Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
File:                     o5mhLEjADkJh0o4MV_1OPkcNLrc.mft (raw, json)
Hash identifier:          6f3jSYkDd4WY6lLcYWFhj1kAMPxJvI+/e6glnlHrMTk=
Subject key identifier:   6B:FD:4A:AB:B4:17:C3:80:AD:BD:B0:31:7F:E5:FE:FD:D2:70:1F:66
Authority key identifier: A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7
Certificate issuer:       /CN=A91C4401/serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
Manifest number:          90
Signing time:             Thu 23 Jul 2026 09:18:47 +0000
Manifest this update:     Thu 23 Jul 2026 09:18:46 +0000
Manifest next update:     Thu 30 Jul 2026 09:18:46 +0000
Files and hashes:         1: o5mhLEjADkJh0o4MV_1OPkcNLrc.crl (hash: fb8II4i+ADXmFy3441sgovBXk+jBFRDoTAlRI8yTf0A=)
                          2: C0FD1FF0AA7111F0B4546269C4F9AE02.roa (hash: ny6KgtWAxAxsP09sSmBzSKP9/SUXwkqR5HeRZHk3STU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4401, serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
        Validity
            Not Before: Jul 23 09:18:46 2026 GMT
            Not After : Jul 30 09:18:46 2026 GMT
        Subject: CN=6a61dc77-8886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:57:5c:a2:74:91:20:dc:8a:8f:c6:46:67:b4:
                    e0:72:ef:54:a8:05:89:b0:ea:ef:f8:e3:c2:f3:b6:
                    f2:ce:55:9f:aa:a2:03:34:88:28:9f:df:6b:c3:4f:
                    e4:76:d3:c4:60:5e:83:74:e0:70:09:25:72:61:7b:
                    eb:48:97:71:6c:72:01:57:a9:40:35:1a:5b:2f:3e:
                    02:e2:f4:02:f1:7f:a3:39:d7:d7:b5:a1:2a:8c:0f:
                    bb:7f:90:59:d9:25:fb:08:52:26:05:15:35:0d:29:
                    2e:00:65:db:88:b4:81:b8:2a:c4:55:f3:71:e3:5d:
                    16:b7:9b:b0:bc:83:c3:d3:1f:43:88:f6:62:56:11:
                    c7:06:f4:aa:07:c3:b5:2c:22:cb:0a:d9:c1:31:f5:
                    b8:98:45:aa:f7:c4:ee:80:a6:73:42:8d:b8:a1:ee:
                    ae:a9:64:f2:88:23:7f:a3:2e:d1:49:35:ba:d9:ef:
                    38:71:6d:45:e2:c7:f0:02:a2:a7:02:f8:6b:47:4f:
                    d7:cb:76:b0:36:08:14:86:45:ba:bf:c2:9a:92:cf:
                    21:19:44:d9:53:85:5d:92:94:95:d9:a1:a6:e7:3d:
                    8b:4b:72:ff:8f:fb:b1:47:4a:89:73:90:05:b9:11:
                    5b:cf:ae:e2:67:83:bc:c0:5e:4a:3e:37:18:a4:f8:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FD:4A:AB:B4:17:C3:80:AD:BD:B0:31:7F:E5:FE:FD:D2:70:1F:66
            X509v3 Authority Key Identifier:
                keyid:A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:39:e5:fc:f5:1f:0a:88:9f:e2:77:e9:4d:75:3f:2d:8c:60:
         0c:e7:13:4f:9f:1d:10:10:a0:40:93:bd:7e:b3:d8:f5:7b:2b:
         6e:47:e6:03:3f:9d:83:43:79:cc:49:93:1d:46:e3:87:6f:d0:
         06:5d:a5:ca:84:95:11:c0:8c:f6:19:de:0b:75:99:6e:4c:8d:
         af:cb:f7:ac:d3:2d:e8:c3:4e:7f:a6:45:c9:44:be:82:8b:d6:
         2a:65:8c:7c:4b:d4:e4:15:2e:68:ec:a9:63:58:36:fd:6e:bd:
         44:b5:1d:c1:a4:69:8a:15:48:6a:28:d8:04:15:54:23:87:57:
         be:e5:9e:b5:f8:42:a8:ed:75:6f:c1:91:bb:e6:8b:29:ad:9a:
         68:51:94:0b:d5:d3:2c:ae:76:ab:3d:b8:75:57:50:89:ef:44:
         60:29:91:31:ab:59:9b:c2:98:50:f0:7b:f9:ae:5f:00:71:01:
         66:31:c8:96:7f:71:6d:67:c1:45:a8:fe:f8:01:50:a9:3e:94:
         14:4d:86:a1:96:8f:48:6e:30:66:b5:30:3c:ed:02:8b:fe:5a:
         ae:59:9e:54:32:64:54:8f:f4:10:08:7e:a6:3e:23:3f:6e:90:
         a6:20:de:b5:1d:6f:29:c8:a6:ce:20:c7:74:e1:aa:f5:dc:62:
         19:c5:89:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:12:07 2026 by rpki-client