Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File:                     -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier:          uE4mhs1ae9RjyAww0jgRfHx1K2sfgMDw6s2uXCc1NtM=
Subject key identifier:   F6:7D:93:1B:A4:FC:56:7E:58:2C:70:B2:48:13:8C:27:A6:AD:6F:70
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number:          0162
Signing time:             Thu 23 Jul 2026 06:33:19 +0000
Manifest this update:     Thu 23 Jul 2026 06:33:19 +0000
Manifest next update:     Thu 30 Jul 2026 06:33:19 +0000
Files and hashes:         1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: qKwUJwReiihrVlj46K5hYzaSktX1LRvYSfsk6AdVlRw=)
                          2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: QHT2EqJHyPujaDEriJMd/9h9fPZLETh+MJuliPGlg9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
        Validity
            Not Before: Jul 23 06:33:19 2026 GMT
            Not After : Jul 30 06:33:19 2026 GMT
        Subject: CN=6a61b5af-fb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:75:3a:75:09:2d:ab:2d:bc:fc:a5:46:92:99:
                    e8:44:1d:c2:61:22:1d:7a:f9:72:ca:67:37:a0:0a:
                    8f:02:22:d5:0d:ba:f9:a4:1a:aa:a3:88:1f:36:2f:
                    01:6e:c6:8b:49:8b:22:01:d7:76:bf:77:4a:60:f2:
                    34:25:57:b8:c8:85:5e:24:9f:a5:bd:5e:f8:2d:88:
                    31:68:8e:77:36:91:43:39:ec:df:26:b1:8a:aa:6a:
                    d0:c9:48:2e:2c:8a:90:ab:fb:4b:76:9f:27:f4:06:
                    bc:d0:52:a0:49:af:d6:84:b9:1c:9c:a7:d1:2e:48:
                    d5:54:63:8c:cf:56:e3:32:35:b1:61:18:92:7d:48:
                    eb:39:6a:ee:76:ec:30:b2:d9:a1:6a:7e:c2:47:5b:
                    bf:c9:58:8b:64:ee:17:ab:9f:54:4e:60:f5:24:0b:
                    a0:7a:a2:bd:72:dd:47:4c:cb:a2:ea:5e:ad:7c:24:
                    1b:07:8c:43:29:d9:4d:66:5e:1f:fc:28:9c:cf:5c:
                    3d:fd:81:8f:07:8f:e5:05:20:e4:b8:9e:c6:64:66:
                    47:04:83:21:c5:29:40:5d:00:37:3f:f7:d2:83:23:
                    d1:74:6c:5a:d4:6d:49:3f:fd:5d:eb:d8:f8:bb:4d:
                    16:ae:28:8b:a1:1d:9a:e8:21:0a:e6:91:c6:e9:0f:
                    8e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7D:93:1B:A4:FC:56:7E:58:2C:70:B2:48:13:8C:27:A6:AD:6F:70
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:b5:18:d4:70:03:ad:0d:aa:8a:2c:db:ac:be:4b:75:cc:
         7b:7f:92:c6:9f:0b:93:7f:5b:e7:af:3b:99:6f:a2:b1:35:0a:
         81:84:19:0d:b7:33:7d:0d:2a:b4:b7:3f:bf:d1:b7:49:b0:03:
         30:92:5d:74:76:2b:17:7d:ee:c1:91:28:88:d1:ab:e3:79:ce:
         e2:a4:ba:9e:e5:e1:bd:6e:b3:60:eb:eb:3c:c4:1c:b8:d6:74:
         97:bd:32:81:ab:c4:f3:c5:d3:74:da:3b:42:e8:9a:d0:dc:f1:
         54:47:8e:85:5f:ad:0c:fd:58:61:e7:87:55:f1:29:a8:d9:94:
         7d:b1:ee:9e:54:75:e6:04:97:5a:d2:8f:c9:c9:89:f8:31:2b:
         4c:77:e6:1a:64:eb:b6:8e:c6:1f:69:18:fd:a2:a2:fe:52:79:
         97:bd:3c:3e:81:ab:44:68:df:8b:69:47:4c:43:38:0e:e5:64:
         31:2c:54:a0:52:2e:a4:ed:84:c0:4d:bc:10:2d:b6:eb:4a:8a:
         e8:7d:90:30:c2:08:13:83:e3:6a:b6:7f:f9:3e:dd:6b:eb:cc:
         25:15:5b:98:80:90:40:5a:e6:25:7c:60:93:9f:b2:57:4e:b2:
         6b:7d:4a:67:63:1b:a6:c1:e1:86:73:51:60:71:bb:70:54:05:
         7e:33:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:29 2026 by rpki-client