Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
File:                     8VAZIKVfOnwnEDkUn_oop8HMOPE.mft (raw, json)
Hash identifier:          PdjAZmdAT2bqlHZ9HiYgbHVrHRMAE9JvfGp/vIldSu8=
Subject key identifier:   4D:4B:93:92:C0:A2:4F:D5:11:09:F4:80:D3:82:0B:AB:99:5B:BE:61
Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1
Certificate issuer:       /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
Certificate serial:       043B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
Manifest number:          0434
Signing time:             Thu 23 Jul 2026 01:08:54 +0000
Manifest this update:     Thu 23 Jul 2026 01:08:54 +0000
Manifest next update:     Thu 30 Jul 2026 01:08:54 +0000
Files and hashes:         1: 8VAZIKVfOnwnEDkUn_oop8HMOPE.crl (hash: 7zTN/8J8bFVjn00DVulIuS2PQWheFiO5P5JOryAWO04=)
                          2: 8304B142B34711EC90A6DA67C4F9AE02.roa (hash: E0te7z7859at34MRFLNavnFyL+a8lv5dig7hn7bo8Ag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl
                          rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B49C0, serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
        Validity
            Not Before: Jul 23 01:08:54 2026 GMT
            Not After : Jul 30 01:08:54 2026 GMT
        Subject: CN=6a6169a6-3e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:a1:7c:78:d1:40:5e:e6:53:0e:f0:3f:85:
                    ee:15:9d:04:62:0b:e7:27:c2:eb:e1:83:9d:30:3a:
                    f6:15:88:fe:15:3a:b6:05:f2:3b:64:03:e1:fa:20:
                    32:44:4d:2d:92:f2:22:33:4b:f3:73:15:85:d0:8e:
                    a1:7c:d4:d5:c6:f9:1a:69:9b:27:7c:cc:0a:93:8c:
                    90:69:b5:ae:a6:6b:95:8d:2a:ee:60:1f:dc:73:40:
                    88:f1:26:d5:ad:61:ce:46:9c:d8:cd:23:3f:03:a1:
                    60:9b:56:ba:47:a5:f2:3b:e9:c8:0b:de:46:b5:63:
                    24:74:71:9d:5d:fb:80:25:d1:49:a5:fd:ba:1b:d8:
                    9c:52:65:53:f9:37:9c:99:ee:a6:0a:70:b1:2f:e1:
                    43:58:2e:90:c5:3b:56:e7:47:0d:db:c1:f5:f5:a5:
                    88:f0:95:d7:c3:81:ce:eb:df:84:75:dd:dd:cd:2a:
                    e2:6c:05:c6:e7:49:17:c5:96:55:26:38:46:da:d1:
                    f6:b3:f9:ce:8a:f2:42:45:eb:4a:a4:c6:77:6d:05:
                    01:2a:2f:9a:fe:23:83:94:bc:30:0d:7c:e2:de:4e:
                    9b:dc:7d:6a:25:96:3d:9b:59:03:d5:0b:1a:ed:b0:
                    09:a3:e9:c8:4b:1e:79:90:9a:59:d9:4b:0c:a8:27:
                    ed:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4B:93:92:C0:A2:4F:D5:11:09:F4:80:D3:82:0B:AB:99:5B:BE:61
            X509v3 Authority Key Identifier:
                keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:87:eb:91:27:8d:87:57:86:9e:78:d2:b3:d6:08:bf:9f:2e:
         b1:c3:9c:49:86:d6:18:a6:41:e1:1a:4d:f0:ce:b0:f9:31:1f:
         d3:1c:57:ca:ae:95:33:23:26:cb:7e:2c:3b:61:62:9c:22:05:
         09:fc:e2:eb:c9:66:aa:5b:c6:10:38:aa:1d:8e:78:05:2b:3e:
         e7:e3:95:ab:c8:0a:6a:2d:9a:5c:1c:42:0e:72:22:7a:f4:6e:
         51:9f:d2:d6:8f:ff:eb:01:1a:68:b6:10:87:bb:97:05:40:96:
         6b:ac:e3:15:df:5c:97:db:98:ed:4e:3b:85:2d:94:06:1b:b4:
         13:e6:c5:f4:a6:a0:b9:c9:ed:42:4a:63:5f:ad:6b:ec:58:89:
         13:28:6b:69:f9:dc:59:bb:01:55:66:22:4b:7c:dd:f7:11:12:
         4e:05:f1:fc:24:ec:3e:5e:96:7c:b8:33:4b:32:db:e6:1d:b2:
         f4:b6:fd:8b:1b:43:13:b8:ec:b4:a9:49:2f:69:db:fe:bd:e5:
         fe:32:b5:9a:b4:1a:25:7f:ed:ac:06:6e:62:e7:36:8a:4f:67:
         ae:15:31:05:10:bf:16:84:4a:9f:12:e2:b1:0f:ee:d7:4f:48:
         c2:4d:9e:c6:54:12:20:88:60:df:a2:9a:12:94:22:ac:2f:fa:
         55:40:8e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:35 2026 by rpki-client