Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
File:                     J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json)
Hash identifier:          PIOkz/8aAjtOCO2U3lHZRgVWC+S+7DMGZjtC8fiGIoY=
Subject key identifier:   F7:97:D4:7C:8F:12:82:AF:AF:39:96:C4:45:56:98:EE:6D:84:4A:03
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Certificate issuer:       /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
Manifest number:          011E
Signing time:             Thu 23 Jul 2026 07:30:36 +0000
Manifest this update:     Thu 23 Jul 2026 07:30:36 +0000
Manifest next update:     Thu 30 Jul 2026 07:30:36 +0000
Files and hashes:         1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: r7zR8VqWFJDvTvoTG+SUjUEl3Vv5L93f3Dmkzxvm9gc=)
                          2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
                          rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
        Validity
            Not Before: Jul 23 07:30:36 2026 GMT
            Not After : Jul 30 07:30:36 2026 GMT
        Subject: CN=6a61c31c-abf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:60:04:c6:bd:18:65:5b:af:95:16:d1:d1:
                    0a:48:cf:ae:df:3f:53:6e:57:d9:c4:99:75:44:fe:
                    cb:15:4d:3e:e0:2b:46:9f:d2:34:5c:5e:d6:6d:29:
                    bb:d7:fd:0e:79:97:fe:24:4b:f1:dd:7c:73:97:c8:
                    d2:11:66:d1:c1:86:a0:ab:cf:6a:69:a1:87:17:cb:
                    ab:4b:41:ef:f9:b9:ae:fa:f3:bb:bf:65:78:c4:af:
                    98:21:15:f5:92:a4:b1:d0:30:af:2d:c3:41:0d:7b:
                    6b:16:50:31:0e:1c:ec:0e:78:42:04:7f:ad:af:2e:
                    83:a4:ef:c7:74:e4:e5:2d:bb:a8:4b:63:07:b7:13:
                    db:b2:1d:a0:f8:b6:c8:11:0b:f6:a0:a3:53:70:d0:
                    cf:6a:17:75:6c:cc:fa:bf:f0:fc:cc:3f:fe:c2:bc:
                    41:d7:5e:44:8e:38:6f:c8:b7:b3:80:19:1b:72:04:
                    ac:c3:2f:34:c8:1d:3c:4a:51:d9:14:18:01:45:26:
                    08:5a:bf:a8:e9:80:67:9e:85:97:b5:0f:c8:9a:ca:
                    f4:d8:89:6e:e2:c6:24:1a:02:01:b3:5c:86:a1:28:
                    fe:1f:9c:54:c0:8a:c4:ed:6c:82:d6:41:d7:41:57:
                    bc:c0:e2:a8:4e:cf:c0:df:5f:8c:3b:02:71:bb:33:
                    30:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:97:D4:7C:8F:12:82:AF:AF:39:96:C4:45:56:98:EE:6D:84:4A:03
            X509v3 Authority Key Identifier:
                keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2c:c6:ba:72:49:0b:a5:ef:ba:72:5b:64:a0:a1:02:e0:e8:
         d2:73:0d:8d:39:77:70:2e:01:01:51:2d:03:b8:eb:28:d4:b4:
         47:06:20:49:47:94:3e:44:c4:2c:91:92:9f:08:44:76:99:2e:
         2a:be:f7:ba:6a:10:50:13:06:2f:4e:ae:cf:7a:a7:92:1d:51:
         33:4c:cc:0f:6c:0e:e4:dd:b2:2c:65:5a:18:2f:5f:18:3a:13:
         a7:02:3a:d7:ac:11:d2:33:88:92:33:86:fd:0b:7c:64:36:23:
         cd:b3:a0:dd:3d:59:57:60:c0:99:a1:8e:ed:0f:ab:50:04:a3:
         bc:44:b3:8d:ea:8e:ff:ec:00:c6:2c:2f:0b:ce:ad:27:49:c5:
         72:1a:a4:fe:2e:60:b7:f8:41:46:96:28:77:70:93:4e:95:5c:
         0d:b5:a8:3e:0f:dd:b9:93:7e:2a:4f:5c:49:b7:8b:e5:68:39:
         60:98:51:57:c2:df:bc:e4:05:81:75:75:4e:96:16:f6:b0:80:
         f0:61:a7:a4:20:12:2a:74:03:8b:c7:92:f3:5e:87:03:f9:49:
         a1:48:34:e8:fc:4f:f5:dd:a6:92:63:35:5a:8a:69:ac:ee:15:
         06:83:97:c2:a8:09:a9:4b:00:8d:84:8b:7f:fc:0d:a7:21:5c:
         6e:c9:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:46 2026 by rpki-client