Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
File:                     aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json)
Hash identifier:          cKk6fB+1snNvfHuO2j/A1FkbF1vKnf5lWc+tNSd1XRA=
Subject key identifier:   43:DB:2F:DA:38:71:07:06:A8:8F:AF:17:39:66:91:58:6F:25:34:82
Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
Certificate issuer:       /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Certificate serial:       08FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
Manifest number:          08EC
Signing time:             Wed 22 Jul 2026 20:47:48 +0000
Manifest this update:     Wed 22 Jul 2026 20:47:47 +0000
Manifest next update:     Wed 29 Jul 2026 20:47:47 +0000
Files and hashes:         1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: OLXeBbRa8oKdliYOGGJ4RnDU+WF9jjPc7w737KxDaOQ=)
                          2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: Q2tDi7aDCqJfPbKlsvpv/Im3EMBA1tZp/jy9biarem0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
                          rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4750, serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
        Validity
            Not Before: Jul 22 20:47:47 2026 GMT
            Not After : Jul 29 20:47:47 2026 GMT
        Subject: CN=6a612c74-f76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:07:8d:96:45:15:e1:4e:b3:04:fa:a6:9a:
                    87:4b:4c:bd:be:8d:10:21:d5:ae:8c:93:47:03:99:
                    6c:ff:de:48:46:db:62:13:3f:a8:43:50:30:73:e4:
                    fd:06:50:54:11:b1:e6:c4:db:45:85:4e:96:d5:f8:
                    01:e2:3c:39:2a:89:2f:60:aa:d7:30:25:87:80:f2:
                    cc:b6:a8:5c:90:91:35:66:07:c8:0c:bf:98:3b:b3:
                    2a:ce:f5:60:eb:19:59:79:e1:c9:ef:7f:24:5f:2a:
                    f4:95:7d:5a:fe:af:48:6b:4c:23:8d:c6:ab:8d:57:
                    e9:77:a5:30:b7:a5:75:08:d4:be:bf:ed:0a:b2:f5:
                    40:30:d2:0f:9d:5c:e2:f4:ad:4a:0f:1c:c0:25:df:
                    b5:a9:9e:e6:83:65:84:1a:16:38:b6:6c:d1:7d:4b:
                    76:1f:da:0a:eb:fa:fd:57:9c:0c:cb:1d:78:a5:e8:
                    a7:85:61:23:b2:61:9b:20:24:32:35:e6:28:48:53:
                    5e:51:ff:68:5b:4b:06:fd:a3:0c:8b:38:e6:a7:82:
                    26:00:db:9c:84:a7:aa:55:fa:75:50:38:5a:fc:c2:
                    8a:95:1f:ae:c7:20:e5:cc:f0:1e:ac:d5:1a:00:64:
                    af:94:9e:21:70:10:90:29:8d:f6:4c:4d:76:e4:88:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DB:2F:DA:38:71:07:06:A8:8F:AF:17:39:66:91:58:6F:25:34:82
            X509v3 Authority Key Identifier:
                keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0b:82:a6:ed:ce:3e:d8:31:57:fe:f9:fe:13:e7:50:20:6e:
         33:fa:6c:dc:bb:53:23:4e:b9:a2:04:b1:c4:5c:63:15:ca:8e:
         51:ad:cc:9f:b7:bd:5a:50:6a:70:b1:55:75:c5:8e:95:28:9e:
         63:f6:93:c3:84:4a:fd:01:69:8e:f3:be:f9:21:c4:7e:fa:c5:
         11:5f:cb:fa:88:df:b9:18:1e:3f:9e:c5:e4:cc:be:43:22:69:
         97:9d:23:44:16:8f:51:f9:65:84:17:32:22:de:86:98:f9:89:
         d9:ee:bd:0f:33:85:7d:c6:14:41:f4:14:d8:6f:1e:7c:4d:7f:
         b5:97:4b:84:e5:d0:bc:f2:e0:8a:91:54:d0:8a:c9:43:21:df:
         70:93:e6:38:b5:d7:2e:2f:f7:e3:2a:e2:68:49:be:25:f9:18:
         92:97:03:67:15:49:6b:ce:f9:a5:f5:21:0c:f0:b3:e1:3b:08:
         7e:6e:8b:bd:6b:1f:68:dd:79:e7:20:bf:e5:6a:79:7b:ca:ee:
         d0:87:fe:58:4b:c1:75:7b:21:7f:dc:8e:7f:fe:b0:1f:8f:ce:
         ac:86:35:24:69:86:6b:9b:ee:4f:80:e4:f5:46:c5:37:bf:fc:
         67:c0:d8:1f:cc:ac:90:a6:63:f4:d8:62:0d:79:dd:9f:59:73:
         25:08:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:22 2026 by rpki-client