Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
File:                     4-snntAeg57yRYBuBFH8FVAJJqI.mft (raw, json)
Hash identifier:          h0I5Uw1MQvbTyB6g3aq3VM/HwjXW1SuNJm4VYzJg30A=
Subject key identifier:   47:49:22:7F:EF:B0:5F:EE:9C:13:9A:29:CE:0F:47:0D:E6:85:EC:70
Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2
Certificate issuer:       /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
Certificate serial:       0892
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
Manifest number:          0884
Signing time:             Wed 22 Jul 2026 21:14:47 +0000
Manifest this update:     Wed 22 Jul 2026 21:14:46 +0000
Manifest next update:     Wed 29 Jul 2026 21:14:46 +0000
Files and hashes:         1: 4-snntAeg57yRYBuBFH8FVAJJqI.crl (hash: Nh8pV6No4rLhpNg5PvLuArCTgcC7XD5OPrZbl5nx+6I=)
                          2: EBD94A14049A11EBB73A8663C4F9AE02.roa (hash: 8zfgdLC6VsDkgcK1mHGF+FaKm382kRVtAP3ox2ZhRI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl
                          rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C53, serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
        Validity
            Not Before: Jul 22 21:14:46 2026 GMT
            Not After : Jul 29 21:14:46 2026 GMT
        Subject: CN=6a6132c7-c50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:b1:b4:ac:c1:5c:d7:13:9d:30:73:db:3f:
                    32:b3:3b:9f:a1:fe:71:0d:15:3b:88:5e:33:d6:0c:
                    6a:45:60:62:e9:c7:18:70:c1:6d:c1:0b:2d:cc:90:
                    3c:b2:1e:5f:8c:ce:37:36:cb:b3:59:ca:d7:13:6b:
                    f5:96:87:b9:49:13:89:d0:80:ec:7e:69:29:e8:29:
                    f4:52:c3:9e:e6:5a:07:69:51:b5:3b:c7:a7:99:9e:
                    be:85:9c:4b:a3:76:7e:a7:26:72:92:55:94:25:d2:
                    f8:65:2a:96:e9:95:73:ee:28:74:38:6c:e7:9f:b9:
                    50:a9:2f:4f:86:9a:53:00:16:20:cf:a0:19:3d:08:
                    b8:de:f8:0a:c1:22:2a:68:24:95:93:0b:9a:ee:db:
                    f9:6e:ef:42:cc:05:f0:71:04:ae:aa:98:5d:73:4d:
                    7f:29:04:ce:80:e3:b5:bb:39:27:6c:c5:ac:b0:fd:
                    b9:34:38:c9:ab:a5:35:23:b7:b8:e3:57:4a:63:3d:
                    d2:4c:53:ac:4a:0f:45:db:24:ee:53:ed:c3:9b:ee:
                    ed:2a:f6:7a:db:66:fd:ff:56:ae:e0:17:d8:b7:26:
                    5b:3a:71:6c:06:91:63:d7:28:a7:80:97:b5:0b:e7:
                    fc:82:0f:fb:23:ea:81:9b:53:32:9b:8c:0c:5a:b0:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:49:22:7F:EF:B0:5F:EE:9C:13:9A:29:CE:0F:47:0D:E6:85:EC:70
            X509v3 Authority Key Identifier:
                keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c8:b4:56:75:6f:84:95:5d:61:fc:10:1c:5e:ef:b7:89:27:
         85:59:e5:e8:d4:ea:f6:05:e5:9d:1e:61:e9:34:43:32:8f:55:
         ec:a6:44:6d:90:ed:c4:72:64:1f:52:74:4d:61:66:ed:e9:1c:
         72:24:b8:2e:48:ff:9e:50:66:62:93:2d:9d:8d:62:5d:b2:24:
         88:d6:b5:8d:28:c2:cd:8a:8a:02:40:e7:6b:9f:1b:13:3b:21:
         e0:bf:bb:d4:17:f1:da:84:89:b3:09:30:0a:f8:49:a5:b3:d3:
         ed:8d:df:aa:fb:8f:12:20:11:32:26:dc:57:e7:6a:fc:3b:05:
         9b:5b:f4:eb:ed:d5:3a:61:36:91:72:d8:a0:67:9d:3c:7e:9e:
         d1:e9:74:85:29:1c:5f:51:60:5d:22:fa:a6:2a:72:b7:bb:6c:
         67:d1:51:64:bc:ce:26:14:94:d9:cf:62:0a:23:e6:ad:1b:06:
         6d:44:e1:d0:bd:ee:e8:cf:25:f5:e2:e3:20:97:41:a4:9f:22:
         7e:61:fc:56:b0:08:b3:8a:80:05:ec:ca:62:69:33:c8:a2:8d:
         ce:34:fe:e0:18:3f:28:af:bb:f9:1f:db:91:40:e8:5b:f6:6f:
         f1:61:be:c0:f0:60:d4:08:e6:65:4a:b8:ec:6d:63:ff:d4:c7:
         f7:fb:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:37:43 2026 by rpki-client