Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
File:                     k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json)
Hash identifier:          icmETS9AGpnetq8UereOBWM7bRtxOMpuBBOc5YC2qJc=
Subject key identifier:   97:63:38:B3:75:E2:B2:93:08:49:69:32:B3:43:B1:59:C0:3F:C4:88
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Certificate issuer:       /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial:       1549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
Manifest number:          151D
Signing time:             Fri 24 Jul 2026 01:35:23 +0000
Manifest this update:     Fri 24 Jul 2026 01:35:22 +0000
Manifest next update:     Fri 31 Jul 2026 01:35:22 +0000
Files and hashes:         1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: QbIW4cmq8sD+/aKOFEOWTf78LBWNyTh2qvhC4LyV/DM=)
                          2: 89567AD686F011F19E006003A7EE528E.roa (hash: dUSLzMUqDsxRAiIEeaK8+FCiCh/s3L2CzoYAjuY8X34=)
                          3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: uoO9Im5pkYbvz3VL3E29jCslGLRvKNamupOW6QMeXM4=)
                          4: 3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (hash: QEZRuL5g83zcIEE/jZzGGZwIsCMj1qeuX3dlcLFnIEA=)
                          5: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: 8O8JY2NXJlU6iXynIm/TOWGZDFkAjSbZghW1iOqNz4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
                          rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5449 (0x1549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
        Validity
            Not Before: Jul 24 01:35:22 2026 GMT
            Not After : Jul 31 01:35:22 2026 GMT
        Subject: CN=6a62c15a-7310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:af:a4:b9:9e:da:a3:2e:d3:15:26:d3:2a:
                    ef:7c:bc:ad:66:7e:15:2a:23:34:e1:c1:69:0c:25:
                    f2:a1:a0:d4:57:f1:94:82:1e:d1:03:4c:7f:6d:bf:
                    b1:14:7f:21:6a:34:0c:68:91:6a:aa:c5:5c:38:e6:
                    64:be:b4:e0:32:b5:0a:6c:80:ef:1e:a8:54:08:75:
                    de:d2:1b:c6:98:34:86:83:c3:9c:2d:df:a8:c3:53:
                    03:32:1c:11:4e:d1:ac:00:14:ea:14:d9:eb:06:5c:
                    f8:5e:7a:8c:02:84:2b:99:61:23:ac:8b:ba:6f:58:
                    6e:00:4b:72:8b:8c:e7:53:ce:e2:db:e2:53:37:94:
                    49:4e:30:c6:2e:ab:1d:4e:80:3c:7c:79:96:bb:e4:
                    90:cd:8b:bc:85:ea:f8:69:38:61:40:09:0a:c6:88:
                    fa:46:43:36:91:1b:83:18:1a:c4:30:be:d8:78:89:
                    08:84:ad:8f:79:f6:fb:af:59:d6:e0:0d:35:77:0d:
                    88:a6:14:7c:a7:8e:98:eb:70:e7:30:8b:61:29:ea:
                    cf:7d:35:b2:79:f2:b0:58:1a:2f:62:83:54:f6:39:
                    63:10:15:9d:50:57:25:fd:43:89:da:ab:82:10:d0:
                    eb:61:9c:9b:0b:69:de:3f:58:98:bc:c8:6e:1a:f7:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:63:38:B3:75:E2:B2:93:08:49:69:32:B3:43:B1:59:C0:3F:C4:88
            X509v3 Authority Key Identifier:
                keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c7:57:21:43:8e:8a:be:c2:de:b9:08:44:9d:67:fd:84:8d:
         17:32:0b:58:c6:a4:c8:c6:cd:da:20:ff:cc:c4:8e:93:dc:dd:
         e0:49:be:e1:75:dd:00:84:a6:b6:dd:eb:b6:72:ed:f9:9c:f2:
         97:b2:57:1e:47:38:2a:da:64:5b:29:c2:13:fe:9f:c2:ef:47:
         8e:1e:d2:59:c7:e0:60:79:76:38:cd:b8:10:06:d1:6f:2f:d6:
         11:54:63:4f:bd:fd:66:b3:53:86:7f:79:6b:f1:3c:0a:3a:07:
         8f:30:9d:9a:c0:a3:12:4c:3f:a0:82:04:60:e2:e4:18:fa:47:
         d2:e4:e9:54:d4:72:88:bf:c8:7e:fd:20:75:4b:2f:f0:bc:09:
         97:09:fb:c9:2b:b6:fb:20:a0:ac:88:b6:ca:80:7e:14:42:4c:
         28:84:5f:20:d1:e7:38:c9:8e:87:e6:5f:d7:8e:e7:bd:33:b7:
         10:8f:48:db:9a:c1:c3:f4:40:b2:f0:fb:f0:c0:70:2c:ae:89:
         7e:02:7a:63:61:6f:88:a2:fc:28:52:e4:72:dd:15:50:1f:4d:
         53:6b:e7:4c:90:42:47:cb:cd:80:54:22:21:5e:a9:be:82:4e:
         41:25:19:6d:e3:c6:de:f2:ce:71:15:d2:56:e3:e3:22:98:e2:
         14:4d:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:55:18 2026 by rpki-client