Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
File:                     A21zSqYwJkoY7FZN1qtBZGHGpGo.mft (raw, json)
Hash identifier:          PoQIVrT+1F6AsSt1JXNll/0RB20D8r9O0mF1gMHvfTQ=
Subject key identifier:   C3:DA:0A:D7:82:09:30:44:78:81:19:BA:7F:E6:B2:DA:86:C7:45:0C
Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
Certificate issuer:       /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
Manifest number:          68
Signing time:             Thu 23 Jul 2026 09:57:36 +0000
Manifest this update:     Thu 23 Jul 2026 09:57:35 +0000
Manifest next update:     Thu 30 Jul 2026 09:57:35 +0000
Files and hashes:         1: A21zSqYwJkoY7FZN1qtBZGHGpGo.crl (hash: 4+2N8Mu6ITP0TdaeBcrHNJk82PgP63UP6oSe/ItOsAk=)
                          2: 96376E44EDE511F0AFD0F13E766F56BC.roa (hash: c7n/rW2wnuvOsF5QuJE/p0FOOd0sZ53Jnc8uBUMGA3U=)
                          3: 95BF687CEDE511F0AFD0F13E766F56BC.roa (hash: 49VoGrV1j9cqeMk1mIx6YMz9ljPSMDMLHiAGX5B7EFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
                          rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
        Validity
            Not Before: Jul 23 09:57:35 2026 GMT
            Not After : Jul 30 09:57:35 2026 GMT
        Subject: CN=6a61e590-7b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:9a:71:bc:6f:44:ae:f8:6f:57:7a:30:9c:
                    c3:4a:4b:46:42:6e:bc:f9:57:e6:a7:43:be:b3:f1:
                    db:1f:52:62:3b:8d:22:05:d1:f2:d2:72:c8:2d:a2:
                    92:4f:d3:1f:08:28:d5:01:de:9b:92:b9:07:26:ef:
                    ea:d7:2d:91:12:68:89:14:1c:5e:e9:10:fa:89:2d:
                    a9:b8:4f:c2:f7:4c:5e:70:8b:14:41:aa:6b:ef:1d:
                    3f:1f:84:59:1f:4a:46:cc:30:f2:21:e4:dc:64:35:
                    44:81:d7:95:c1:89:1f:85:b8:44:e7:3f:d1:7a:a3:
                    ba:af:5d:f3:c5:93:85:b2:72:51:28:fd:05:c4:08:
                    04:42:22:2f:fc:c4:42:27:82:5a:c8:db:df:71:4b:
                    c9:2f:92:6c:8b:55:57:8c:33:33:99:7f:a2:c3:f5:
                    45:11:a7:b5:60:4f:33:2a:a4:65:99:40:d1:19:9d:
                    71:b2:74:9e:df:fe:21:f6:de:86:3c:bf:ca:9d:ef:
                    55:c6:f2:42:1d:93:ce:b7:a1:b8:6f:41:12:61:0e:
                    58:76:d5:41:66:a5:41:48:73:9f:84:4b:19:b3:55:
                    7c:ed:8a:ee:83:46:d0:57:78:82:b8:e8:50:5e:76:
                    dc:6d:04:58:38:09:2b:56:4e:40:a9:f4:05:79:e0:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DA:0A:D7:82:09:30:44:78:81:19:BA:7F:E6:B2:DA:86:C7:45:0C
            X509v3 Authority Key Identifier:
                keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:35:ce:f9:23:13:8d:98:39:5c:f5:5a:1b:f6:e8:4e:ae:49:
         23:b2:34:93:46:a9:96:21:e9:c3:3a:9a:a2:39:bb:9e:da:02:
         63:19:b3:c8:c8:e9:b7:f3:c0:5e:b5:c3:5e:ac:16:d2:75:f2:
         50:1f:98:a2:e1:17:c6:86:45:a8:b8:df:8f:fe:6b:2e:17:cb:
         4b:41:a6:7a:6b:e6:e6:43:e6:37:fe:67:f9:a3:4a:c4:99:ea:
         45:fd:23:b5:7e:0d:b0:ee:fe:ad:66:ed:63:3d:17:e9:ce:8b:
         e9:c4:a7:70:d1:1f:f2:f7:ba:d9:45:00:e2:76:5d:df:90:58:
         cd:ed:d9:fd:1e:ac:7a:3c:f8:6b:93:1e:eb:0c:37:0e:fb:75:
         9c:d7:9e:ed:8f:80:05:88:18:65:98:fe:b1:eb:fc:9b:57:f7:
         d7:da:1f:3a:54:0a:31:cf:dd:39:0f:73:c1:19:b1:82:39:64:
         df:89:70:96:10:28:59:0d:5c:1a:05:64:11:25:ce:f8:97:69:
         b2:33:0f:50:5e:19:1a:f9:d6:7e:06:7a:31:55:31:73:7f:63:
         28:51:60:06:7a:4d:f1:8f:93:c3:a5:0e:81:20:39:f3:46:28:
         8e:15:39:c4:a5:a9:7d:04:12:cb:1b:11:fa:02:4c:4b:7b:42:
         8b:16:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:04 2026 by rpki-client