Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
File:                     mMpJTfad7fYW5B0FmhTn9oec37M.mft (raw, json)
Hash identifier:          l9ha4MZ3DyRWO8q24MJiWkcgmoyesho32FCR1uuOSsg=
Subject key identifier:   3A:16:7C:C3:A7:D1:30:44:02:8E:A3:F6:02:FA:3C:52:C5:25:12:CF
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Certificate issuer:       /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
Manifest number:          013B
Signing time:             Thu 23 Jul 2026 07:07:16 +0000
Manifest this update:     Thu 23 Jul 2026 07:07:16 +0000
Manifest next update:     Thu 30 Jul 2026 07:07:16 +0000
Files and hashes:         1: mMpJTfad7fYW5B0FmhTn9oec37M.crl (hash: BWrNtOOQEYREXIdypHKqXdcr1fCab0/kkPEM2A8d/mc=)
                          2: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (hash: mdzMDwj2X3Ua3FnRlc2HjSVQDPO8dF0xSRBjaAA05Ao=)
                          3: F5BB256ECE9611EF97EBCF65C4F9AE02.roa (hash: A2j9A1LDxFn91KRfJQkzZYzQlvghcjV9LwvRtdCgpqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
                          rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91879AC, serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
        Validity
            Not Before: Jul 23 07:07:16 2026 GMT
            Not After : Jul 30 07:07:16 2026 GMT
        Subject: CN=6a61bda4-7d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:7a:ce:ac:89:7c:46:bd:42:05:34:e2:c6:
                    90:48:27:ef:69:80:94:b6:0b:a5:2e:77:d9:c1:1c:
                    42:40:3e:9f:61:3d:ab:9c:d7:b5:3b:4f:b5:2f:df:
                    ae:f1:bc:91:25:4b:dd:ea:79:30:9d:46:79:9a:74:
                    64:52:b8:c3:dc:04:8b:13:e1:27:e4:c5:9f:35:13:
                    d8:b5:cb:88:98:54:d9:ec:df:1d:8b:b8:44:63:87:
                    d2:6f:e6:e0:bf:df:2e:3a:50:b6:ce:40:fc:cf:fa:
                    e6:66:58:27:2e:91:c2:84:1b:5e:3c:f0:9b:c3:7e:
                    b4:93:ae:ee:0d:09:1c:76:24:41:47:43:1a:f7:a0:
                    c8:39:de:5b:66:cc:45:cb:c2:01:a9:4a:c4:24:75:
                    b9:f5:d4:da:59:b9:72:d5:dc:f5:54:ec:fc:4f:db:
                    b3:14:ea:b8:90:19:4d:0f:a5:c4:13:87:62:7a:f3:
                    c7:a3:45:ff:90:59:2f:ba:31:b1:9b:ea:46:2e:ad:
                    f2:d7:31:de:41:6f:7a:08:3f:27:56:b4:af:27:61:
                    23:25:99:37:2b:e4:91:fb:95:8c:c9:19:38:77:51:
                    54:02:5c:01:1b:fc:07:44:a7:f3:a3:93:30:38:05:
                    48:3a:97:1e:ad:a6:9d:f8:7f:b3:fa:9f:b8:bc:93:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:16:7C:C3:A7:D1:30:44:02:8E:A3:F6:02:FA:3C:52:C5:25:12:CF
            X509v3 Authority Key Identifier:
                keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:07:a9:e3:86:1e:cd:f3:d9:e4:62:d9:6b:39:0d:c9:bc:aa:
         69:fc:9e:d6:0d:90:ea:c8:f4:79:94:1a:24:58:ce:ab:c7:9f:
         3b:23:8a:6f:c7:21:03:8a:e4:d1:29:04:f1:6c:0e:4f:68:24:
         0a:ba:8c:9a:37:88:cb:ec:c0:bd:e4:34:f9:15:bd:16:16:93:
         24:7e:3a:66:13:88:c5:bd:7a:24:74:ea:e0:38:7a:36:14:0d:
         20:28:c2:13:4f:81:da:2c:1d:7f:27:35:29:a7:39:64:1a:90:
         3c:ec:a4:18:0f:87:e1:cb:1d:14:5a:0d:2e:8b:79:2d:ad:c8:
         a1:46:85:b1:53:e4:8c:94:e7:b3:9b:89:1c:41:17:a3:35:cd:
         00:91:d9:a4:e8:06:17:e9:05:25:f0:67:ed:3d:82:a3:2f:db:
         de:51:ee:ab:a1:78:ac:4f:a4:c1:ed:e9:dc:59:c3:1c:f2:35:
         f2:a0:d6:fd:eb:a7:ab:a9:4f:9c:ec:8c:bc:5c:e9:1a:a8:1a:
         17:ac:64:3c:74:1c:e0:2a:55:10:ab:a6:81:30:35:a5:be:98:
         97:df:f3:55:68:d3:19:31:aa:ee:ec:86:a3:24:37:76:ec:04:
         d7:0f:db:aa:6c:48:c2:d4:d1:89:b2:f6:05:bf:97:13:79:f2:
         7a:da:a5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:02 2026 by rpki-client