Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          y5/MKvp2mtELzGyqXWEJa7LD+5uQ0TREdmoPTOZlkjo=
Subject key identifier:   F9:4C:84:FA:58:4B:89:28:90:6A:C6:7D:7E:1F:E6:33:E3:FF:75:30
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       284D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          27DF
Signing time:             Thu 23 Jul 2026 08:08:13 +0000
Manifest this update:     Thu 23 Jul 2026 08:08:13 +0000
Manifest next update:     Thu 30 Jul 2026 08:08:13 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: s5qKPSn090jVI0OimSIViMQWNqZhtRNZGtTfkpJazDI=)
                          2: 6CED3FB2866C11F1879DBD6D59A30FBC.roa (hash: VnKoi9U/WeI4/O2Y+qLlyZmXCGCfOBuTCaPoxgNp01A=)
                          3: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
                          4: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
                          5: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10317 (0x284d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Jul 23 08:08:13 2026 GMT
            Not After : Jul 30 08:08:13 2026 GMT
        Subject: CN=6a61cbed-d99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:d2:48:f8:72:4c:12:83:82:d4:d5:9b:0f:
                    f7:41:6f:1e:53:0b:e4:13:a3:bc:11:44:9c:14:30:
                    39:20:f6:b5:e5:cf:2e:3f:5e:fe:6d:c6:cc:26:e0:
                    01:85:c0:73:22:ee:27:44:d0:05:1a:ec:71:d7:ca:
                    df:cc:f6:d9:a0:32:6b:05:5c:b5:b8:ef:1f:c2:0e:
                    c3:61:d1:55:13:43:3c:cc:54:12:53:36:7a:5f:a3:
                    3d:9f:aa:1f:71:ca:df:5a:14:d5:01:ba:d8:a0:76:
                    42:f6:aa:62:64:b7:61:62:83:ab:e9:c4:7f:0a:1f:
                    f8:59:fc:94:a1:a4:49:1c:fd:b5:f6:de:3b:0b:4a:
                    1d:d8:06:de:7b:ac:ac:0c:55:24:54:2f:5c:7a:bd:
                    72:cd:6b:95:57:21:da:65:42:41:2a:1e:7e:9d:5c:
                    c2:20:39:e2:1b:a0:69:ca:25:5c:a4:4b:35:19:03:
                    eb:8b:26:64:05:64:db:5c:f9:20:89:c5:6d:a1:59:
                    85:50:09:72:89:c5:c8:a3:ed:21:11:15:0c:28:11:
                    dc:c4:0a:13:4e:bb:04:a2:a8:02:57:1c:78:ae:af:
                    d2:98:61:38:ad:87:49:02:31:be:62:69:21:3d:ec:
                    78:f0:93:46:87:6d:54:76:b9:c6:16:a9:65:e8:f4:
                    84:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4C:84:FA:58:4B:89:28:90:6A:C6:7D:7E:1F:E6:33:E3:FF:75:30
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7c:31:30:e5:f2:dd:d1:78:50:d3:19:fa:b4:35:55:6d:29:
         1d:56:db:a8:4d:bf:c1:fb:28:0d:79:c4:06:44:42:b5:0a:da:
         6c:95:be:ce:48:6f:fd:87:e8:c3:8f:f7:1e:80:0b:74:a5:56:
         3d:e9:f7:2b:55:22:91:a5:25:32:49:85:cf:35:1a:2e:37:57:
         c8:52:7a:e2:15:69:ae:a4:54:51:fa:e1:89:0b:0a:ef:5a:cf:
         3e:3d:9f:d0:40:84:b2:22:bb:df:54:89:7f:cc:5a:48:d7:de:
         94:0e:8c:20:86:ea:de:54:39:ee:aa:d2:26:58:e5:36:16:d7:
         63:74:50:45:2a:ea:52:10:f2:80:c1:8a:78:94:36:0c:8c:5a:
         99:07:14:f5:27:8c:56:66:d9:2d:8a:e8:25:b4:49:5f:bf:a1:
         d8:a8:31:f6:79:c3:26:8f:8b:62:02:52:09:35:f8:30:cc:c7:
         31:9a:68:b0:15:eb:57:bd:d9:4f:81:e2:a5:d4:fd:f4:88:ca:
         96:fc:22:79:ba:d7:ce:5b:00:54:54:da:44:7f:b8:16:30:28:
         20:80:a1:a4:6d:3a:8c:90:12:6f:8e:7f:0a:0e:b3:a0:4f:36:
         59:66:56:54:af:6e:f0:c8:23:13:df:93:4d:06:18:15:d6:bd:
         9e:88:43:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:07 2026 by rpki-client