Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
File:                     m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json)
Hash identifier:          4vYzIElU9d4y0NGz2hK7blTAlT3at9VzP3+IO9kJKnA=
Subject key identifier:   1D:60:6C:89:DA:39:20:55:07:C5:88:01:B2:6F:51:16:37:78:CC:4E
Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
Certificate issuer:       /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
Manifest number:          0238
Signing time:             Thu 23 Jul 2026 03:48:59 +0000
Manifest this update:     Thu 23 Jul 2026 03:48:58 +0000
Manifest next update:     Thu 30 Jul 2026 03:48:58 +0000
Files and hashes:         1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: l9S4vqXP0/pNdG0Wjh2Gk3pEsgtPAFucwqUCzxADMBM=)
                          2: C872E06C705711EFBDEF9265C4F9AE02.roa (hash: 6fOOVMWHz8uhdua83reqWb8mHIqUK8rXDkUTcJOKXR0=)
                          3: C9819D5E705711EFBDEF9265C4F9AE02.roa (hash: 7EElla54PME6t43EGMTvu4HFDw83uuSq/ww5cJrQdjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl
                          rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91776C9, serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
        Validity
            Not Before: Jul 23 03:48:58 2026 GMT
            Not After : Jul 30 03:48:58 2026 GMT
        Subject: CN=6a618f2b-8418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:ef:32:0e:dc:73:a5:94:91:da:59:f7:11:
                    15:3d:02:41:9f:f6:69:1b:1e:e7:cf:b2:f5:b3:a5:
                    f8:12:45:0b:14:14:86:ee:7c:32:76:dc:eb:f9:75:
                    8d:6c:56:91:57:e1:b8:2e:4f:7d:bb:89:a9:ce:0c:
                    35:a9:1e:65:4c:59:7d:4c:ad:c7:a6:3b:1c:41:8b:
                    f1:81:fd:88:7b:cb:e1:b1:a0:fe:bd:2b:03:46:af:
                    1a:89:37:31:05:36:bd:6f:98:04:5d:e1:29:11:87:
                    60:77:1f:43:89:fc:cf:44:88:d5:f0:3c:80:11:99:
                    8e:07:fe:5a:b5:50:e6:ba:98:75:9e:20:36:1e:98:
                    1e:85:29:f9:da:39:b9:88:40:51:4f:17:8c:fd:a6:
                    13:b4:58:0e:be:18:00:67:c8:18:57:b5:a0:1b:5c:
                    38:10:89:5c:13:16:f8:85:33:cd:ea:a4:ae:4e:6e:
                    a8:67:87:b9:e7:4a:1c:91:45:89:50:89:16:12:f8:
                    ca:cd:1e:4a:f3:f8:63:b4:05:0a:b9:f9:63:e3:27:
                    87:3f:d0:e1:43:a6:bd:46:7f:c0:1a:19:ea:54:b9:
                    0e:9b:07:ed:ba:4a:d3:7c:5d:2f:58:e6:0c:19:21:
                    62:4c:56:84:71:39:4f:e4:13:6d:44:e0:a3:96:64:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:60:6C:89:DA:39:20:55:07:C5:88:01:B2:6F:51:16:37:78:CC:4E
            X509v3 Authority Key Identifier:
                keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5b:ad:5f:2f:b6:98:5c:8c:3f:5a:b2:25:68:18:6c:d6:c6:
         ef:c9:42:70:5f:1d:23:c5:20:98:53:bb:41:2f:15:95:9b:56:
         03:61:df:b0:5b:73:f7:dd:e4:33:89:b8:d3:29:1f:0f:15:68:
         fe:77:16:b8:54:d6:96:85:7a:ad:10:d1:45:6c:c2:f3:eb:99:
         3b:cb:af:4b:e4:14:07:b7:ac:15:86:62:59:27:b3:40:40:4d:
         02:f8:bc:81:52:b5:75:c5:ac:7a:9d:e4:da:2e:38:d1:2c:59:
         4e:89:8f:80:c4:1d:bb:5b:7a:bc:6c:10:c8:a4:a9:10:e2:b3:
         4a:53:fc:ba:ba:6d:bb:38:50:50:44:4d:17:b4:f1:d2:6d:3e:
         e7:ad:24:b5:33:10:ae:b9:81:b3:20:53:1a:68:88:cf:f3:5e:
         a7:bf:86:ed:a1:cf:c1:80:83:6c:a9:d8:2e:a3:cf:49:94:c5:
         11:71:f7:c9:d4:33:c2:80:8b:f4:1f:c7:23:3e:35:7b:a1:fc:
         e8:1f:33:eb:cc:97:2f:6e:c2:96:a1:19:dd:c3:60:a7:18:e3:
         f2:72:f5:a6:c0:b9:cd:dd:cb:e7:9f:a9:de:ac:f6:10:74:24:
         4c:26:d2:02:c9:a7:c1:7b:96:a0:be:41:5c:d6:77:a8:f1:28:
         44:7d:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:00 2026 by rpki-client