Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
File:                     4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json)
Hash identifier:          yAbgovl/iIf6uHaylQcj3qGpXc4lA5XextVHTUSTt7w=
Subject key identifier:   28:C1:5E:49:60:BE:29:7E:6A:5A:B1:4E:22:4B:AD:BA:57:82:22:DB
Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91
Certificate issuer:       /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
Manifest number:          0138
Signing time:             Thu 23 Jul 2026 07:13:38 +0000
Manifest this update:     Thu 23 Jul 2026 07:13:37 +0000
Manifest next update:     Thu 30 Jul 2026 07:13:37 +0000
Files and hashes:         1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: LDgsI75Z2EtjdITCr4PV0TVoQ3FRU+ZrYWA1NoNgtSo=)
                          2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: qQ+iMBsnI6+Y33rIWpsuvyD5YPUXPAMZYZLTuJsOPi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl
                          rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
        Validity
            Not Before: Jul 23 07:13:37 2026 GMT
            Not After : Jul 30 07:13:37 2026 GMT
        Subject: CN=6a61bf21-3057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:10:a5:c7:80:14:3b:04:9f:d2:14:2e:49:f0:
                    08:50:59:94:bd:74:71:35:7f:27:47:40:af:03:b6:
                    e6:94:b0:b4:48:32:b1:74:42:5e:27:96:a3:85:e3:
                    67:8b:74:f6:06:c4:47:09:00:d0:de:76:10:8b:a5:
                    16:21:80:8b:af:00:f6:a3:14:cb:96:1c:ca:34:e4:
                    b6:34:b6:d3:6d:ad:6d:12:b7:d5:a1:5d:a7:76:51:
                    71:56:28:20:a8:2e:86:4a:b7:10:cc:12:d7:53:2f:
                    48:6c:5a:05:a3:58:f1:31:fb:96:ee:5c:92:54:40:
                    18:38:32:f0:7b:e8:e3:67:7e:b7:7d:72:54:ac:80:
                    a6:5d:00:17:f3:81:c4:dd:20:f9:da:09:99:4b:b0:
                    a9:4b:b6:f7:7d:2c:b1:36:1b:08:a9:5d:e2:b3:bd:
                    02:3e:29:e7:9f:c9:3f:d4:47:1c:5d:95:d8:cc:fe:
                    51:e9:d4:1e:25:cc:fe:5d:22:f8:c3:28:ac:7d:e1:
                    e0:06:83:3f:91:e0:cb:59:ab:83:f9:5e:a9:5b:06:
                    14:77:6b:6a:a3:da:94:b3:63:e2:54:bc:58:75:e5:
                    d9:98:82:9a:d7:cf:d1:d1:73:2b:30:0e:93:64:02:
                    f8:88:97:22:4e:c3:e0:69:b5:f8:ec:6e:f2:fb:d1:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C1:5E:49:60:BE:29:7E:6A:5A:B1:4E:22:4B:AD:BA:57:82:22:DB
            X509v3 Authority Key Identifier:
                keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:fa:7f:9a:e8:1f:81:3a:94:d5:c0:87:74:c8:a8:8e:df:
         33:c2:10:f2:90:fa:c3:7c:6d:54:e6:13:60:11:b9:64:9b:8a:
         cc:5c:f8:a6:e2:64:d8:ba:26:53:ad:3c:fa:e1:e4:27:98:f1:
         da:26:07:a3:bc:99:e7:c7:15:e7:dc:24:22:46:1d:2c:2d:9a:
         f9:e3:0c:5f:7c:7a:ba:ef:1a:40:38:e9:69:0d:d6:52:8e:28:
         60:ee:25:38:15:e6:65:e0:f0:63:a3:7b:5e:2b:87:b0:be:52:
         d4:1f:a3:f7:68:8e:60:41:c6:33:1a:71:b9:3d:9b:67:d1:9d:
         27:65:67:bf:69:d3:73:3b:ef:5f:4a:e9:e8:06:fc:c5:48:8a:
         a0:82:35:c6:ef:f4:50:c9:52:62:05:5e:58:c6:d5:b1:43:f9:
         8e:e5:41:e4:cc:aa:af:81:d3:94:5e:71:8d:90:5b:4a:58:44:
         fb:2b:b7:83:45:d4:de:37:f7:1c:b0:00:5f:ff:db:0f:b1:d9:
         37:13:d8:f4:b1:c5:73:2e:cc:73:c9:31:66:2d:a7:b4:5a:8e:
         0e:3e:04:75:e4:ae:03:8f:3b:ce:f7:8f:ff:40:7d:5a:ba:f7:
         62:c7:6c:6a:36:a5:39:6a:e2:66:aa:98:b6:ec:9a:4f:8e:0a:
         ed:29:f6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:19 2026 by rpki-client