:e0:c3:85:46:f6:fb:0a:83:75:e7:39:b8:40:03:
                    f8:61:b0:c9:6f:be:6e:c9:61:a6:6b:3c:75:da:b1:
                    b0:56:0c:b8:30:6f:aa:f3:79:db:64:ec:5e:8c:39:
                    46:32:b0:5c:57:60:0e:76:b4:97:a9:8d:9f:85:af:
                    87:2a:eb:6b:80:3e:1b:3c:16:48:83:96:25:12:57:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:27:5B:E0:52:CF:52:C1:89:D0:4F:6F:2B:85:0F:02:C0:C9:CD:4E
            X509v3 Authority Key Identifier:
                keyid:B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:43:85:25:95:40:d9:e6:59:8e:b5:be:b9:24:53:6c:44:
         ea:b6:71:01:fe:8a:f8:bb:aa:dc:15:1c:6f:2b:0c:96:5c:b6:
         88:59:e5:56:10:94:b6:1d:e2:d2:db:95:f1:dc:54:9f:02:fe:
         c9:93:5f:a4:64:80:10:25:32:88:7d:90:6c:9a:e3:9b:8b:e4:
         d9:ea:13:4d:2a:19:8b:27:92:27:f7:a2:76:d6:18:6a:d5:f8:
         49:9e:65:99:c5:13:a9:ea:b7:10:d0:12:f8:2b:96:64:3a:a9:
         df:2e:18:12:2f:78:0b:25:95:43:57:06:85:96:e8:7b:ba:7f:
         cc:62:b5:30:c5:8f:71:a8:79:0a:9c:7f:55:40:e1:a0:15:ee:
         3b:ba:46:ba:d7:4c:5f:3b:f0:b8:e2:24:1e:15:38:05:73:5d:
         5f:c7:a3:74:82:88:f7:06:16:52:bb:ae:29:62:92:52:4e:5b:
         ac:57:b6:b8:93:8e:ca:9c:9e:48:3d:83:4d:70:f9:60:db:61:
         3f:4e:a4:8d:27:b6:1f:07:dd:ac:e5:46:e6:b0:57:47:11:e2:
         e6:8c:c9:58:93:52:24:76:6c:18:1c:01:8e:56:5e:c7:1c:2e:
         44:f3:f2:77:6b:6d:25:94:d6:93:14:8f:7e:16:0e:2a:c6:4f:
         84:24:6c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:16 2026 by rpki-client