Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
File:                     bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json)
Hash identifier:          tCSTMagxWvS2WBLHTlpu2JEp3nx9cpEE07ESJaPbzwY=
Subject key identifier:   2B:E6:60:47:E9:3C:38:55:B9:2C:74:97:32:62:DC:9A:B8:B1:74:25
Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
Certificate issuer:       /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
Manifest number:          0136
Signing time:             Thu 23 Jul 2026 07:16:13 +0000
Manifest this update:     Thu 23 Jul 2026 07:16:12 +0000
Manifest next update:     Thu 30 Jul 2026 07:16:12 +0000
Files and hashes:         1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: /pCDThvVA9XE7q+LnOsH8zTFA0hSkDYr1Ecn8/mvPhk=)
                          2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: nV38DqB6S2s+obaWtL39HR2W0RXsAZejFz8xEU6bYCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
                          rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
        Validity
            Not Before: Jul 23 07:16:12 2026 GMT
            Not After : Jul 30 07:16:12 2026 GMT
        Subject: CN=6a61bfbc-4855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:63:0f:08:c6:c7:dc:9e:eb:f7:51:6c:a0:
                    44:5d:f4:fa:30:cf:aa:f2:6f:6e:c1:73:49:d8:5d:
                    69:98:9e:7d:44:fd:09:6a:f0:b3:90:2d:8d:ed:c9:
                    0e:b7:b7:8d:fe:da:77:74:be:f3:00:e4:c7:3e:cc:
                    54:d6:13:50:ad:2e:75:0e:29:7f:ce:db:6c:76:9d:
                    2d:3c:8f:a8:2b:47:a9:ec:64:08:56:58:26:ef:b8:
                    e4:2f:5f:14:d3:ad:a1:2b:fd:18:22:71:df:87:77:
                    54:8c:4a:c3:e6:ec:fb:f0:e4:9a:71:d8:1f:61:dd:
                    be:a1:62:93:17:1a:e7:ef:87:e8:4a:9b:e0:5a:d9:
                    d3:16:6b:93:89:d1:98:70:ef:af:7f:2d:6d:dd:23:
                    29:9f:9b:14:68:db:a8:36:fc:24:fa:06:8e:51:7f:
                    e0:be:29:7d:2c:2c:43:a9:73:2b:82:78:40:02:26:
                    22:05:dc:9f:3d:ce:2e:e2:31:f3:83:ba:c0:d2:c7:
                    4c:77:d7:84:ec:5e:bc:3a:da:d7:47:08:dd:f4:b8:
                    d1:36:23:cb:03:22:33:e5:23:5c:55:81:10:bb:1c:
                    35:29:91:82:0e:11:28:bf:a7:b2:97:3e:2e:e6:7f:
                    6e:b1:df:f8:66:77:a1:81:a5:0e:29:7d:8a:2a:d4:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E6:60:47:E9:3C:38:55:B9:2C:74:97:32:62:DC:9A:B8:B1:74:25
            X509v3 Authority Key Identifier:
                keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:48:5f:3c:ba:5c:48:9d:e5:ee:e9:73:f4:f5:11:a9:04:00:
         47:93:b1:f5:a4:5c:b0:27:7d:06:0c:40:63:a1:1e:6f:45:0b:
         bb:bb:b8:9d:c9:4e:bc:06:92:d2:21:37:14:72:c8:86:f9:de:
         83:89:3b:58:32:ef:b2:f3:62:53:cd:96:9c:03:df:2f:a7:cc:
         a6:88:e9:fd:06:aa:6e:2c:1d:81:1b:5e:25:4b:d9:dc:6d:c5:
         89:17:ec:71:8e:f4:85:98:19:9e:42:2c:80:d5:8a:cb:a8:2d:
         34:51:fc:f9:eb:5d:51:70:e4:ac:f2:e5:7d:ea:0c:c9:15:20:
         9c:53:4c:67:d3:ba:e1:88:1f:c6:99:34:4d:01:1f:1f:e5:2d:
         72:05:36:0d:24:00:6b:23:84:13:0b:8b:c8:60:fa:96:d2:d5:
         dc:f6:39:6e:73:cf:f9:e8:3e:c5:51:ce:31:fb:f1:89:18:cf:
         3d:55:46:7e:fa:44:39:fe:5e:8d:64:32:d1:64:05:5c:92:e3:
         52:f2:0c:01:9c:d7:0b:8a:96:8f:60:98:9a:50:1f:e1:8f:e1:
         d1:d7:10:b2:53:8f:d7:cb:79:8f:dd:3e:42:b6:1a:28:c9:44:
         92:22:75:99:6c:aa:50:ac:ae:66:40:72:cb:9e:a5:6d:50:e4:
         1d:de:dc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:33:24 2026 by rpki-client