Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
File:                     iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json)
Hash identifier:          QfOSZbZOC85W6Y1QtADARmWwaJ3broIl6mYYkh+Shbo=
Subject key identifier:   71:E9:2D:A7:DD:4F:7B:B0:01:4B:33:A2:96:EC:E8:E0:71:24:CB:BF
Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Certificate issuer:       /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Certificate serial:       0ACC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
Manifest number:          0ABC
Signing time:             Wed 22 Jul 2026 19:50:52 +0000
Manifest this update:     Wed 22 Jul 2026 19:50:52 +0000
Manifest next update:     Wed 29 Jul 2026 19:50:52 +0000
Files and hashes:         1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: FDe9URH6N8u5lTbti/y957x2vAJDZQt5PHJeXph/JCg=)
                          2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: ADIn3fSPUFxghKrm6LZn3szet1wFIU+8TgC1/BfDmm0=)
                          3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: rJhV33fhTZ9wWjDZMsmY3oUmfWvnegOyW8s4W29U15g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2764 (0xacc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
        Validity
            Not Before: Jul 22 19:50:52 2026 GMT
            Not After : Jul 29 19:50:52 2026 GMT
        Subject: CN=6a611f1c-d511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:9e:f5:b2:98:55:c6:13:45:ea:ec:53:86:
                    95:b4:d6:ea:2a:f6:21:69:ad:08:82:a8:db:96:5d:
                    9f:52:1f:f9:05:9b:f0:08:97:d0:40:cd:a8:bb:52:
                    ed:d1:d7:9f:a6:c9:0b:24:15:c4:f7:9c:d5:12:4f:
                    c8:6e:67:af:98:2b:b2:9f:20:6f:79:0b:aa:9c:b2:
                    07:a9:72:c4:3a:43:f9:42:35:2b:0c:7b:22:bd:2b:
                    5b:a2:10:4c:14:67:6b:d7:3c:96:d0:fd:cf:59:27:
                    0c:70:32:e7:dc:ac:51:57:18:df:c1:76:65:98:d2:
                    6a:9a:86:47:99:a6:6e:3d:29:86:5f:82:28:33:66:
                    fd:c5:46:12:87:78:c7:79:8f:91:2e:91:8a:a5:d2:
                    c3:66:68:b0:b5:51:a7:59:f0:75:69:ee:22:80:0a:
                    a2:19:dd:bb:a1:32:84:5b:da:8f:5e:9a:f2:dd:ff:
                    ab:30:4c:43:18:53:8b:e8:38:10:25:07:36:a5:8a:
                    67:7d:05:04:9e:02:0b:a7:9a:98:70:26:e6:28:7f:
                    0f:84:c1:e4:23:ed:c6:75:8c:a2:f7:5c:b9:2f:47:
                    a3:9b:71:12:c9:72:b5:56:e0:80:18:a2:20:02:18:
                    39:43:3c:0b:07:9e:e6:91:73:e4:1b:70:6f:fe:93:
                    4e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E9:2D:A7:DD:4F:7B:B0:01:4B:33:A2:96:EC:E8:E0:71:24:CB:BF
            X509v3 Authority Key Identifier:
                keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4f:d5:ff:63:ae:91:86:61:64:a2:7a:9d:88:48:d2:1a:0c:
         b1:05:62:da:e7:d1:87:fd:d4:fb:f3:3a:70:56:bb:3c:96:59:
         df:68:c8:5f:48:fd:54:39:05:98:ba:bc:83:16:08:b1:e1:dc:
         91:21:fc:4d:fa:ea:68:bc:68:a8:21:bb:b3:f7:ab:52:29:3e:
         b6:ed:34:1b:ce:8a:b1:1b:a1:01:1c:03:29:29:bc:22:f3:3f:
         3d:72:dc:95:4e:be:7e:04:f9:d0:14:17:de:c2:1f:07:92:d3:
         6b:ce:8c:93:fb:f0:e9:a4:5b:96:07:70:32:33:27:67:9c:48:
         51:ca:97:3b:f2:c2:0d:16:2d:7e:1b:8b:ae:c7:04:ea:a3:05:
         16:ec:4d:27:2c:71:a0:b6:28:7b:0c:14:a3:76:71:29:53:48:
         b8:cf:a0:58:b4:50:02:dc:b7:37:dc:a8:7d:3d:c0:1f:e5:58:
         19:31:ee:fe:02:dd:89:eb:24:68:fc:e0:74:35:1c:1a:a3:50:
         a7:b5:e7:b7:5f:b3:5a:d7:c7:e5:eb:d0:1a:20:78:db:37:2a:
         2a:35:e5:e9:7f:21:a3:a2:84:94:dd:d3:d2:c3:73:a5:a0:5d:
         d9:6b:31:d1:ba:e7:60:65:2e:e2:91:6a:86:60:16:83:b6:71:
         19:29:af:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:09 2026 by rpki-client