Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
File:                     u4iGb_vrTN7pUxHmIJ92pQG8G48.mft (raw, json)
Hash identifier:          6JgBEqbc4diaCM2eKkIrxbm2Oji9wapSV+sFdhDvwhc=
Subject key identifier:   19:79:9B:7C:BF:E2:DA:D4:82:F1:4D:31:44:16:8B:BC:82:A6:4D:58
Authority key identifier: BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
Certificate issuer:       /CN=A91A9E90/serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
Manifest number:          0C
Signing time:             Thu 23 Jul 2026 11:15:09 +0000
Manifest this update:     Thu 23 Jul 2026 11:15:08 +0000
Manifest next update:     Thu 30 Jul 2026 11:15:08 +0000
Files and hashes:         1: u4iGb_vrTN7pUxHmIJ92pQG8G48.crl (hash: wwSQ7WdwBRnnP4R85TTunXg1bW/TWYNtzxAgNrJIK30=)
                          2: A668211C79AB11F1870FA39595A30FBC.roa (hash: bMn1My/eGVHQu+9YF4NOAoOsKQU7m5hZjyTX5JuRqWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E90, serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
        Validity
            Not Before: Jul 23 11:15:08 2026 GMT
            Not After : Jul 30 11:15:08 2026 GMT
        Subject: CN=6a61f7bd-2e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:09:27:13:d9:9c:bc:b9:af:eb:53:25:1c:
                    49:ae:46:02:ab:b0:dc:19:6d:fa:93:b0:bf:64:61:
                    c2:82:e1:b5:61:ab:36:d8:f4:d1:de:23:91:63:cb:
                    35:fe:1f:9a:fb:6a:9c:ad:f7:51:b4:d4:77:de:01:
                    18:a6:48:73:8e:24:13:6b:c0:05:bf:b0:72:b4:01:
                    37:c7:c8:59:b0:3e:42:43:3b:4e:0e:54:69:0f:d9:
                    50:9b:0d:3f:26:d7:65:2a:d7:2d:1d:24:e0:36:58:
                    c7:aa:cd:5f:64:44:2c:2e:3e:82:d4:c8:32:56:fe:
                    b3:98:05:81:13:5e:f8:d2:39:28:28:b0:22:86:60:
                    08:e4:62:0e:78:81:0e:4f:a1:f8:27:e1:8b:6b:c0:
                    64:af:a5:67:49:ac:f3:c6:5b:07:3c:15:2a:89:fc:
                    83:cb:8a:5a:30:52:33:b4:fd:01:e8:88:81:29:7c:
                    a2:e9:b3:7f:ed:3e:e0:28:18:0a:6b:dd:9a:a7:ff:
                    ef:80:a6:a4:54:a8:75:1a:07:fa:46:a5:e8:eb:1c:
                    fc:18:8c:7a:a1:fc:4b:b6:ac:ac:a1:d3:b9:0d:0d:
                    f6:b9:32:9f:25:df:6a:0b:62:e6:d8:21:e6:d7:c9:
                    b1:9d:f0:27:96:d7:ed:50:00:6e:aa:11:ad:d0:dc:
                    22:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:79:9B:7C:BF:E2:DA:D4:82:F1:4D:31:44:16:8B:BC:82:A6:4D:58
            X509v3 Authority Key Identifier:
                keyid:BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:af:e5:75:6b:fc:69:97:1b:69:38:f0:19:f9:8a:9c:71:9b:
         c3:46:bd:79:4a:0f:6b:4a:90:ed:57:18:1e:a2:75:5a:ec:99:
         b9:14:6f:0b:76:2b:ea:97:d9:d1:af:43:d7:93:d6:8c:8d:d2:
         f6:4e:4f:6f:63:d0:60:c3:5c:1c:e8:f3:72:08:b1:9b:e0:b7:
         be:87:f5:aa:b2:85:c1:3d:39:ed:42:fb:b7:ab:7c:43:fe:75:
         b2:1b:42:c9:cc:3b:a9:00:0d:d7:f9:b6:b1:9d:46:3b:a2:15:
         74:04:b6:d8:04:fa:88:0c:d4:6e:33:3b:40:39:fa:06:3e:09:
         2c:ee:a4:c6:7f:36:60:ea:16:f8:50:8f:dd:88:fc:42:67:69:
         24:bc:bf:69:48:d6:f7:1d:a3:0f:9d:4d:18:1a:f3:ce:2c:30:
         46:c2:80:49:75:2e:7d:f6:1e:60:d8:a3:75:a9:66:6e:6d:5a:
         4c:b8:93:b6:55:80:94:87:58:d0:98:a6:d8:19:e1:d6:5f:de:
         5d:19:d8:f7:c7:11:69:2b:9d:3a:70:ae:ff:b9:ad:30:3a:8a:
         1d:4f:92:e7:ab:d6:52:57:40:d4:7d:22:72:2a:bf:54:38:eb:
         1f:3b:da:10:50:43:05:58:3c:67:88:ca:0d:69:87:a8:e9:94:
         39:fc:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:07 2026 by rpki-client