Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File:                     SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier:          Y6RXp/Ptu8r++kTfEKzdLBq4MwBJ/lYW+Grg9Xp59LU=
Subject key identifier:   01:59:5D:8E:BF:A0:7F:1E:C9:FD:4E:B6:A5:97:26:93:09:D2:4D:D1
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer:       /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number:          0154
Signing time:             Thu 23 Jul 2026 06:43:33 +0000
Manifest this update:     Thu 23 Jul 2026 06:43:33 +0000
Manifest next update:     Thu 30 Jul 2026 06:43:33 +0000
Files and hashes:         1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: OjKXiVXmvWe8we4UJSox4XynjHVuIj87FV2ExpexZqQ=)
                          2: 35525B92845611EFB053C341C4F9AE02.roa (hash: ZevCcNNQ+Cl/hbcakseWpBDq3A4TOtczE3OSaShrKcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
        Validity
            Not Before: Jul 23 06:43:33 2026 GMT
            Not After : Jul 30 06:43:33 2026 GMT
        Subject: CN=6a61b815-32fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:02:cf:7b:d1:d2:de:a6:3b:2d:cc:5c:3e:
                    8a:33:f7:47:7c:b4:e5:99:50:77:0b:63:df:6d:3e:
                    73:ec:1d:f7:be:19:01:61:79:42:a0:fc:33:0e:13:
                    87:88:c9:53:a8:9c:09:b2:0d:bf:1c:3e:04:0f:b3:
                    b1:b5:89:a5:69:96:52:2f:28:e4:f4:b3:21:31:df:
                    83:57:e0:85:69:b1:ff:9f:85:dd:f0:b8:8f:dc:60:
                    b9:f2:be:db:3b:2f:46:ce:4e:97:ad:8c:28:8a:f6:
                    7b:b9:85:c7:b7:3d:29:a8:c5:60:a7:54:78:51:39:
                    e5:84:a2:d2:12:37:5e:66:7e:6e:0a:7e:3e:86:7f:
                    63:43:8f:de:65:4e:e3:d1:19:d9:8c:de:a0:44:1d:
                    22:e7:ee:bc:c1:8d:24:5f:aa:74:50:b1:87:c1:3c:
                    05:b9:9b:5f:aa:df:38:c4:d2:32:53:a2:dd:19:2c:
                    c8:ec:fe:da:d3:57:22:07:a4:5f:f8:84:00:64:6f:
                    69:f0:23:df:e2:64:68:84:e4:ee:f8:5e:bc:56:93:
                    28:93:40:4e:29:b2:c2:74:b7:44:88:1d:4c:55:aa:
                    dc:68:c8:eb:fb:09:f7:94:20:b2:7a:60:87:61:62:
                    6c:30:6a:7e:6c:ef:4d:56:6e:d0:69:1e:35:bc:a1:
                    3e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:59:5D:8E:BF:A0:7F:1E:C9:FD:4E:B6:A5:97:26:93:09:D2:4D:D1
            X509v3 Authority Key Identifier:
                keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:da:62:f2:38:7b:5c:7a:93:61:c0:57:1c:ac:64:6a:b0:6f:
         47:a0:f0:a9:85:6f:69:6a:26:90:4e:2d:c4:b7:11:75:38:03:
         58:43:8a:ce:8c:78:c0:c6:fe:67:5f:19:a8:68:5c:cc:b7:a4:
         e1:10:83:34:d3:ee:8e:10:81:33:35:5e:ca:fb:3a:60:65:b4:
         d0:af:28:35:03:88:c0:83:a4:0a:4b:be:78:76:9f:e4:81:1c:
         bc:8b:a9:bf:26:7f:9f:d0:46:95:b8:13:d6:03:8e:32:89:f1:
         77:c1:5c:40:9d:a2:24:0e:bb:03:62:48:20:90:3a:af:56:1c:
         5b:f5:53:01:cd:93:e8:b5:82:e8:79:9d:19:62:9b:bb:1c:13:
         c6:41:73:3f:d4:c3:3d:93:ae:92:df:8e:7f:09:5a:61:69:e5:
         60:39:59:ad:a9:1c:ff:44:34:49:a4:bc:60:31:6b:d3:f6:7a:
         87:94:fa:f3:f1:af:93:db:01:47:69:55:f7:9a:08:b9:81:b0:
         c9:c2:bf:72:f7:90:df:31:34:8a:44:d0:5c:4d:4c:df:f8:a9:
         6a:29:fe:bf:3e:ba:0f:f5:bf:45:fa:57:07:d2:3a:1c:18:0d:
         6e:27:0d:e9:23:f0:bc:75:26:a5:05:cd:5c:03:b8:7e:76:ca:
         36:c8:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:51:44 2026 by rpki-client