Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
File:                     Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json)
Hash identifier:          wEe5CiaKMDHoA3stW2fts81NcYiAcDFUFier033ShC4=
Subject key identifier:   4D:81:BE:A2:EA:09:34:9B:31:AB:BA:34:C8:13:72:38:4C:F6:10:ED
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Certificate issuer:       /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
Manifest number:          01EF
Signing time:             Thu 23 Jul 2026 04:43:57 +0000
Manifest this update:     Thu 23 Jul 2026 04:43:57 +0000
Manifest next update:     Thu 30 Jul 2026 04:43:57 +0000
Files and hashes:         1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: Zk9qKLXAI2kWmWSd03s1V8CHiipeZChQCxDTg2/6NNQ=)
                          2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: TP4JixOOcg9YnuGelQlIMV1MqlMNS4cHb5eiwzX8uV8=)
                          3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: CSGjDy/wdYYzGXyvOOUl98bHiR5LO+1hU3+jdzF0bhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
        Validity
            Not Before: Jul 23 04:43:57 2026 GMT
            Not After : Jul 30 04:43:57 2026 GMT
        Subject: CN=6a619c0d-4de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:98:dd:25:0d:e3:d6:31:db:65:bc:ad:3e:
                    45:99:9b:af:7d:ec:eb:74:c2:11:1c:cb:d6:73:60:
                    58:81:df:a6:56:65:57:a0:6b:ed:df:55:c2:ed:ac:
                    6d:7c:c1:05:c8:a8:1f:2c:da:4b:21:24:bc:41:f2:
                    fc:44:6c:6f:a7:82:a4:d2:bb:7e:f4:74:0f:f9:ae:
                    17:16:71:56:ba:68:a7:e3:79:47:54:0e:a2:74:4c:
                    e8:6a:c1:b7:0b:53:06:7a:24:b0:50:a0:61:2a:9d:
                    b4:73:e0:34:1f:ba:30:a0:d4:07:50:37:aa:25:4b:
                    38:45:ea:dc:f5:8a:2f:8a:bc:2d:f0:88:8f:e9:59:
                    e3:b6:f1:9b:bc:d2:0d:95:7b:4e:d6:64:c6:3c:9d:
                    41:a7:97:33:8b:a8:28:c5:cb:5d:e1:3d:b6:01:be:
                    ef:e9:fd:19:26:2b:95:cb:56:b6:0a:bb:35:d7:c2:
                    b3:78:1b:34:0b:d8:75:8b:13:cb:b9:7a:ee:11:6c:
                    c9:a6:85:70:a1:bb:c6:39:74:0a:5a:4d:c9:c3:c1:
                    63:2c:e4:6c:c6:f1:ab:58:4d:f8:c4:37:30:d4:83:
                    6e:29:33:f1:b1:23:76:de:ed:e8:2e:ed:ed:f3:38:
                    50:51:26:7d:14:7c:a4:44:7e:8e:7c:78:6e:41:92:
                    60:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:81:BE:A2:EA:09:34:9B:31:AB:BA:34:C8:13:72:38:4C:F6:10:ED
            X509v3 Authority Key Identifier:
                keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d2:84:ef:32:de:f5:b5:d3:3b:31:61:f2:7b:1b:45:60:ec:
         fe:c4:b5:ca:49:f5:25:b6:11:90:1d:94:14:39:31:aa:ab:eb:
         41:1f:96:4f:79:5c:d0:b0:25:8f:71:08:94:08:03:7d:c5:46:
         43:3d:83:bd:aa:4f:3e:11:d3:31:5f:e1:6a:28:ec:c9:61:9f:
         68:a5:fa:45:b0:b3:e3:ae:64:67:45:83:64:76:d1:2f:a4:21:
         b8:65:b4:22:b0:1c:53:6c:ac:ab:52:60:06:2d:03:c5:22:f9:
         8d:0f:ca:57:c8:1f:7e:b9:b6:03:74:b7:bd:5e:66:9d:ea:88:
         c6:e3:22:87:fc:78:76:90:23:f7:ea:7b:26:11:64:17:98:b5:
         b4:1e:91:dd:2e:a2:44:ff:50:7f:af:9b:8d:c7:83:a1:ba:7a:
         e1:34:dd:a5:42:cb:aa:4e:85:c9:2d:e5:38:73:35:68:39:d5:
         c0:8c:ca:a2:cd:54:60:62:a4:48:45:8f:e8:01:1e:0c:e4:1a:
         89:b5:d4:6e:b6:02:d2:ea:bf:92:54:ab:66:18:ab:33:92:37:
         fc:ce:6f:e4:60:b6:5b:32:f5:1e:e7:7f:94:51:4d:2f:8e:8f:
         f2:fe:33:3b:bb:d6:4e:40:97:68:d4:e5:26:1e:0b:ca:72:e9:
         12:79:7e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:53:27 2026 by rpki-client