Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
File:                     aMK1iNFoWlh0LYouGIhl2zEQPPc.mft (raw, json)
Hash identifier:          GRb8RyxEzUATrETg55OcQBANiJaeHViIIkwCp5T7qV8=
Subject key identifier:   1D:A6:AB:8F:BD:22:74:11:72:8A:16:8A:6D:47:E1:8C:F7:1C:FA:C0
Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
Certificate issuer:       /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
Manifest number:          014E
Signing time:             Thu 23 Jul 2026 06:51:08 +0000
Manifest this update:     Thu 23 Jul 2026 06:51:08 +0000
Manifest next update:     Thu 30 Jul 2026 06:51:08 +0000
Files and hashes:         1: aMK1iNFoWlh0LYouGIhl2zEQPPc.crl (hash: fxjTX1c8jLdLAtiz2cVDW1XLTtJ8tta7+YMVJ/FLxOs=)
                          2: B2D0D768766011F08F4AF05AC4F9AE02.roa (hash: AFwVZfcUHzwe9j0UrSqlyKnxLzWcBfDiYKBuQr8Nbjs=)
                          3: 01BA52A28CF411EFAE6F7F10C4F9AE02.roa (hash: EUtWxQAE1BFRn9M5BHJ1aea0TybMQyltaStUs+wgA48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
                          rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
        Validity
            Not Before: Jul 23 06:51:08 2026 GMT
            Not After : Jul 30 06:51:08 2026 GMT
        Subject: CN=6a61b9dc-9e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:1b:05:bb:c0:a6:51:6f:9c:d8:c0:1d:f1:
                    89:40:ca:30:0b:48:54:93:ce:49:d2:68:d3:4b:e8:
                    c2:f8:ae:45:9f:99:c1:6e:cb:17:80:03:b9:83:a8:
                    5b:12:ba:dc:a0:79:90:5d:62:1d:42:bf:9d:0a:a6:
                    4e:10:34:0e:3d:dd:3e:89:eb:86:2b:fd:dc:56:bf:
                    07:cc:9a:42:ac:7b:13:fa:21:51:c4:bf:8d:fb:12:
                    76:b8:2d:58:da:90:79:10:3e:89:34:17:3b:d9:89:
                    53:23:6b:ad:8e:7c:77:ca:23:d8:ff:61:19:79:f3:
                    6a:d0:ac:26:f5:6f:c9:d5:6d:a6:a2:76:9d:c9:df:
                    41:35:d2:a8:a8:67:54:8e:4e:04:12:b8:7c:f6:78:
                    b4:33:79:ba:77:92:f4:cf:d5:86:85:f7:da:69:69:
                    e6:00:6d:92:8e:1a:a0:62:ff:cd:9a:f2:e3:a6:df:
                    5c:08:2b:63:0f:03:44:34:71:1f:9e:ea:7b:81:17:
                    6c:e5:3e:e3:ae:22:26:92:32:76:72:c9:90:4a:72:
                    22:1e:56:56:12:e4:1c:b2:0e:26:e5:83:79:2e:bc:
                    1e:45:0d:89:4d:80:29:be:87:68:2d:33:a3:20:37:
                    06:e3:f3:a8:e0:dd:9b:86:8d:18:8e:2c:b1:e5:51:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A6:AB:8F:BD:22:74:11:72:8A:16:8A:6D:47:E1:8C:F7:1C:FA:C0
            X509v3 Authority Key Identifier:
                keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c0:7f:f8:e4:db:11:dc:e8:b0:2d:7c:38:9f:b7:35:8d:cc:
         50:e4:e2:be:81:f3:17:52:6a:ee:59:16:39:b5:55:53:ff:a4:
         dd:74:43:f4:07:a2:fd:fe:73:86:2d:dd:e1:5c:c4:ef:11:75:
         c0:21:1f:80:eb:ad:58:61:7b:91:b1:9d:c3:61:2b:db:01:4b:
         77:6f:10:36:f3:d9:71:5d:14:d9:f6:2a:1b:20:87:80:8d:dd:
         bd:ff:97:de:42:a1:cf:68:b1:8a:51:72:05:d7:37:bf:f5:db:
         29:4f:14:18:18:e9:91:dc:ec:52:c2:20:35:fb:94:f7:7b:9b:
         cb:53:04:42:82:cc:e5:06:d7:b5:5f:0e:4f:9e:38:00:95:90:
         89:13:59:92:de:18:25:e4:d2:d0:1e:aa:6c:a0:bb:07:a6:9e:
         80:5a:3f:8c:06:af:02:98:a3:53:27:c6:1b:f0:cb:b4:ed:c5:
         6d:10:5e:e0:e1:6f:f9:43:a6:75:a7:a0:cb:d5:8f:0d:a7:6a:
         a2:5b:93:36:fd:57:b9:85:ad:ae:b2:b0:c7:74:38:e4:6d:b0:
         64:bc:36:b5:74:82:2a:e4:60:9e:36:22:3e:bb:d0:31:b4:7a:
         b8:7c:98:d6:33:1b:0e:23:2b:15:e4:17:dd:a6:8b:c6:73:22:
         4a:e5:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:09 2026 by rpki-client