Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
File:                     BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft (raw, json)
Hash identifier:          GVN2JvPFxl3yEOoTBoKeVfns7n6gigWaCmTUbDVoFBY=
Subject key identifier:   A9:A0:87:E6:AC:20:E6:42:AE:55:00:32:C1:A0:86:38:A6:C1:C1:31
Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
Certificate issuer:       /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Certificate serial:       029E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
Manifest number:          0297
Signing time:             Thu 23 Jul 2026 02:51:47 +0000
Manifest this update:     Thu 23 Jul 2026 02:51:46 +0000
Manifest next update:     Thu 30 Jul 2026 02:51:46 +0000
Files and hashes:         1: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl (hash: SZurpA63/FshCFUTkOjxoENByVhEhFPBjcXv6ZUw7/w=)
                          2: 1ED3BAF898A011ED9D31B05CC4F9AE02.roa (hash: 94M44dsN95Cfdn+68CbMlhuF5n5qBQCEV7YwA9S7Ln8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
                          rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB8D7, serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
        Validity
            Not Before: Jul 23 02:51:46 2026 GMT
            Not After : Jul 30 02:51:46 2026 GMT
        Subject: CN=6a6181c3-86f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:e6:f5:52:9f:01:a6:b1:ec:17:5b:b5:58:
                    d6:fc:25:88:99:6f:72:f6:71:7c:ad:21:55:9d:f0:
                    60:44:da:92:bb:85:96:34:24:da:14:cd:64:64:39:
                    a3:31:71:cb:dd:83:0b:96:65:59:fb:15:b2:8a:54:
                    6e:4e:cd:64:de:7f:53:cf:bd:2c:4b:ad:ed:ef:ff:
                    15:e3:6b:37:39:d2:13:5d:57:96:9d:46:57:36:a2:
                    81:18:a8:88:0b:9e:2f:db:78:59:3d:a9:7a:a8:a0:
                    cf:ab:ed:23:f6:b0:e0:93:01:0b:30:d4:a8:88:5c:
                    7a:00:db:c7:c1:8a:b2:37:13:17:3e:8c:71:57:56:
                    a6:ef:ff:8d:7d:5c:a5:70:9b:db:d2:fb:7a:c2:27:
                    d8:38:e6:ac:79:eb:49:c4:be:1b:76:77:7a:37:61:
                    7f:02:57:52:f0:ea:0d:91:76:77:0d:bd:50:af:15:
                    dc:63:07:e2:c3:13:b6:1f:3c:b3:91:c6:d1:33:9e:
                    47:41:cf:e6:2b:b3:9a:ec:58:e3:a6:e1:da:62:5c:
                    f8:73:78:47:44:04:c0:05:de:fa:6e:55:ea:21:2e:
                    76:ad:1f:39:e9:9c:c2:8f:b7:77:93:2c:d3:66:aa:
                    16:d9:f1:34:1a:95:67:11:8c:54:74:d8:1c:c5:73:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:87:E6:AC:20:E6:42:AE:55:00:32:C1:A0:86:38:A6:C1:C1:31
            X509v3 Authority Key Identifier:
                keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:dd:8f:0d:69:e6:8c:4a:f4:67:32:4f:23:e6:7b:f8:7f:f9:
         c6:98:ae:b1:f1:b4:84:f7:f1:02:a4:83:66:e4:69:bf:29:99:
         af:48:76:bf:07:3e:31:2e:17:6a:13:54:b5:d6:65:04:32:ce:
         fc:e9:8e:c4:7f:58:9c:76:57:78:cd:9b:30:26:9f:c5:cf:86:
         32:5c:c2:a7:29:40:32:13:de:95:dc:a4:20:37:24:dd:4f:81:
         24:46:ae:e4:6a:38:20:03:77:8a:c5:00:a3:f7:c9:8d:d0:1a:
         82:ec:20:24:a5:1d:ad:18:69:d8:d6:8e:53:32:b0:77:32:aa:
         b7:a6:22:e6:b3:01:56:b7:25:ba:87:d9:99:b9:3c:83:69:27:
         c1:b0:ad:fc:0f:62:aa:63:86:ac:16:c0:87:86:16:93:e4:29:
         97:2a:3b:8f:8c:be:28:7a:4b:27:74:2a:bf:c8:d1:87:86:88:
         b7:bb:90:9d:85:75:f0:cb:09:75:17:b3:c1:6f:b0:46:3b:3d:
         32:ba:d7:da:a7:15:1d:44:08:87:99:29:91:39:7c:6f:be:a0:
         d1:05:0c:56:7d:7a:05:82:48:df:7e:ba:ed:68:7e:36:ff:c4:
         cd:21:2c:79:59:71:ac:50:1b:71:22:5e:ec:cf:fb:7d:ed:2b:
         b6:1f:62:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:53:35 2026 by rpki-client