Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
File:                     PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json)
Hash identifier:          GYaVxvI2n5KGKUg4ZCvPN8JVtU8bryk5Iyxi8uzMFhs=
Subject key identifier:   BB:67:B8:80:A8:2F:5E:97:1E:B4:CA:73:6F:85:2F:9A:8C:B5:27:8B
Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
Certificate issuer:       /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Certificate serial:       0960
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
Manifest number:          0954
Signing time:             Wed 22 Jul 2026 20:37:01 +0000
Manifest this update:     Wed 22 Jul 2026 20:37:01 +0000
Manifest next update:     Wed 29 Jul 2026 20:37:01 +0000
Files and hashes:         1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: Cp5PIuPEve3m9NzNz4UET2QbAVLnsakqDFSuHUdsa5o=)
                          2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: xiYVAwV4Hd8CI0pxe/FxOmue7CKhH9jCSO4x/aLBcjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2400 (0x960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
        Validity
            Not Before: Jul 22 20:37:01 2026 GMT
            Not After : Jul 29 20:37:01 2026 GMT
        Subject: CN=6a6129ed-6024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:14:a8:54:c2:78:58:95:3f:9e:c6:48:ca:
                    ec:f9:a9:38:6b:04:f2:61:6b:fd:7c:39:bc:59:95:
                    7f:7a:65:7f:c5:e2:bf:96:d0:89:d4:f7:3f:c4:88:
                    9e:da:5f:b1:46:c8:75:76:44:d5:a7:6d:1c:7f:be:
                    a4:f3:7f:23:35:29:8c:77:ce:9f:93:3c:be:1f:92:
                    56:0f:4c:cf:18:b3:5c:81:2c:99:df:f8:ef:fd:27:
                    8e:a6:21:ae:f0:7c:fd:dc:35:5a:ca:a6:60:3b:1f:
                    60:cf:84:2f:59:5f:90:6d:59:97:50:3f:86:30:d9:
                    19:a3:26:93:23:31:a3:22:ae:9a:46:0e:78:51:94:
                    27:bd:c0:87:a8:8c:cd:e2:2d:57:d0:42:b3:64:97:
                    bd:c6:0e:7e:d1:1e:0e:ff:aa:6c:70:e0:1f:71:6d:
                    94:8c:69:41:ab:a0:65:d6:6a:9c:4f:f0:fe:3c:0e:
                    e3:df:d0:e5:8b:41:df:b6:2e:c3:db:32:1a:f3:45:
                    3c:84:30:d2:b7:7d:e9:8c:da:f3:bf:b6:42:2e:9a:
                    34:5d:01:5d:59:b2:6c:ce:c9:b7:cc:5a:81:47:50:
                    0c:ae:fa:dd:84:e1:a2:66:ad:6f:d8:31:b2:c5:e3:
                    43:a6:37:64:4e:e3:11:21:44:b9:96:d6:4b:35:d8:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:B8:80:A8:2F:5E:97:1E:B4:CA:73:6F:85:2F:9A:8C:B5:27:8B
            X509v3 Authority Key Identifier:
                keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c1:09:41:50:99:0c:7f:42:e7:cc:a1:59:b9:c7:8b:6d:16:
         64:a2:9c:d2:dd:20:81:e4:a9:39:2f:1d:2a:26:29:71:f5:14:
         71:39:05:7b:47:37:f0:8e:19:3c:2f:81:73:88:88:bc:06:66:
         39:13:32:55:97:dc:11:4c:de:d0:da:0b:3e:e8:9f:6f:a4:70:
         f1:2b:b2:72:81:a9:16:f6:d6:c4:08:76:f1:4e:5e:7c:d5:10:
         05:09:46:7a:86:97:42:47:a0:7c:73:97:52:be:f4:d8:a8:f9:
         8b:d8:46:4d:63:dd:1d:81:3c:3a:59:e1:f6:b2:60:fe:65:83:
         91:13:b0:81:bb:76:72:85:a2:a2:1a:8a:01:c8:df:bf:48:4c:
         b6:47:88:c2:0c:36:16:e0:55:56:2c:4a:1b:63:52:50:8b:38:
         ff:2d:91:35:52:84:b7:05:d1:f0:77:12:b3:44:6f:0c:5d:86:
         58:21:b2:cb:0d:f8:55:ca:25:9f:98:aa:c7:7f:34:4b:f3:44:
         85:72:ae:5a:d3:6a:db:7a:52:e6:44:67:d5:a6:04:74:ff:51:
         73:6e:cc:3f:9d:37:64:11:74:b8:bc:58:cf:17:f2:28:a5:da:
         a0:aa:4a:ed:7c:df:8b:eb:91:bf:de:71:a5:93:ee:82:0a:7b:
         d9:62:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:27 2026 by rpki-client