Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File:                     -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier:          qKy9tGJFBSIw2OmEAT94XRo40/CcJ2bPHJcWf03zNZA=
Subject key identifier:   77:06:95:9D:C4:70:51:D2:A5:9D:58:18:D0:DE:FD:E1:C6:6B:93:A0
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer:       /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number:          95
Signing time:             Thu 23 Jul 2026 09:20:26 +0000
Manifest this update:     Thu 23 Jul 2026 09:20:26 +0000
Manifest next update:     Thu 30 Jul 2026 09:20:26 +0000
Files and hashes:         1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: Mhg3nUzM2aXKh77xLI2MVE1Y+r8pCx0gLc9W1Qd1fNU=)
                          2: 4AAED6B23C1211F19A15FB09B6833773.roa (hash: zaCJCnJ8P+IQJ9n9t86hTBhempUXa3QuJJB9ZKjuD4o=)
                          3: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ED82Gz6lXOAzlBWFeylwQ9Gjq7iIkbcvN+6T0EoH08c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
                          rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
        Validity
            Not Before: Jul 23 09:20:26 2026 GMT
            Not After : Jul 30 09:20:26 2026 GMT
        Subject: CN=6a61dcda-d39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:21:49:22:db:00:67:d8:c0:3c:d0:52:01:8b:
                    4b:e9:f7:dd:98:08:76:99:2e:67:bf:eb:ea:dc:88:
                    15:4b:10:49:c5:f4:92:d6:dc:e5:14:ee:da:57:97:
                    62:43:a0:b3:e9:5c:12:d7:8f:89:e8:94:c6:fb:cf:
                    af:35:21:26:32:f4:cd:62:01:af:ed:b8:55:d1:e3:
                    cb:76:82:47:b1:c0:37:27:9f:b3:ac:99:b1:df:b1:
                    d3:ac:4e:dd:44:de:03:a9:b5:9b:36:91:8c:ef:de:
                    64:7e:95:48:f0:e3:85:63:f4:a2:6b:93:5d:95:32:
                    d8:01:91:26:84:2f:15:40:0f:c5:db:79:c0:49:e4:
                    14:fc:9e:e3:de:b6:79:5a:31:06:8a:91:2e:a0:07:
                    fc:02:77:65:67:ca:44:a9:72:db:1b:40:3a:54:70:
                    8f:eb:79:19:bb:16:68:1f:7c:44:29:70:c1:39:ed:
                    83:e4:a0:1d:a7:22:93:5e:bf:89:a4:69:06:6a:61:
                    e5:dd:8a:3a:fb:12:82:2b:11:b4:94:4f:88:22:88:
                    6f:77:f5:ce:fb:af:5c:a4:09:6b:1c:71:38:7e:c3:
                    8e:4a:e9:95:f9:63:e0:97:0a:06:f4:07:84:87:67:
                    b2:df:e2:25:e4:97:2e:4e:be:fa:c2:7b:cf:39:07:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:06:95:9D:C4:70:51:D2:A5:9D:58:18:D0:DE:FD:E1:C6:6B:93:A0
            X509v3 Authority Key Identifier:
                keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:92:41:73:d1:f5:be:b1:d6:7c:af:fa:4d:1a:44:bb:2b:bf:
         1c:0a:20:67:97:b6:6d:9f:01:e7:6f:89:6f:40:61:b9:b1:3e:
         0d:76:d0:fe:7b:43:6d:be:1f:38:ae:7b:ff:e8:41:e8:e1:0c:
         57:2e:23:b4:e5:3d:eb:23:17:ed:5a:fd:e2:ea:74:f1:58:0c:
         b8:92:1a:7a:b3:80:eb:ee:3e:a2:91:97:64:63:8e:72:4a:ca:
         48:4f:1d:84:22:50:fd:7b:bc:7a:70:85:9f:76:59:20:df:3a:
         b4:fc:47:54:3e:8b:50:42:56:58:b0:99:05:4b:47:33:03:45:
         90:e1:75:b4:a4:dc:98:dd:c4:b8:a2:22:48:a1:a1:7d:dc:54:
         d9:39:3a:6f:34:40:5b:51:e5:56:f7:0e:06:46:b1:e5:e7:4f:
         36:59:28:24:b5:24:2a:02:3d:54:ab:e8:36:75:d7:fe:79:50:
         67:ef:ba:54:f6:ac:8c:c5:6b:28:c5:68:d1:fd:0f:af:28:76:
         db:00:17:d2:fe:fa:35:24:da:d7:95:27:74:07:5f:86:87:d3:
         38:27:af:47:cb:af:41:a6:52:c7:db:94:c7:78:88:21:b5:ae:
         26:77:6d:cd:61:fa:dd:e0:15:16:5b:a6:82:28:f4:2a:e2:55:
         51:0f:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:36 2026 by rpki-client