Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
File:                     bxP1UQCfJIptmHQ2AE6FeVFWkns.mft (raw, json)
Hash identifier:          BlWJndem30d+GldAranIaXFE71G8oC057I20ETyz1a0=
Subject key identifier:   8A:A0:CF:29:26:7B:3C:D4:EB:6E:35:62:6A:00:0F:FA:29:06:80:06
Authority key identifier: 6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B
Certificate issuer:       /CN=A91CAFC4/serialNumber=6F13F551009F248A6D987436004E85795156927B
Certificate serial:       09DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
Manifest number:          09C7
Signing time:             Wed 22 Jul 2026 20:22:12 +0000
Manifest this update:     Wed 22 Jul 2026 20:22:11 +0000
Manifest next update:     Wed 29 Jul 2026 20:22:11 +0000
Files and hashes:         1: bxP1UQCfJIptmHQ2AE6FeVFWkns.crl (hash: pUHNIFDazxJeO2q8ntZRFc49O6C65nRray0OsC2EG9o=)
                          2: D2039A56AABC11EEA0370F2CC4F9AE02.roa (hash: ynhPE5wAgaVqH7nCW5tR8ne/clm5wNEfqCy2a6X1yEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl
                          rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2525 (0x9dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAFC4, serialNumber=6F13F551009F248A6D987436004E85795156927B
        Validity
            Not Before: Jul 22 20:22:11 2026 GMT
            Not After : Jul 29 20:22:11 2026 GMT
        Subject: CN=6a612674-af6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:78:5a:a6:e7:8f:d5:ae:3c:55:32:20:46:
                    34:79:21:a5:7a:3a:56:42:d5:d6:49:4f:99:b6:a7:
                    3e:6e:c0:5e:4d:a8:56:cc:b5:04:19:29:b1:c7:a6:
                    41:31:17:ec:77:0a:1e:c9:25:25:20:1b:f9:3d:8f:
                    e1:e1:b3:18:f9:32:4b:05:89:2b:94:26:e6:6f:42:
                    1d:77:3e:4d:a7:4f:ee:4c:16:1b:45:b9:b0:9d:25:
                    00:f3:d9:16:52:26:44:1b:92:47:ed:f3:35:e2:1c:
                    ab:13:e9:cb:56:40:07:0f:a2:cb:eb:36:79:9d:4a:
                    c3:ce:ca:a6:55:c6:51:80:17:d0:19:07:0c:c2:4c:
                    47:38:5f:47:6e:c1:3b:94:96:27:4f:36:1a:95:39:
                    2d:c6:40:37:7f:8b:97:07:4b:9c:d6:52:aa:61:c4:
                    b6:a6:a9:6b:20:22:17:b3:de:dc:ce:c4:fd:78:92:
                    f3:35:20:08:bc:82:5f:46:4e:37:dd:ee:cc:62:94:
                    29:75:69:7d:de:d6:01:6f:68:c0:2e:8a:54:5e:18:
                    27:03:23:63:6d:8a:fe:e2:ee:2b:f3:49:70:93:35:
                    13:b9:fa:8c:a6:81:e6:35:03:ee:b7:e7:4c:a3:97:
                    28:3d:10:31:9a:37:51:90:32:56:80:93:f6:af:cc:
                    31:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A0:CF:29:26:7B:3C:D4:EB:6E:35:62:6A:00:0F:FA:29:06:80:06
            X509v3 Authority Key Identifier:
                keyid:6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3a:96:a4:70:0a:20:44:d5:19:98:0c:e7:36:d3:0f:e3:d5:
         d5:ab:4d:25:2c:b4:b3:a0:27:a5:32:cb:ba:05:fc:a7:81:21:
         0a:34:7c:5f:5a:b5:54:ce:d0:51:11:f4:06:64:e4:49:23:aa:
         de:00:ae:58:d5:3f:a6:ce:b8:16:1a:b3:04:ef:8b:a5:a1:9c:
         05:c1:4a:77:2d:e0:1b:8a:50:c5:dd:aa:86:73:b7:29:3e:93:
         be:86:c6:e9:b0:bd:0f:5e:51:a6:f6:86:7f:dc:42:2b:ca:a5:
         a6:7f:de:fb:e0:ec:ad:2b:fc:f2:1a:a8:ce:77:b3:58:b2:cf:
         eb:85:97:9e:13:d0:11:0b:e7:93:ab:f4:77:44:3a:52:ed:ea:
         62:33:8f:81:ac:4b:34:12:09:04:95:0b:4a:64:a5:8b:c8:cf:
         56:26:96:a4:80:0c:e8:76:0f:35:84:2f:bc:2f:ee:2d:78:bd:
         f4:80:3f:cc:05:d6:bf:d6:9b:77:41:09:ed:cc:98:5e:93:e7:
         d6:b5:e3:17:24:06:f0:47:f7:8e:a9:27:43:11:99:f3:7e:4e:
         a9:42:9f:b7:e3:af:92:00:18:0d:c7:55:ea:e0:b4:c6:c3:4a:
         0c:41:43:04:90:ad:08:cb:fb:93:3e:19:8b:26:b7:06:c7:36:
         a6:6c:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:14 2026 by rpki-client