Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
File:                     sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json)
Hash identifier:          Fm2Uz5e4XhtrbbUZHhIgt1Iu2GGOpixyBZAUuH51W3A=
Subject key identifier:   67:D2:09:9C:71:14:CD:46:D7:43:61:9C:0E:0E:A8:27:BE:05:EF:42
Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
Certificate issuer:       /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Certificate serial:       06CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
Manifest number:          06C4
Signing time:             Wed 22 Jul 2026 23:01:10 +0000
Manifest this update:     Wed 22 Jul 2026 23:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:09 +0000
Files and hashes:         1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: xfa8rmNiwS9v8ljMe1mPoX8jo3Vs82E+KttpyPwKVvE=)
                          2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: xZwoqxfOayEV992muPvVHQ2Q6o2AK6AHasTqY2PsFBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl
                          rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
        Validity
            Not Before: Jul 22 23:01:09 2026 GMT
            Not After : Jul 29 23:01:09 2026 GMT
        Subject: CN=6a614bb6-47e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:8e:87:86:d7:81:4c:09:f9:07:27:6b:3e:
                    2f:60:f6:9a:1b:c5:a6:9b:6a:ef:6c:86:e2:fa:28:
                    21:17:4a:b2:71:7d:b9:0e:10:7c:50:3e:1e:38:c1:
                    e6:4e:d6:05:15:02:e9:03:45:04:50:be:b5:f0:09:
                    a2:c2:6a:2f:19:8b:1e:3c:73:c2:33:5f:12:94:8f:
                    eb:c2:9f:ff:5a:8e:e0:e0:c5:cd:0f:ef:2f:c4:b3:
                    52:da:42:d9:e3:4f:20:00:3b:33:b3:e7:94:c0:95:
                    3c:b9:bb:74:dc:8b:2b:a8:b9:31:40:ba:a2:d4:12:
                    e9:16:91:51:9b:44:16:07:96:f4:b9:7a:8f:b2:c1:
                    00:e5:df:8c:bb:11:98:43:53:08:e0:b5:cc:2c:57:
                    15:be:69:e4:7b:93:c4:9c:97:7e:f6:14:2a:02:3b:
                    03:21:b0:82:0b:a1:8f:f4:86:49:d7:69:eb:9a:df:
                    5f:c7:55:ac:92:16:d6:96:fb:d9:90:8e:1b:b1:43:
                    c4:9e:54:dc:bc:7e:36:70:40:92:95:d4:c4:c6:af:
                    99:1c:73:5f:af:ec:f3:67:37:02:63:3f:6d:a8:1a:
                    06:75:28:99:b1:0b:cf:9c:05:44:76:1e:2e:e6:93:
                    c3:ea:8f:98:14:55:ae:f4:3e:76:b7:1f:de:9e:4b:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D2:09:9C:71:14:CD:46:D7:43:61:9C:0E:0E:A8:27:BE:05:EF:42
            X509v3 Authority Key Identifier:
                keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c1:9b:b5:2f:5e:cb:fa:bf:b4:0a:bf:82:ef:42:ab:97:f1:
         03:15:d4:6a:17:c6:eb:f6:21:f4:63:e8:8f:3c:4c:84:82:83:
         ce:f4:fc:bb:df:91:0e:eb:47:34:cf:0d:5e:59:6c:ba:a0:50:
         01:1a:6f:99:b7:79:3d:af:e7:c5:f2:43:0c:18:63:ed:2f:8f:
         da:94:00:de:18:e6:ae:7c:e9:30:e5:89:9b:89:5b:01:ca:f9:
         14:65:ce:f5:60:6b:9e:86:94:92:49:d2:57:8a:9a:b5:b7:a3:
         bd:0d:0b:86:b7:ae:ec:86:ad:40:7a:36:bb:01:c7:c9:df:b4:
         86:89:0b:c5:3c:97:64:b6:ca:71:c2:c4:e5:8b:28:c7:84:23:
         af:7e:bd:4c:1b:0c:05:af:4f:b0:54:58:f0:4f:0f:af:e7:a8:
         8f:88:5a:68:ae:fc:1d:4e:f2:24:05:8c:46:cb:4e:a4:54:5d:
         42:b4:4b:cb:26:f1:81:60:ed:af:c4:f0:1a:5a:2b:c1:30:b0:
         43:82:c5:59:8e:63:51:e7:4b:fd:75:66:10:89:d0:03:c1:d6:
         17:ea:e3:6a:f5:81:99:8c:7e:22:33:44:5a:b8:b6:2e:f1:24:
         89:be:24:3c:e6:bd:65:bb:f9:cf:0d:f8:b3:c4:e1:a9:76:c9:
         61:07:98:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:19 2026 by rpki-client