Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
File:                     t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json)
Hash identifier:          nAjAuxPvhNsQLHY5U0VzrsuO5iBRLSVWyptjy/aWs8E=
Subject key identifier:   5F:29:BD:82:5E:7F:6D:63:5E:77:68:B3:5F:AD:2F:5E:68:1A:8A:29
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1C0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
Manifest number:          1BB6
Signing time:             Wed 22 Jul 2026 16:20:42 +0000
Manifest this update:     Wed 22 Jul 2026 16:20:41 +0000
Manifest next update:     Wed 29 Jul 2026 16:20:41 +0000
Files and hashes:         1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: o2hbwUGVTQFoTguYf/3gISHUENhIsC446I9KRyaxgb0=)
                          2: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: AD+/rm2MmNUok2HarnjytNgvmBO5YkdTWhvT8ie3l4U=)
                          3: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: W8hlVsC5I0VPPg2kjR6TpTtecD0WvUvNvC2e5sJ/hIQ=)
                          4: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: 1NxyYZi8z+4zSdOTPHU5FWVo8GDquYcWL1OwjVPiKNg=)
                          5: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: ZaZYPfA17ML/f/J4P82QVyDEPcDzxxZaNFjB0O9tVyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7180 (0x1c0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Jul 22 16:20:41 2026 GMT
            Not After : Jul 29 16:20:41 2026 GMT
        Subject: CN=6a60edda-7476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:51:fb:15:5a:39:6c:78:e8:8e:3d:af:80:
                    35:2e:87:e7:54:68:ad:3f:49:e3:11:9e:5f:09:43:
                    42:1b:98:05:57:3f:1c:72:fe:64:76:2d:12:8c:6e:
                    d9:a2:a1:d8:25:13:f5:61:c7:95:f0:2c:a7:d0:9b:
                    cb:9b:90:16:5e:95:cd:a6:01:8b:20:42:b7:bf:b1:
                    2f:4b:d4:fd:33:a6:07:e4:8f:cd:7f:75:06:79:d2:
                    b6:e8:cb:c2:32:06:89:94:8d:1a:ef:93:ee:c8:a9:
                    d3:b1:39:84:72:35:0a:23:0f:53:3c:84:c6:30:93:
                    91:d2:fc:ce:0b:72:82:bd:03:68:1f:1c:e8:ef:fe:
                    ac:2b:24:7b:23:2e:15:90:bf:27:2a:b9:80:93:82:
                    5a:96:c4:64:16:02:fd:bc:a9:b9:09:86:f5:89:17:
                    90:08:18:1b:37:f5:d1:49:b0:45:d7:84:e5:07:4d:
                    d7:29:7e:ae:e9:0f:c8:db:36:30:fc:42:79:d1:03:
                    88:86:2d:4a:ba:ee:2f:38:6e:8f:cb:f6:1f:ac:44:
                    56:46:fe:ad:ad:87:37:ae:a5:48:9f:f3:5c:31:13:
                    4d:00:61:ec:68:55:42:81:af:ad:39:5d:14:6a:30:
                    61:f9:d3:6e:3d:dd:1c:78:bb:fe:92:f9:8a:d1:cd:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:29:BD:82:5E:7F:6D:63:5E:77:68:B3:5F:AD:2F:5E:68:1A:8A:29
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7a:03:9a:69:bb:ce:57:c2:b4:f4:75:24:dd:b7:ad:62:5e:
         39:f7:17:0a:4e:b1:13:57:6d:07:a3:0b:86:15:75:0a:aa:45:
         ec:60:7b:eb:0b:e9:62:16:21:b8:51:81:53:99:63:02:b8:9d:
         d8:b2:10:e7:25:a7:98:51:72:53:e6:ae:ef:34:d7:e0:93:09:
         83:59:7f:fb:0e:ba:b7:30:88:79:8e:d8:11:a6:9d:a3:1d:14:
         82:d7:d1:dd:52:65:37:a4:62:d8:cb:fd:ad:e2:c3:e8:6d:6e:
         ce:80:81:88:47:71:5c:99:3c:7b:9a:b1:bd:59:ac:18:45:9a:
         fa:a4:69:57:c9:a2:cb:b8:7f:1e:7c:fd:ae:94:20:e3:5c:4a:
         64:f0:d8:a3:1c:22:a5:ff:d7:46:51:ed:be:a9:18:dd:9a:52:
         53:9e:ba:46:cc:95:c4:30:00:58:f4:43:e8:cd:b8:db:2a:4e:
         3d:c7:95:4b:ee:51:c1:07:d3:a3:8b:b3:e1:96:b3:22:28:3f:
         64:9f:69:ee:d1:c7:e0:1c:78:ad:b2:28:7a:48:8a:10:b7:e8:
         b3:2c:09:3b:f0:a6:34:c4:be:b6:5b:e9:a2:74:4d:98:eb:7a:
         a9:18:d6:40:15:76:d2:45:30:73:49:eb:02:8f:45:35:fb:af:
         ae:d6:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:17:25 2026 by rpki-client