Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
File:                     25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json)
Hash identifier:          UjEkHtMwiJ5ASp2wMbc8doSEYPPrbfVxnuttUD6ZoVo=
Subject key identifier:   1B:2E:95:C4:10:9E:25:91:A3:AE:6C:0A:F0:05:B2:C8:A6:97:7A:1C
Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
Certificate issuer:       /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Certificate serial:       1DF0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
Manifest number:          1DE2
Signing time:             Wed 22 Jul 2026 16:10:25 +0000
Manifest this update:     Wed 22 Jul 2026 16:10:24 +0000
Manifest next update:     Wed 29 Jul 2026 16:10:24 +0000
Files and hashes:         1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: CvglrKreiLqesgFkkarpcN7XdUjOgiZtuJFL/z50L6Q=)
                          2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: bYaDtLZITXZD32x/G/ifQ4D5B/vhmcgFX9IrYx2NC+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
                          rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7664 (0x1df0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
        Validity
            Not Before: Jul 22 16:10:24 2026 GMT
            Not After : Jul 29 16:10:24 2026 GMT
        Subject: CN=6a60eb71-0ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:ee:8c:b7:48:ad:dd:3a:92:e7:cb:46:49:
                    75:02:e0:86:4c:d2:46:90:ca:4d:10:d2:8b:32:18:
                    fb:ca:96:0c:63:b8:a8:8a:4c:85:99:10:7f:b3:32:
                    83:5f:4a:8d:99:9b:cd:26:01:70:41:f1:03:ea:85:
                    6e:31:ec:41:84:a7:1f:b4:24:22:b6:e1:5b:af:63:
                    dd:af:a1:4c:00:fa:59:4d:02:5e:1d:90:f7:82:ac:
                    1a:ef:93:67:17:4e:f1:8d:0a:dd:03:50:2a:bf:84:
                    02:f3:67:e5:ea:00:83:ca:61:68:78:81:1d:e6:7e:
                    ef:13:06:19:9a:62:90:e6:01:70:8f:ad:37:11:f9:
                    09:cd:92:b8:78:86:55:07:09:f3:ee:f6:19:91:16:
                    d6:4a:e7:bb:bb:d5:4e:ed:d9:fb:80:50:4b:42:eb:
                    ec:e8:dd:fb:93:3e:75:e6:96:14:60:9a:c3:22:a6:
                    91:84:7c:46:23:52:4f:93:89:31:90:9f:13:62:26:
                    a6:fa:93:be:19:59:8f:78:ad:89:fb:04:1e:83:20:
                    c1:68:b2:36:ca:79:13:07:0f:0d:4a:49:b3:4b:8d:
                    e1:18:fc:5c:65:4f:be:09:55:ae:37:a0:77:3a:2a:
                    a5:ca:87:d0:79:68:9c:a0:53:67:2e:16:29:03:d4:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2E:95:C4:10:9E:25:91:A3:AE:6C:0A:F0:05:B2:C8:A6:97:7A:1C
            X509v3 Authority Key Identifier:
                keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:08:bd:ba:78:58:15:60:63:ce:95:71:42:2a:cd:75:63:ba:
         89:f2:7c:db:f0:58:2c:d2:45:91:e6:bd:4f:43:ad:ff:a9:ff:
         3d:09:95:fd:41:1b:fc:b2:59:a2:b4:b6:31:4b:4c:8a:1b:14:
         5e:ff:98:0d:6f:aa:d9:27:e5:46:18:e8:81:69:f5:c1:dc:6b:
         16:f3:af:ab:a8:28:8c:e5:45:8a:cc:5e:23:99:2c:ee:a0:59:
         35:01:5b:0b:3d:12:e7:e7:97:48:e4:e4:8a:d5:fb:c8:75:33:
         aa:3e:59:46:75:a3:89:4a:a0:e1:3a:38:be:13:7f:19:af:06:
         82:fa:1f:8e:b2:b2:67:9a:77:3a:02:84:0c:4f:f0:46:3c:a4:
         84:19:06:01:35:92:7d:27:2c:d2:36:96:90:21:e9:eb:24:7b:
         45:74:58:4c:9e:d3:49:56:a7:6b:b1:34:fd:15:85:e6:16:56:
         58:96:d9:74:e5:e7:f0:d0:b1:1e:90:be:0e:68:de:46:44:5e:
         91:7f:e3:93:1c:bd:c2:3d:78:91:c3:29:18:31:86:4c:b2:99:
         b4:17:1b:a5:a4:db:2c:00:3a:75:d4:f0:31:d5:20:3c:d2:6a:
         30:cc:1f:be:24:d3:60:0f:95:59:8b:82:fa:88:bc:31:b3:34:
         79:95:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:53 2026 by rpki-client