Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
File:                     1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json)
Hash identifier:          2iPlKNgPUtzAkQLzMq7+btZH/+9vPQB3+Yq2akyfkZE=
Subject key identifier:   BD:C6:6B:4A:A1:68:6E:F7:52:39:0C:32:D4:D1:89:0A:6A:49:EC:02
Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
Certificate issuer:       /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Certificate serial:       1C29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
Manifest number:          1C1D
Signing time:             Wed 22 Jul 2026 16:18:11 +0000
Manifest this update:     Wed 22 Jul 2026 16:18:10 +0000
Manifest next update:     Wed 29 Jul 2026 16:18:10 +0000
Files and hashes:         1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: Y2dOKZZIdrblSEU7VeohbMIliSJG64lriP0GVgCDa0M=)
                          2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: nc44lOcLMZ4ITfntFCsBtBPJVq4Kig5VsyDlbVHPWAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
                          rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7209 (0x1c29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
        Validity
            Not Before: Jul 22 16:18:10 2026 GMT
            Not After : Jul 29 16:18:10 2026 GMT
        Subject: CN=6a60ed42-47b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:80:cf:d0:82:0e:c9:e8:38:48:f4:e7:2b:91:
                    59:b9:ac:32:28:55:e2:68:96:3b:aa:d9:be:22:d0:
                    bf:2a:42:20:5d:60:d8:ef:81:85:35:f4:80:2e:fd:
                    35:35:ca:ac:89:7d:06:66:f1:83:dd:f9:ec:55:d6:
                    9c:ee:16:10:57:1c:c0:bd:78:82:44:f4:9b:9e:e5:
                    08:1c:09:c9:32:2c:14:0f:99:2b:2e:87:de:22:23:
                    d5:96:3c:63:ad:b6:4f:52:dc:77:18:24:86:b6:98:
                    00:57:43:ce:23:68:ac:91:f4:3a:da:ba:4f:1f:46:
                    23:c1:17:ef:a4:a0:58:11:f8:4e:b1:17:16:26:94:
                    68:a1:a1:bf:d0:b7:1d:d7:10:37:41:ec:b2:23:b8:
                    ec:34:1b:34:a2:d7:fe:b0:fe:ec:44:21:91:d2:e8:
                    43:bd:ac:fe:d6:81:4f:be:c0:97:ff:82:8d:55:c5:
                    71:ac:e2:fc:69:c2:9c:7e:4f:60:f5:83:5e:0f:2c:
                    79:72:b5:2e:eb:0f:d2:06:cb:b6:42:80:e5:cb:2e:
                    ad:cb:5f:05:cf:ff:32:4e:c9:1b:bc:c4:a5:78:1b:
                    53:d5:15:6f:af:f6:8f:bf:0c:b6:11:fe:f9:84:b8:
                    b3:d7:bc:cb:b9:a9:a2:d6:10:28:b0:07:63:6d:5b:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:6B:4A:A1:68:6E:F7:52:39:0C:32:D4:D1:89:0A:6A:49:EC:02
            X509v3 Authority Key Identifier:
                keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:05:ce:a0:4b:12:14:3b:d9:95:6d:0e:e9:ee:ba:6a:92:a8:
         e3:e0:4b:3c:2e:bd:e4:5f:de:36:f5:34:88:8a:ca:25:4e:33:
         04:40:b9:fc:2b:ad:f0:8f:ff:da:b7:9f:e3:97:83:a2:e0:d1:
         91:5a:c0:fb:8a:d9:ce:ac:a7:fd:a4:9f:69:05:73:f4:2c:fc:
         61:0d:1f:7a:f5:2b:52:df:32:fe:6a:a9:de:f4:f9:69:77:95:
         e5:72:2e:0b:18:20:22:a6:e7:82:c3:e7:07:66:89:e9:91:18:
         12:61:1e:8b:87:8a:7b:a3:60:51:d3:5f:61:96:ae:36:4a:f9:
         ad:32:ae:19:1e:35:00:48:57:75:c6:7b:da:5a:5e:a1:8a:31:
         c9:9f:53:83:cc:0a:01:f4:05:3b:3f:40:9a:7d:ac:17:01:8c:
         06:45:e3:d5:57:a5:a1:ba:85:9c:70:4f:82:88:d8:6f:e0:cb:
         3c:2b:a7:fa:db:cb:bf:d6:ac:f5:a1:22:06:77:07:d8:52:2a:
         4c:11:69:0d:3e:72:7d:10:8c:1f:29:17:ca:d0:78:02:7f:8a:
         a9:0f:23:da:9c:52:62:87:e5:08:e1:9b:0f:fa:61:5a:fc:aa:
         ff:16:42:5c:ab:3c:e0:06:ea:ed:6d:be:03:43:d1:ad:8e:ee:
         aa:7f:6d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:09 2026 by rpki-client