Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft
File:                     a6spHHXSmuNRQl8zWSdvmWpHY4o.mft (raw, json)
Hash identifier:          4M/fm6wXVDy1Q48JRLr043kDxkeKxbYhTDw5fhYVdhc=
Subject key identifier:   18:32:A2:27:91:BB:20:52:1E:41:88:C9:13:C6:A4:09:0B:A2:F2:F7
Authority key identifier: 6B:AB:29:1C:75:D2:9A:E3:51:42:5F:33:59:27:6F:99:6A:47:63:8A
Certificate issuer:       /CN=A91BE2F6/serialNumber=6BAB291C75D29AE351425F3359276F996A47638A
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a6spHHXSmuNRQl8zWSdvmWpHY4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft
Manifest number:          1A
Signing time:             Thu 23 Jul 2026 11:01:31 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:31 +0000
Manifest next update:     Thu 30 Jul 2026 11:01:30 +0000
Files and hashes:         1: a6spHHXSmuNRQl8zWSdvmWpHY4o.crl (hash: yJb7avQGQ+mpZZJL2eCByvog2zcd44K3HRa3fGGXjQs=)
                          2: 70FBEBF45E5C11F18CFD5F700D7AAC22.roa (hash: i0tj7RMQgOcOuyqDW6PhqjVGODM75vtYFvLbA/6Ejjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.crl
                          rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a6spHHXSmuNRQl8zWSdvmWpHY4o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE2F6, serialNumber=6BAB291C75D29AE351425F3359276F996A47638A
        Validity
            Not Before: Jul 23 11:01:31 2026 GMT
            Not After : Jul 30 11:01:30 2026 GMT
        Subject: CN=6a61f48b-2d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:4a:f0:ff:ba:62:96:43:f3:a2:ee:c8:b8:
                    29:fa:ad:31:cc:77:b5:13:a6:08:63:32:80:91:a0:
                    95:8c:61:6e:4b:4c:9c:bd:59:d2:8f:04:13:ff:74:
                    33:d2:16:04:97:75:b6:81:da:f1:3f:9c:c0:c2:b5:
                    d3:3a:3c:ef:d1:8e:f0:f1:69:8c:12:0f:25:fa:f1:
                    81:c1:89:da:2f:a6:09:1b:85:e2:14:52:f2:b0:78:
                    13:39:61:1e:52:3f:4f:f0:53:ea:0c:4d:ed:90:65:
                    28:a9:fe:d2:62:37:af:e2:3f:cf:5c:65:7f:1e:1d:
                    76:c9:79:cc:5e:09:b1:08:4d:00:10:c9:28:9a:01:
                    33:8b:ed:1f:8c:f6:2a:df:eb:7f:ee:6b:7e:32:10:
                    84:98:eb:aa:a7:af:50:aa:ad:e1:4d:c8:7f:11:82:
                    2a:1d:02:84:b6:e9:0c:b9:3a:cb:7c:cc:ca:bf:85:
                    69:8a:4f:62:a7:65:10:91:fc:aa:f9:ff:71:d5:92:
                    3c:9d:81:11:e0:b9:bf:a7:3d:99:6d:8f:e3:76:4a:
                    02:91:18:12:4e:b5:35:10:04:64:3c:4f:84:d8:89:
                    0e:d2:8b:1a:a8:a4:78:16:52:b4:09:21:5c:92:f1:
                    1f:de:b0:8f:75:57:1a:08:6b:93:27:d8:41:f3:09:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:32:A2:27:91:BB:20:52:1E:41:88:C9:13:C6:A4:09:0B:A2:F2:F7
            X509v3 Authority Key Identifier:
                keyid:6B:AB:29:1C:75:D2:9A:E3:51:42:5F:33:59:27:6F:99:6A:47:63:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a6spHHXSmuNRQl8zWSdvmWpHY4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:50:2e:56:64:07:17:00:49:cc:ad:55:97:8c:7d:63:19:f3:
         2c:79:09:c4:af:33:1c:cd:26:2d:ce:e8:9b:ff:9b:46:0f:c8:
         76:f6:0e:15:cf:89:28:64:86:f2:6f:20:af:48:3d:6c:c6:5d:
         db:d1:7f:25:7e:95:f7:bc:16:ad:cf:e7:45:4f:7e:79:36:ca:
         7b:17:8c:d4:10:76:2c:7a:f1:32:ed:8a:ab:45:a1:ad:aa:30:
         76:17:c4:c0:88:18:c4:4b:f0:1c:fc:9b:b7:e3:95:86:1e:e8:
         0f:2d:be:d4:e4:5a:89:2d:a5:fd:06:e8:a8:e5:f2:81:dc:28:
         b6:ba:6c:a4:57:33:22:d5:69:47:6d:34:90:be:33:eb:0b:19:
         0a:3c:fb:a8:e4:a4:47:4d:4d:f6:0f:2b:fe:77:35:fc:be:27:
         df:fc:db:07:40:a5:7c:16:96:44:08:8c:77:1a:98:52:84:d4:
         4c:44:6a:64:05:ca:48:c1:69:da:1f:9d:43:65:5a:ed:ed:a7:
         06:f3:de:93:4e:22:26:99:1c:3f:30:ac:5e:18:45:a5:dd:43:
         05:87:8c:a1:c9:48:c1:41:cd:cd:dc:20:0f:5f:fd:81:96:af:
         16:4c:60:a4:75:57:d0:0d:a4:23:cc:a0:4b:03:01:be:d0:8c:
         96:0f:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:08 2026 by rpki-client