Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
File:                     MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json)
Hash identifier:          kB5K9FKzlfUihzdaHGn1Gems0ja91WaSFKlET6W81HM=
Subject key identifier:   A4:F9:79:7B:76:7D:FE:98:DC:1C:4D:89:C9:1A:05:F7:AF:38:05:B3
Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF
Certificate issuer:       /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
Manifest number:          0148
Signing time:             Thu 23 Jul 2026 06:54:48 +0000
Manifest this update:     Thu 23 Jul 2026 06:54:48 +0000
Manifest next update:     Thu 30 Jul 2026 06:54:48 +0000
Files and hashes:         1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: M4ObsYBGAb9mVEp4/la/hveuQckarcUaty+EWypBIdg=)
                          2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: MMlCyL0Z5gXZRhtwZCT1rQU/h+kkk4XV7uk2akYMz9M=)
                          3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: nelUbxnLDLGVDrJHYxOmJHcdHhK23+JstFe8bl+1cNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl
                          rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
        Validity
            Not Before: Jul 23 06:54:48 2026 GMT
            Not After : Jul 30 06:54:48 2026 GMT
        Subject: CN=6a61bab8-c10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:4b:7e:b8:3a:9d:4a:a3:95:7b:19:c5:3e:
                    9e:38:38:ac:89:22:2e:8a:c4:d1:1e:09:7e:d8:20:
                    67:fb:0c:b1:30:9b:a2:1b:de:a0:1c:78:0b:15:0b:
                    ee:5d:d1:08:74:6b:a3:f8:ce:7b:e6:41:05:47:64:
                    ca:3c:ca:89:ca:7e:b6:ba:64:c9:aa:05:52:b9:38:
                    7b:f7:20:63:95:9f:96:c2:01:f3:cb:25:db:a5:e0:
                    2d:74:cf:95:11:c7:b7:bd:49:b4:ce:d6:dc:84:56:
                    36:c9:54:59:38:8d:ba:84:b6:8b:8b:b5:d3:e4:c1:
                    06:88:5d:68:b8:8a:92:1e:02:2a:7e:4c:ce:af:42:
                    39:82:9c:1f:38:72:93:09:c8:f2:e0:90:fc:c6:1b:
                    e5:30:e4:7a:92:a4:95:8b:00:47:0d:48:f5:85:ae:
                    e3:71:7b:75:ea:62:bd:71:ca:7b:e0:b3:34:b2:07:
                    05:a3:9d:74:ee:23:ca:91:3e:6e:b3:0c:52:8a:54:
                    c9:d5:79:e5:e0:59:06:27:06:89:84:6f:8b:5e:d4:
                    b8:cb:72:05:42:e5:39:93:0c:a3:35:ff:8a:3a:90:
                    ea:2d:92:fa:c3:68:8f:c6:5f:fd:d9:8f:b2:99:93:
                    a1:6f:d3:65:33:36:09:39:65:04:5f:57:73:5b:ba:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F9:79:7B:76:7D:FE:98:DC:1C:4D:89:C9:1A:05:F7:AF:38:05:B3
            X509v3 Authority Key Identifier:
                keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:93:d8:5c:09:ea:70:bd:cc:7a:1c:dc:00:36:58:fa:97:25:
         65:d7:4a:27:6f:e7:71:90:10:14:31:68:0b:c7:46:2f:49:60:
         c4:09:d0:00:9b:0a:5c:bd:94:87:c3:21:a5:5f:8d:96:18:a3:
         a0:2a:d9:f4:9e:53:c9:49:e6:cc:10:92:fe:34:08:c9:db:a1:
         72:62:39:79:10:63:0b:10:40:d9:ec:79:f2:ab:58:f0:fe:c9:
         8d:fe:3f:8c:db:55:58:31:0f:8a:86:f1:46:0a:72:6b:7c:d0:
         4f:51:03:2b:74:ed:ec:c3:ce:7d:24:8b:dd:9d:fa:2c:b7:dd:
         a3:9d:16:e9:bf:01:c3:f4:43:86:a4:44:58:5f:f9:ab:89:dc:
         2b:8d:72:2b:0b:10:c8:59:d5:60:82:e4:e0:53:b8:75:e4:05:
         ed:8a:08:d5:99:96:4e:93:78:f5:ef:47:f3:96:d3:66:14:1d:
         12:79:f9:24:5b:3a:3e:f0:73:be:e5:29:09:5e:45:7e:17:0b:
         f7:a6:fa:78:63:94:61:8e:70:df:9a:41:44:94:4e:a8:07:53:
         26:f8:28:41:8a:b6:c6:8e:8f:7e:57:47:9f:3c:f5:b2:dd:bf:
         f3:ef:d1:5c:0c:af:ca:d2:97:dc:6f:8d:84:23:c7:9b:bc:ba:
         2b:72:9d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:42 2026 by rpki-client