Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
File:                     ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json)
Hash identifier:          Lte7CM3fQ1j+A7eIUAcedWpAopTnE/pb+k5/aMvhZqA=
Subject key identifier:   7C:99:D6:F1:6B:C1:F1:9C:4E:B1:F4:AC:9E:7E:3A:BC:4E:19:9D:89
Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
Certificate issuer:       /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Certificate serial:       0E16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
Manifest number:          0E03
Signing time:             Wed 22 Jul 2026 18:03:20 +0000
Manifest this update:     Wed 22 Jul 2026 18:03:20 +0000
Manifest next update:     Wed 29 Jul 2026 18:03:20 +0000
Files and hashes:         1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: rS1QpQX6vqG+JrzOCsAAi3n0t73U40T4VVWyPPMuHso=)
                          2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: h8Yq1El+9tmCY/aSU/vFeXJAQYEI+HLkPqW4KvJG1Ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
                          rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3606 (0xe16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1857, serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
        Validity
            Not Before: Jul 22 18:03:20 2026 GMT
            Not After : Jul 29 18:03:20 2026 GMT
        Subject: CN=6a6105e8-4ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d4:7d:e3:8e:5b:49:ab:f9:3b:e3:6e:fa:cc:
                    01:8d:89:66:50:99:b6:c7:7c:4d:e8:37:4f:6c:a4:
                    94:0e:76:b4:ba:8a:5a:e9:bd:a7:1a:df:2e:f3:11:
                    c0:e4:4d:4e:18:81:3a:ad:a6:da:85:d2:f4:8d:e0:
                    a1:ac:5b:50:75:d6:8a:42:ff:bc:59:d2:27:d6:db:
                    ba:df:c1:5d:ca:21:7a:89:74:c0:38:c0:ad:ef:b1:
                    2d:e6:2b:6a:45:64:c6:e5:66:7a:f7:1c:b3:b3:d2:
                    17:d7:35:49:31:fd:ba:a2:6f:44:41:10:27:08:40:
                    75:f9:07:40:4d:d6:97:5f:31:57:25:3e:49:f9:21:
                    96:bc:35:4c:fa:04:d1:e8:29:77:81:4d:29:c1:f5:
                    2c:e4:b1:e8:8b:1b:a6:8c:7c:ac:37:eb:76:11:fb:
                    64:ab:cf:f3:8e:6a:8b:de:a1:fd:6a:ad:54:67:1a:
                    57:dc:9c:13:21:84:b3:c7:3b:45:a4:27:c0:7a:f7:
                    59:d4:6c:b0:92:a2:e5:51:e0:93:c1:29:c6:58:c1:
                    70:9f:0a:43:42:84:2f:da:02:c0:13:8e:f3:20:ac:
                    65:ba:c9:f9:b5:16:69:b5:77:33:24:49:e8:cc:0f:
                    c0:2d:9e:d6:64:ad:1f:c6:09:fb:36:03:3a:5b:e9:
                    a2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:99:D6:F1:6B:C1:F1:9C:4E:B1:F4:AC:9E:7E:3A:BC:4E:19:9D:89
            X509v3 Authority Key Identifier:
                keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d5:48:fa:5b:91:c1:43:0b:ac:08:2a:72:8c:59:8a:ef:d8:
         09:7c:94:80:2f:a4:29:d6:cd:05:7d:1b:ec:e6:05:d4:f1:7d:
         a6:e4:6e:93:75:e1:ac:93:11:a7:4f:1a:c5:8a:b8:00:6e:a2:
         c4:d1:a0:09:f4:4e:86:9a:dc:de:c5:2e:d6:f6:da:65:9e:cc:
         1c:38:bf:69:96:1c:83:08:9f:23:5e:bc:f9:cb:7f:cb:3e:46:
         67:86:47:53:4c:3e:1f:fa:e0:e8:0b:ac:08:35:3c:a3:ce:54:
         6b:45:a9:4b:d5:8e:e5:28:1f:55:41:86:73:33:bf:20:a7:cf:
         1d:58:6f:71:77:01:7f:94:08:74:4c:60:10:4a:2a:3b:a8:31:
         cf:eb:75:25:0e:97:48:f3:02:e6:0c:d2:b4:9a:de:eb:f8:7b:
         7e:30:69:de:c4:19:b8:ef:52:5c:49:a5:51:bd:1e:6e:9d:85:
         65:52:23:64:26:64:4b:9b:fe:d4:20:00:59:16:ff:02:91:7c:
         c4:4a:5e:8e:0a:41:93:31:2d:36:2a:fb:71:c1:ba:ab:43:0c:
         a3:92:15:ce:29:d9:48:02:ff:bb:c6:f3:0d:4c:6d:86:59:4a:
         d4:a8:17:fb:28:64:9c:64:7d:ab:12:5a:c0:dc:72:62:28:98:
         7c:30:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:58 2026 by rpki-client