Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
File:                     Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json)
Hash identifier:          jyI+zp+a7w6x3R3eS7TqD25c2IFnnR/KFtjkLHoOLfo=
Subject key identifier:   90:6F:BC:8A:C3:9D:6E:BC:46:C7:E6:0C:8B:61:E4:8B:78:FF:43:65
Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
Certificate issuer:       /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
Manifest number:          016A
Signing time:             Thu 23 Jul 2026 06:23:07 +0000
Manifest this update:     Thu 23 Jul 2026 06:23:07 +0000
Manifest next update:     Thu 30 Jul 2026 06:23:07 +0000
Files and hashes:         1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: I192ELnZG9lfnEphMAYMgPYc7aUaMi7tlK5Mo7kpnAc=)
                          2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: xjdj17TdvEDkLf9+p3eEDDKwL+UFS4OGM0bjJjQEXIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
                          rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
        Validity
            Not Before: Jul 23 06:23:07 2026 GMT
            Not After : Jul 30 06:23:07 2026 GMT
        Subject: CN=6a61b34b-493e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:6d:08:86:14:8f:9f:39:31:f2:ae:ef:d0:
                    62:7c:44:ed:b8:62:77:ba:3c:7d:31:c6:1b:ec:c5:
                    c4:8f:11:03:e8:2a:5d:1b:78:a6:4e:ff:21:d4:aa:
                    4c:ed:85:7b:cc:9f:31:e8:19:ea:d0:7d:fb:08:77:
                    a8:54:8b:ef:f3:a3:ca:67:29:47:19:89:01:b9:12:
                    3a:70:4e:84:1b:ac:46:fe:cf:a8:5b:77:6c:49:77:
                    5a:d3:79:2a:10:41:3f:88:34:86:4f:82:de:b9:d0:
                    dd:93:93:05:9f:36:93:8f:b9:23:98:ae:c7:33:ac:
                    d0:11:40:75:0a:48:97:da:94:fa:ce:08:5e:60:81:
                    03:42:e8:ef:4b:dd:39:24:79:f8:4f:62:54:8e:d6:
                    ec:c2:c8:7d:ab:d2:bc:0c:26:a5:29:1b:5f:94:0d:
                    59:f5:d0:7a:1a:66:4f:db:e1:eb:9a:23:3c:4b:43:
                    04:a7:71:9f:05:e8:04:8f:58:2c:37:74:f0:90:ce:
                    8e:cb:d7:f2:35:ff:c8:2e:f7:01:0c:ae:05:61:50:
                    5b:22:37:2a:c6:7c:47:70:38:fb:53:7d:e2:ba:3e:
                    ec:6b:b1:dc:87:e2:87:a5:58:0b:3e:e2:14:23:6d:
                    cb:60:7b:6f:5f:a9:0e:fe:fb:68:0c:43:71:c6:18:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6F:BC:8A:C3:9D:6E:BC:46:C7:E6:0C:8B:61:E4:8B:78:FF:43:65
            X509v3 Authority Key Identifier:
                keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:76:e9:e5:61:a1:53:6b:09:38:21:56:6d:3a:7e:4f:0f:c9:
         f4:58:0f:1f:09:e5:46:cd:6e:46:14:6d:90:b7:34:59:e1:7f:
         85:ae:24:b3:cf:1f:40:83:cc:f7:b5:50:59:c3:23:ed:81:77:
         8d:d6:83:9f:b7:c9:e6:7c:2a:c9:84:36:40:17:f8:13:7d:f8:
         15:48:e4:21:13:5a:ef:a0:10:bb:c2:f9:6a:1a:6c:e7:ef:e3:
         7a:d3:8e:7c:9d:b7:36:51:a6:8b:4e:da:51:d4:93:0d:cc:83:
         09:9c:74:a4:03:bd:cd:c0:2e:a6:60:eb:33:cc:e3:43:e2:0b:
         51:7e:52:ad:a3:0a:a4:6c:47:33:06:8c:36:9b:25:7d:5b:53:
         21:e3:3f:4c:57:34:0b:29:51:dd:61:ee:e8:62:a7:ff:70:f3:
         5c:b8:82:0d:22:94:ac:df:43:13:9f:93:7f:1a:89:1f:92:41:
         1b:48:f0:31:c5:c6:be:61:33:d8:00:e1:c8:13:a3:a8:a1:47:
         07:cd:e2:9d:dd:fc:3a:fd:a5:cb:2c:86:bf:90:cf:b2:13:93:
         48:9f:1b:60:ad:6c:47:92:a3:8e:4e:3d:04:03:2c:7f:18:5e:
         7c:b9:41:e0:09:ea:22:7c:f6:77:69:c9:24:6a:19:90:7b:ee:
         a1:48:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:45 2026 by rpki-client