Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
File:                     tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json)
Hash identifier:          TcLfdAeA6UtUSFkLcgiIWeSsAz86xoPGiJFND/fLCeU=
Subject key identifier:   7E:C7:D7:79:7A:F5:44:22:8B:D1:E2:6F:E3:FB:74:FD:43:6A:97:6D
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Certificate issuer:       /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial:       0869
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
Manifest number:          085F
Signing time:             Wed 22 Jul 2026 21:24:38 +0000
Manifest this update:     Wed 22 Jul 2026 21:24:38 +0000
Manifest next update:     Wed 29 Jul 2026 21:24:38 +0000
Files and hashes:         1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: TOIn6hLUwnM4CGVr5idZG/baHtjJVMG0qhACGbOLQNk=)
                          2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: wjDSbRQKtPAWbh/Hzs+97MdegPLfvSS74VnDP3uybto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
                          rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
        Validity
            Not Before: Jul 22 21:24:38 2026 GMT
            Not After : Jul 29 21:24:38 2026 GMT
        Subject: CN=6a613516-1bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:35:bb:b9:2c:a7:df:e9:a5:eb:60:49:93:
                    5d:3a:33:b9:b4:91:e9:39:d1:9d:3f:e8:d6:4a:2e:
                    dd:d5:0a:8a:7b:bd:b1:bf:69:c3:d3:2b:09:bb:92:
                    ef:bd:2c:96:dc:23:22:86:4f:aa:7d:df:46:ab:4a:
                    a5:96:5f:2f:c7:7b:a1:6f:0a:d9:15:83:29:bd:f9:
                    1f:0e:3b:89:a2:87:a3:10:d9:ba:88:c4:1e:f3:b1:
                    77:33:49:46:cb:63:b2:0a:6e:ee:2e:44:5f:16:80:
                    3e:83:af:48:b7:d6:cb:b7:d8:3e:b6:9b:05:51:5f:
                    a0:40:1a:df:79:7d:f9:07:1e:6b:62:5b:d3:4a:b2:
                    ca:22:29:78:74:4b:39:53:df:b6:1f:9f:d1:a7:51:
                    b0:ad:9d:11:00:5e:c6:28:24:7b:c4:71:01:ba:4c:
                    c7:a0:c9:22:48:d0:b6:46:69:1b:05:59:28:44:34:
                    37:1f:bf:e6:88:fb:16:18:15:61:12:3f:10:78:c8:
                    df:3e:6f:42:5f:df:bb:48:ff:29:c0:58:f7:7c:ea:
                    75:be:06:75:72:f1:a2:e5:75:a0:56:c1:7c:ed:c4:
                    94:74:fd:80:4a:fc:9f:51:a5:59:d7:a6:73:d8:fd:
                    d7:d8:1f:cd:66:d3:31:fc:2c:47:59:76:a9:3c:33:
                    37:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C7:D7:79:7A:F5:44:22:8B:D1:E2:6F:E3:FB:74:FD:43:6A:97:6D
            X509v3 Authority Key Identifier:
                keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:77:4d:a9:52:db:56:bc:e7:55:8f:f6:5f:47:3e:2a:81:00:
         ec:d9:24:d6:ff:a1:19:15:92:66:c1:59:c4:f8:1c:27:cb:c8:
         d4:c7:ff:49:37:20:d4:71:e8:32:87:21:0f:fb:b5:a7:0a:53:
         d1:98:13:88:11:a8:89:dd:18:ef:34:3f:bf:44:79:0f:ff:11:
         7b:1e:8e:7a:3d:65:f1:68:90:02:3d:b6:92:07:2a:77:df:6d:
         08:e8:37:d6:88:68:b8:e6:b6:b4:2f:f4:19:8a:fa:7c:7d:ca:
         b0:2b:31:8d:81:62:d1:01:f6:0d:6c:20:fb:4e:02:f1:64:35:
         76:93:c1:17:6d:d0:9f:e9:56:14:3e:14:d2:0c:a8:a4:e2:dd:
         7a:eb:c2:57:97:2c:0a:f4:47:95:b4:43:bc:b0:2c:27:44:83:
         a7:13:13:1e:69:e0:5b:bf:02:21:23:fc:72:5d:e3:74:77:f7:
         d0:88:32:c4:c4:9a:45:96:4d:2c:cb:41:5a:ad:e7:5a:63:a9:
         73:1c:4e:3a:aa:cb:97:16:12:b3:4d:67:51:46:28:df:88:6b:
         5f:e4:c0:58:d1:77:1a:5d:cb:22:24:a0:cd:9a:2b:2e:d2:fb:
         53:27:6d:62:ff:d8:07:4a:30:3c:29:bf:c8:7d:95:d7:c8:7f:
         69:f2:ce:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:04:17 2026 by rpki-client