Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
File:                     -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json)
Hash identifier:          j1sN82xINPxuM7rPi6yR8yVqhvuTpTUu9Awo3CZlL6s=
Subject key identifier:   02:51:08:84:13:5A:41:22:D9:EA:E5:0D:E0:51:38:7F:39:34:F0:5B
Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
Certificate issuer:       /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
Certificate serial:       359A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
Manifest number:          357D
Signing time:             Wed 22 Jul 2026 14:16:18 +0000
Manifest this update:     Wed 22 Jul 2026 14:16:17 +0000
Manifest next update:     Wed 29 Jul 2026 14:16:17 +0000
Files and hashes:         1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: OpAQTDrU2wWL6Hzune9c4yabF3jf1Elu2HJOsb+4+v0=)
                          2: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: UzEPTLsD5T1ajQoZ/gCnYZnBau95KS3L99yADoGvBuE=)
                          3: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: 1OACpcIMwxDFvy670DP/4OuuubrWAy3MQQBov3eDpOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl
                          rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13722 (0x359a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
        Validity
            Not Before: Jul 22 14:16:17 2026 GMT
            Not After : Jul 29 14:16:17 2026 GMT
        Subject: CN=6a60d0b2-ae2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:79:e3:13:ee:14:6f:be:41:a8:d5:52:be:
                    de:8e:29:ef:dd:a3:6e:8c:12:d7:db:34:6e:11:d3:
                    a0:19:9c:24:8b:4a:4c:1b:6b:65:d5:36:30:d7:d1:
                    41:01:ab:f4:d5:dc:e3:4f:60:99:73:f7:a9:f2:03:
                    92:fd:bd:54:41:7a:2e:0a:8b:a2:8c:55:0a:7f:9b:
                    6f:3e:84:e6:ca:eb:a7:8d:0a:8a:95:aa:a4:a1:55:
                    c5:f9:02:bb:94:bb:84:3a:d5:6e:e6:c8:58:93:eb:
                    58:61:46:72:d5:71:9e:21:c9:25:fc:52:52:e9:12:
                    ce:da:b1:a7:3a:71:d6:17:d0:a6:42:99:24:26:f0:
                    09:e2:27:7f:4a:b0:27:4b:33:ee:a9:9d:37:55:0b:
                    a0:ea:ab:c2:2d:e1:63:db:da:38:1c:af:44:6a:38:
                    99:35:c7:d9:70:88:84:e8:ae:d3:ac:11:a9:5a:b7:
                    b5:71:63:22:20:2e:c0:e1:e7:c9:a2:45:5c:fd:af:
                    61:ec:5e:17:57:67:e7:41:93:e4:33:2d:25:25:e2:
                    58:9a:de:4c:4b:ec:e2:ba:77:30:74:63:6c:c3:af:
                    88:a9:42:e7:50:da:37:21:66:9c:ae:08:93:47:75:
                    e0:0c:44:10:2f:cf:b3:a9:ab:fb:95:d4:92:34:da:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:08:84:13:5A:41:22:D9:EA:E5:0D:E0:51:38:7F:39:34:F0:5B
            X509v3 Authority Key Identifier:
                keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:08:74:5b:7a:e5:f6:35:46:16:40:c1:30:a8:78:23:e3:99:
         8b:5b:99:a9:7c:2e:c0:15:ed:b4:31:80:e2:bf:68:41:15:64:
         14:53:9a:1a:a8:f2:52:57:c9:72:3f:2e:6a:00:e9:5e:3c:91:
         35:14:e9:95:d7:cf:e7:21:45:be:d9:0a:c3:a9:52:73:33:7b:
         f6:02:a6:83:a7:ad:25:ec:78:fc:63:a7:02:25:48:0f:17:0b:
         7c:62:70:4a:74:65:15:10:10:dd:5c:6c:11:6b:18:47:f9:01:
         9b:0b:71:e5:3d:21:c9:96:8a:91:04:7c:dd:17:8e:3a:d6:fb:
         18:fc:8c:55:75:b2:f0:13:78:92:56:ec:d7:6f:ab:97:38:c9:
         ae:64:94:a4:b2:6b:c3:e4:86:d4:98:cf:e6:6d:38:a2:de:b0:
         7a:4d:f6:89:90:d2:27:25:75:ac:a3:c7:71:3b:e1:92:4c:b1:
         7e:b2:dc:8f:01:5e:df:00:d0:d8:4b:c1:0e:bf:8d:7a:b3:6f:
         ca:aa:ce:03:4e:b5:c5:cd:73:9a:b2:b5:9d:34:aa:1d:7b:55:
         e0:6f:26:68:02:65:55:fe:e3:c5:02:ef:c7:46:1f:5a:27:6d:
         1b:11:f5:4c:b4:3b:84:5e:92:72:d4:72:26:86:ac:9a:15:f8:
         ff:f2:3c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:32 2026 by rpki-client