Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
File:                     1bTWxIC76WuryHIkhQJdTEX-x4o.mft (raw, json)
Hash identifier:          0VAdzr+nvtoTIhiDEjiKu8WyxDH2GCdt3rQFx/CbaWg=
Subject key identifier:   50:13:E1:F2:26:FF:A2:76:9B:3B:70:A3:59:82:85:01:40:61:88:C6
Authority key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
Certificate issuer:       /CN=A91907D3/serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
Manifest number:          C0
Signing time:             Thu 23 Jul 2026 08:53:18 +0000
Manifest this update:     Thu 23 Jul 2026 08:53:18 +0000
Manifest next update:     Thu 30 Jul 2026 08:53:18 +0000
Files and hashes:         1: 1bTWxIC76WuryHIkhQJdTEX-x4o.crl (hash: UlcxSOUyv1hhWSWUiAHjlxPv8GucDxCe9l9XgUqcnXE=)
                          2: 38361A086DD311F08BB89272C4F9AE02.roa (hash: uh6KJ/OW/GxbSk2l8pUK2EK9DN4vYvajaw+WfmQZPV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl
                          rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
        Validity
            Not Before: Jul 23 08:53:18 2026 GMT
            Not After : Jul 30 08:53:18 2026 GMT
        Subject: CN=6a61d67e-110d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4b:c7:bb:8c:e8:50:d6:45:5c:a0:0a:34:df:
                    7d:53:8d:e4:01:44:de:6c:84:26:c0:13:d9:71:bd:
                    42:b9:76:49:cb:d8:3a:44:63:87:aa:34:59:1f:a4:
                    0a:e5:17:ba:31:51:39:50:f0:9d:f2:72:94:cc:34:
                    73:ef:cb:ac:90:97:fb:3f:ac:e0:43:c7:78:58:1e:
                    55:c9:b0:ce:8f:6d:96:3e:a1:59:51:b6:ed:51:70:
                    cc:a9:4e:56:30:d6:96:52:66:c1:fc:53:13:70:eb:
                    62:04:9a:a2:00:d5:6a:10:bd:a5:b8:cc:e7:74:38:
                    d1:1d:c6:dc:bf:5c:e1:6a:b4:20:d3:87:bd:de:24:
                    a9:88:da:de:aa:ce:88:a4:99:5f:96:16:95:48:51:
                    1b:75:a6:25:c4:b6:ff:87:2e:7a:5c:60:ac:64:43:
                    6c:4d:0c:16:6c:aa:34:a3:af:5f:e3:ea:36:c0:0f:
                    d7:f6:1e:82:6f:ed:6c:da:56:5a:42:34:e9:f4:82:
                    20:ac:9c:7b:aa:74:2d:0f:63:4f:d9:36:da:1a:17:
                    d0:c4:f1:e5:fa:8b:23:9e:af:0f:6a:87:70:75:3b:
                    73:da:e2:d6:c5:73:29:16:fe:a5:02:e2:63:11:86:
                    01:5f:8d:de:0a:b4:a1:8f:f0:36:c1:2f:f1:27:ff:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:13:E1:F2:26:FF:A2:76:9B:3B:70:A3:59:82:85:01:40:61:88:C6
            X509v3 Authority Key Identifier:
                keyid:D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ec:74:d5:bd:34:8a:9d:48:63:28:b4:fe:b7:60:7b:a1:85:
         17:44:f8:e8:ca:e1:9f:7a:ea:73:4e:8d:0f:86:6e:ed:f2:9e:
         86:3c:66:7a:a1:3b:34:79:00:32:fd:cb:6f:e5:99:f0:6f:37:
         da:8c:74:7b:30:1e:2a:d2:54:99:df:4b:04:fa:ee:d1:04:51:
         7f:e6:f4:b0:be:d0:30:48:10:8a:d5:67:bf:7f:75:17:e8:f6:
         84:0e:d9:9c:02:e0:70:4b:c8:6d:1c:21:85:d2:61:6f:50:c6:
         e3:09:d8:1a:bb:aa:bf:56:48:75:e8:63:9f:92:06:9a:74:5a:
         91:30:18:dc:e4:d7:e4:3f:01:f1:01:e0:a7:ab:9a:89:48:1c:
         ed:6a:74:dc:51:ce:9c:cf:83:53:b5:20:83:9c:66:29:16:d7:
         59:35:04:92:62:0e:fb:82:be:0a:e8:88:2c:c5:5a:2a:30:7e:
         9a:9a:55:8a:e8:87:92:be:03:ae:1f:48:ad:ad:ae:79:69:c6:
         af:65:86:c7:09:89:3e:97:4e:26:36:76:f6:fb:de:b2:41:50:
         13:1c:34:72:8f:93:0b:ab:f3:c6:cc:7f:a9:49:fc:44:8b:9e:
         f7:09:aa:05:b7:15:e2:e4:79:8c:d1:de:16:62:f7:22:5b:c0:
         c9:4f:88:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:56 2026 by rpki-client