Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
File:                     d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json)
Hash identifier:          c8lnp1eehDGg6RtdISp4FFv6Pmxrs39fZgo4nikPGoo=
Subject key identifier:   4C:BB:CA:36:12:A1:A0:A9:6B:38:EF:D0:E3:B1:DA:E3:64:3D:38:1A
Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
Certificate issuer:       /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Certificate serial:       072D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
Manifest number:          0724
Signing time:             Wed 22 Jul 2026 22:36:58 +0000
Manifest this update:     Wed 22 Jul 2026 22:36:58 +0000
Manifest next update:     Wed 29 Jul 2026 22:36:58 +0000
Files and hashes:         1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: jutc5G57bY2MnvCnS9NgkWxxMGjotsObGxGvYpZzWqI=)
                          2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: Psgba/J6D2Rc4QvTasd4fTFxXwiZJRSLuDPikpsNKlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
                          rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837 (0x72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
        Validity
            Not Before: Jul 22 22:36:58 2026 GMT
            Not After : Jul 29 22:36:58 2026 GMT
        Subject: CN=6a61460a-68dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:99:ce:9a:26:a2:72:58:37:12:fa:1c:bb:
                    ce:6a:43:b7:a5:1c:bc:4b:31:51:4f:1d:8a:1d:56:
                    fd:49:d1:36:02:fb:e9:15:7f:c8:88:f3:97:14:f4:
                    63:6c:ec:3f:de:42:da:85:a4:7c:48:ac:c4:46:fd:
                    94:7b:be:a7:8b:e2:4e:d7:be:5c:b1:13:37:8e:5f:
                    ff:d7:14:cc:a4:35:09:52:2e:97:cb:cf:6a:b1:63:
                    37:7e:56:94:6b:4f:28:88:32:1f:01:9f:28:bd:85:
                    a4:71:ca:85:50:3e:a2:ea:70:33:27:56:c6:d5:c5:
                    21:df:0f:d8:3f:7c:8e:13:b5:ad:fb:12:d5:36:b2:
                    fe:90:85:86:ae:7a:b0:43:ae:30:f6:32:3b:4f:d3:
                    8d:cb:a3:84:29:c4:8e:31:43:8e:8b:a9:87:6c:8d:
                    aa:05:98:fe:46:48:15:27:a7:50:70:e5:c5:f3:77:
                    54:a0:22:e4:77:28:91:f8:35:46:d7:f6:81:74:e8:
                    56:4c:b6:6f:a2:1c:23:37:6b:b1:80:6f:05:23:b9:
                    1f:22:ad:24:2b:12:4a:6d:67:0d:9d:e3:36:61:4b:
                    71:e1:16:9c:0f:ed:c3:ce:7f:38:d5:d9:75:cd:c1:
                    a4:ec:da:c0:66:f3:22:64:44:02:67:e3:08:75:c7:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BB:CA:36:12:A1:A0:A9:6B:38:EF:D0:E3:B1:DA:E3:64:3D:38:1A
            X509v3 Authority Key Identifier:
                keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:87:e6:45:0a:2d:ff:fa:a5:b9:78:3a:68:fe:dd:53:f9:3d:
         54:ec:92:46:13:5a:97:b4:cc:4b:72:60:de:64:d5:62:78:40:
         76:5d:73:72:d1:4e:f4:36:02:aa:05:15:cd:f3:cb:8e:b0:4c:
         c9:b3:39:3f:fc:e7:bc:3a:2e:5c:25:68:b8:c7:2e:85:dc:d5:
         67:60:67:30:0d:fc:02:90:3e:a0:7f:4d:55:a9:79:5e:94:80:
         e2:1e:29:86:9f:d8:bd:dd:6b:d8:9b:b6:75:2b:cc:e2:01:e2:
         14:b6:2e:71:ac:1a:f2:77:d2:23:a2:8e:fc:10:0a:95:c9:06:
         b9:bb:0c:0f:32:7b:96:57:d2:92:e9:d3:b6:40:6d:86:ff:59:
         17:bb:22:ef:37:c9:e1:ea:cd:d2:5a:56:db:c8:12:e9:71:c7:
         a1:e5:b0:68:0f:13:70:24:b4:fc:ab:0a:f2:61:f0:c1:ac:a8:
         d5:a8:4b:d5:03:ff:d7:b0:b4:c8:f9:d8:a8:0e:48:7b:87:46:
         50:10:46:46:e2:a4:fc:a3:73:db:e7:d4:48:52:9f:03:b0:80:
         a4:6e:aa:59:ea:f3:b1:f4:2b:df:21:f6:a0:1a:54:56:a5:47:
         4e:07:49:9a:25:9b:03:93:bc:37:3a:4c:1a:4a:a0:f3:bd:2a:
         2c:be:61:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:52 2026 by rpki-client