Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
File:                     fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json)
Hash identifier:          liK3lBBmGvXgTIsWVDQ5MQ+b6s8szPPz9hnveK+Rn+c=
Subject key identifier:   CD:90:11:02:24:3D:F1:FC:8F:82:07:A2:C1:94:7A:BE:97:39:DB:54
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Certificate issuer:       /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial:       09F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
Manifest number:          2095
Signing time:             Wed 22 Jul 2026 16:46:57 +0000
Manifest this update:     Wed 22 Jul 2026 16:46:57 +0000
Manifest next update:     Wed 29 Jul 2026 16:46:57 +0000
Files and hashes:         1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: kK1KtJowIfDnzaAkJ/kNCKGvW4OJuSsE9mXzkTgJHwE=)
                          2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: m4DYqNviRswbFR7fGEs+RlqfCBi1sLTXNU77Vhy5SsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2547 (0x9f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
        Validity
            Not Before: Jul 22 16:46:57 2026 GMT
            Not After : Jul 29 16:46:57 2026 GMT
        Subject: CN=6a60f401-e316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:78:1e:29:bd:52:c2:20:9c:a7:29:a3:0b:
                    59:e5:23:98:cd:c4:7e:69:01:8b:4c:3a:79:9f:81:
                    c9:63:32:67:1b:e7:f1:08:85:5d:2d:19:14:97:fe:
                    f9:3f:57:34:f7:2d:85:99:c3:7d:02:45:84:d5:43:
                    82:81:a6:51:f6:d0:00:98:1c:f2:e1:46:63:09:4e:
                    e8:02:83:a8:50:4f:fc:c7:3a:13:04:e0:8b:3c:4a:
                    d1:8e:14:7a:87:75:0e:1d:21:7d:3d:f0:8f:33:7f:
                    17:d8:2a:b5:cd:5b:65:de:2c:82:ff:db:3e:c4:22:
                    1f:10:43:1a:4a:82:2a:da:c6:5e:d8:2c:62:99:8d:
                    87:01:71:63:6e:86:0e:71:11:1c:6a:4d:33:ce:1f:
                    72:74:bc:2a:cb:dd:23:c1:96:58:af:39:01:c1:65:
                    ca:be:a4:e8:03:df:61:b0:28:c1:4a:02:6d:e9:a8:
                    2e:04:db:d5:c4:f4:9a:79:d2:d5:56:ec:bc:5c:53:
                    0c:e3:97:dc:4b:e1:3d:78:72:8b:db:92:67:72:b8:
                    a3:6e:0c:e5:51:9e:9a:5c:9f:9f:6f:44:68:bd:1d:
                    9f:0b:83:48:57:7d:60:9e:c7:a2:90:3d:f2:00:9d:
                    f0:80:16:54:71:5f:8b:27:f1:11:78:3f:07:3b:de:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:90:11:02:24:3D:F1:FC:8F:82:07:A2:C1:94:7A:BE:97:39:DB:54
            X509v3 Authority Key Identifier:
                keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d6:c3:a8:b2:99:fb:25:1c:1a:4a:bb:61:08:3c:3b:bb:ef:
         1f:1d:9c:5b:fc:25:37:11:8e:b4:e4:0d:77:92:0d:55:f2:a4:
         2c:3f:ff:f8:52:aa:c9:14:77:c1:19:d4:b2:63:7c:41:f0:47:
         8b:c3:0c:e1:6b:fc:3d:f1:7b:44:e5:6c:7f:5b:03:c9:cb:bb:
         f0:15:99:e1:c5:b8:e6:ec:0a:bd:23:f3:95:7c:c1:1a:f9:89:
         50:f7:0d:bd:92:bb:8b:b8:b4:a5:44:1d:86:ea:c3:dc:9c:ab:
         b9:fa:b0:76:63:74:6e:b9:99:e9:a8:7b:d8:65:6d:9a:67:a9:
         82:89:3f:cc:0a:5c:71:36:3d:54:46:8d:37:cb:17:51:c4:1a:
         1f:a9:04:b4:0d:e0:6b:b8:18:92:ae:29:41:97:d0:29:f3:90:
         a4:23:b5:c4:6a:80:2b:af:60:31:f7:43:0a:b7:3c:2b:5a:a6:
         b5:49:c6:94:d7:ea:44:34:2e:6e:d2:6a:b3:ae:d8:af:e4:97:
         b7:c5:f2:87:47:83:3b:73:ab:28:f5:da:7b:73:22:2b:9a:36:
         0c:a3:cd:18:af:95:e7:db:61:22:a4:0d:db:be:6d:e5:a8:16:
         48:90:76:09:0f:87:3c:54:f9:b6:88:19:65:02:5b:8f:87:7c:
         44:4b:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:25 2026 by rpki-client