Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
File:                     F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json)
Hash identifier:          EDdskYboIVrpGoGvPJ2YPmNaPv27nstGPYSknYDt/Mk=
Subject key identifier:   34:AF:17:20:AE:D4:FF:42:65:74:DE:90:C9:5D:D5:8A:B5:93:4B:A4
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Certificate issuer:       /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial:       09E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
Manifest number:          1AFE
Signing time:             Wed 22 Jul 2026 17:21:20 +0000
Manifest this update:     Wed 22 Jul 2026 17:21:20 +0000
Manifest next update:     Wed 29 Jul 2026 17:21:20 +0000
Files and hashes:         1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: cW0J+Wyw5KadW8BIpx/xPOExf3ruIztM7KqTx3hwmUo=)
                          2: 3B4BB0AAFF8111F0BED16FE95C6F56BC.roa (hash: 7tv/5D9HntchiRfctALMuiuXJj9zM35Uyt8wDbjn1wE=)
                          3: C3D424C4F4F611F0B230A1D14E6F56BC.roa (hash: eIWV2PVAmeguQkSyB8K0knff+OjMcoKXdZxZHafjh0o=)
                          4: 42BEF0C6965A11F089F1E151C4F9AE02.roa (hash: xbADL7cJr+2vRtqNmInV63ZP0c0h+KFlCiFFTFNf4Uk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
                          rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2533 (0x9e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
        Validity
            Not Before: Jul 22 17:21:20 2026 GMT
            Not After : Jul 29 17:21:20 2026 GMT
        Subject: CN=6a60fc10-3060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a8:40:03:01:fe:83:f5:49:60:e8:3c:34:06:
                    06:c7:7f:62:b9:9b:88:55:84:e5:b8:fa:8e:6a:f3:
                    5a:cd:c4:34:12:16:9a:28:bc:c2:f6:1e:4b:43:8b:
                    29:f7:b9:06:75:db:fb:37:c1:50:a1:47:8d:ce:54:
                    e9:d1:b0:dd:c7:9f:92:c7:35:34:c8:6e:46:f2:22:
                    77:76:d2:2a:46:cb:a0:e6:b2:38:47:74:83:57:b3:
                    79:53:b9:ab:f4:c4:f6:b7:6d:65:52:6f:2c:bf:2f:
                    ef:70:49:90:c0:5b:22:49:10:75:01:fc:f5:8a:11:
                    ae:5f:73:cb:2c:0f:4a:3d:1d:9e:f2:97:6c:a8:03:
                    2d:9e:05:23:e3:7e:2c:6a:f1:f9:52:7c:f8:d5:11:
                    be:cd:53:eb:53:55:87:f7:08:33:80:95:68:17:46:
                    59:77:f4:19:a7:76:21:07:92:42:23:49:76:e1:45:
                    ff:85:51:e4:b0:db:4f:4e:b2:00:5d:58:f9:6c:c3:
                    61:a7:73:02:1a:d2:04:97:58:01:5e:43:e7:a3:d2:
                    89:70:07:87:29:c2:35:7a:11:07:9e:09:9d:ca:06:
                    ab:15:e6:34:07:69:2b:66:ac:54:87:58:61:1d:85:
                    34:11:b7:7e:f3:c3:4e:95:10:f7:a8:aa:57:a7:1f:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AF:17:20:AE:D4:FF:42:65:74:DE:90:C9:5D:D5:8A:B5:93:4B:A4
            X509v3 Authority Key Identifier:
                keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:5a:01:0b:71:56:bd:26:bc:21:a9:24:70:85:f2:19:57:
         76:6e:27:f0:50:e5:ef:0a:48:a3:72:80:fa:ac:c1:eb:08:85:
         39:ce:48:1c:41:cd:06:88:c4:be:39:4b:6a:66:3e:a8:8c:85:
         a0:54:7e:fc:c5:db:7a:de:86:65:4b:9c:98:de:2c:63:09:d4:
         cd:28:89:21:b4:4f:be:1e:6c:7b:3b:49:b8:c7:09:46:a0:5e:
         8e:d6:d5:57:94:08:08:6d:36:cb:dc:eb:61:9b:96:a1:d9:cb:
         c9:f1:e6:7e:88:2d:cb:7c:61:27:41:99:9e:30:18:4b:59:96:
         0e:cd:83:6a:4f:2a:70:ef:5e:e2:c2:46:6d:89:59:15:ab:af:
         96:6e:90:ea:f7:58:83:5a:24:b5:8a:5f:52:eb:03:97:f9:04:
         45:58:d6:2c:4b:7e:fa:6a:3d:b0:d4:76:45:95:1b:7d:06:9c:
         db:fa:a4:71:63:09:6c:df:76:03:de:fc:56:3a:e7:0f:52:bc:
         6b:9e:42:42:c4:0f:1f:bd:16:4a:8a:d1:0d:84:2b:dd:cf:b8:
         85:61:b5:f9:16:eb:e2:b1:3e:aa:40:d6:20:56:fb:30:98:e4:
         ea:00:5e:7e:f5:8e:d2:c6:9f:89:2c:21:27:3a:5d:a7:75:cd:
         71:e8:f6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:25 2026 by rpki-client