Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
File:                     pSvwKHcZGUlxLT2tKdSreid57EM.mft (raw, json)
Hash identifier:          Bwc6ZzCWbtjEK2wr9NkHrNE0ghhMdFCG8+TBOsB5Ky0=
Subject key identifier:   29:58:19:92:D3:99:50:DD:F0:02:50:83:51:79:AF:6D:4D:99:FC:34
Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43
Certificate issuer:       /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
Manifest number:          0185
Signing time:             Thu 23 Jul 2026 06:32:39 +0000
Manifest this update:     Thu 23 Jul 2026 06:32:38 +0000
Manifest next update:     Thu 30 Jul 2026 06:32:38 +0000
Files and hashes:         1: pSvwKHcZGUlxLT2tKdSreid57EM.crl (hash: hFayz37PaOGfGx9Vq3y0QgmyuAGTrFJ1qGN1GnruyKs=)
                          2: 88F562E83DAD11EFAA46E417C4F9AE02.roa (hash: jdv9aFQwiqYHiD+UTmhCieAj9Roy5CCX8WuHmncx1eQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl
                          rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA618, serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
        Validity
            Not Before: Jul 23 06:32:38 2026 GMT
            Not After : Jul 30 06:32:38 2026 GMT
        Subject: CN=6a61b587-3935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ed:50:a5:fb:33:28:e2:52:0d:10:cf:17:51:
                    18:e4:94:b9:75:25:3f:03:3f:5d:ce:d2:fa:a8:75:
                    03:ec:d2:05:82:60:b3:70:17:9b:c9:6b:53:0c:93:
                    e2:db:88:0d:cb:3b:ed:f9:99:af:dd:71:42:58:27:
                    f2:f0:88:03:63:b5:35:ab:7e:39:4a:82:a6:04:04:
                    40:41:d1:3e:b0:61:14:db:1b:cd:92:61:64:4c:81:
                    93:11:a3:ff:d4:00:9d:72:25:d5:e2:c4:0a:8d:0b:
                    65:8b:fb:c2:f9:07:89:8c:5e:ee:c6:c3:bb:7e:51:
                    b0:88:de:a0:f3:b6:93:36:6e:b8:36:b0:ef:46:3c:
                    9b:c3:37:67:c7:02:71:b8:08:27:3a:d7:1c:51:e3:
                    b2:99:e4:6e:5f:a0:a7:9c:45:25:26:aa:27:cc:08:
                    5b:6f:3f:51:3c:de:dd:25:49:9b:b7:10:72:e6:1e:
                    fd:d1:e6:b2:72:f5:08:5a:c0:77:3d:7a:1e:04:5f:
                    17:1e:c8:ce:27:5b:a8:ef:86:df:44:95:55:bf:c7:
                    eb:19:6d:f3:bd:5b:ee:18:c7:ef:c0:36:69:fc:fb:
                    1d:8d:07:4a:bc:14:25:26:d9:12:dd:97:e1:ba:6d:
                    f6:63:95:c9:3b:f9:72:f2:52:8a:83:ba:3f:71:b4:
                    51:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:58:19:92:D3:99:50:DD:F0:02:50:83:51:79:AF:6D:4D:99:FC:34
            X509v3 Authority Key Identifier:
                keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5a:c9:cb:02:0c:b5:92:56:8a:af:ba:61:0a:4f:e6:7f:3e:
         73:e1:67:97:e8:7d:79:95:e4:97:9b:22:09:fb:69:14:3c:82:
         7d:cc:04:4f:eb:98:26:f1:59:88:50:be:53:83:f8:ca:17:68:
         5f:86:e3:52:fc:f1:e4:d8:a8:ca:cd:ac:01:d1:87:77:cc:df:
         4e:0c:5a:bb:4c:b4:74:38:3b:fb:3d:4e:eb:64:e1:4c:eb:5a:
         17:72:b8:e5:30:5c:a6:2f:14:fd:5c:6b:f6:1c:d3:9b:a6:41:
         78:6c:94:dc:76:6c:0a:db:a6:a4:64:ea:f9:79:07:0d:20:6e:
         eb:a1:da:02:dd:cc:77:68:47:c2:1b:9e:9e:f3:a4:1d:9c:1d:
         a0:bd:12:e8:ac:39:3c:b9:a7:d8:11:73:07:03:c8:45:bf:ae:
         a8:51:58:3a:85:73:36:f4:b6:94:b4:f8:b5:8a:64:b4:57:22:
         a5:cd:ad:6c:27:f8:4c:28:ac:5d:e8:27:90:d9:b3:01:c1:9e:
         f8:bb:2a:b7:e2:4a:5f:58:68:8b:b8:7d:a2:b8:9d:dc:8d:51:
         73:86:74:00:66:80:10:76:22:0a:d5:f3:94:f2:06:4e:84:89:
         1b:dd:e2:60:20:d0:93:37:b7:2f:6f:9c:3e:09:28:7a:74:3a:
         d2:4d:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:36 2026 by rpki-client