Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
File:                     ed1SqjF1MIEm0XSGpygF-w4bqlg.mft (raw, json)
Hash identifier:          9TnM66QWN+fgY5lCI0TAv0gBPCx9T1HK8YGCI9d9YsA=
Subject key identifier:   AA:54:15:94:43:8C:71:DF:28:59:23:3B:66:20:EA:00:BD:B0:BA:46
Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
Certificate issuer:       /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Certificate serial:       0821
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
Manifest number:          0817
Signing time:             Wed 22 Jul 2026 21:44:00 +0000
Manifest this update:     Wed 22 Jul 2026 21:43:59 +0000
Manifest next update:     Wed 29 Jul 2026 21:43:59 +0000
Files and hashes:         1: ed1SqjF1MIEm0XSGpygF-w4bqlg.crl (hash: 6XNIp9s5S4SvZ1z4ssDzxT4fNV68CMV1KgSsHymElB4=)
                          2: 6B5C86022D6811EB86D96027C4F9AE02.roa (hash: lE2Sm7xdj8DAHwT04SLyh8rHvpeARY7nTCmbI3VK9u8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
                          rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB0E2, serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
        Validity
            Not Before: Jul 22 21:43:59 2026 GMT
            Not After : Jul 29 21:43:59 2026 GMT
        Subject: CN=6a6139a0-5026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:29:a3:13:6e:16:37:a9:95:4c:49:56:c6:
                    6f:6b:6b:ce:cb:f1:52:2c:a2:5b:69:ea:40:65:ac:
                    fb:45:ad:6f:4d:9f:6b:a9:22:fb:49:e7:8b:66:09:
                    20:c2:76:91:62:89:d6:ed:eb:8c:fc:17:3a:0e:70:
                    bd:6e:cf:d5:ff:42:87:18:65:cf:8f:84:db:2a:41:
                    81:e9:90:42:1a:08:1c:71:b6:1c:a9:95:b7:46:6b:
                    0d:a0:f6:e7:20:f2:96:fd:c9:62:a4:07:fd:da:0f:
                    62:e9:28:7c:fb:41:35:45:84:d0:67:80:cf:21:63:
                    1d:d3:ff:70:60:5d:1d:c8:93:71:1d:25:83:ff:8f:
                    58:3a:28:f7:af:db:88:ab:b5:8b:20:86:fd:e6:58:
                    fc:c9:53:45:63:1a:d4:dc:00:21:85:46:5d:82:5b:
                    c7:74:ee:53:14:21:83:df:d3:97:dc:cb:7f:9b:58:
                    19:53:e8:85:6f:9e:58:bd:66:84:e9:0c:f6:6d:d6:
                    9d:a3:fd:7f:84:61:a8:86:35:8b:7e:6b:21:17:b7:
                    3b:f5:2d:03:cf:ef:b5:8f:23:28:02:a3:dd:2f:da:
                    13:95:40:b1:68:3b:02:57:94:e0:01:f3:20:90:d2:
                    42:95:9a:f2:69:65:c5:70:7d:b6:e4:62:17:cc:fe:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:54:15:94:43:8C:71:DF:28:59:23:3B:66:20:EA:00:BD:B0:BA:46
            X509v3 Authority Key Identifier:
                keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f1:64:9a:96:13:43:99:52:ec:51:e6:e3:2a:5b:a5:9d:f1:
         14:7f:f5:aa:5e:72:03:4e:a6:da:de:07:3e:11:34:eb:51:7c:
         f8:57:83:0a:24:a8:e7:c8:bd:ab:ff:20:67:bf:fc:e3:7c:7f:
         fa:e2:d7:11:ec:8e:2b:57:1a:f9:46:76:90:c1:8f:af:c9:89:
         1d:2e:46:f7:cb:b7:9e:b2:3e:c4:c6:fd:19:2d:ff:fd:57:69:
         05:f1:b6:4e:e0:1e:c9:d7:78:f4:3a:60:06:27:ab:6f:14:a4:
         b5:2c:6e:89:5f:b6:4a:ef:3e:ef:80:0b:42:06:a7:ac:32:68:
         5b:01:6b:3e:97:6f:ea:f9:b1:d2:82:a9:dd:75:d3:ab:8f:14:
         25:1e:45:65:57:82:37:23:33:26:09:43:a7:8f:2a:15:18:6b:
         cb:ed:da:57:62:1e:4e:3d:11:c5:f6:b1:fc:8a:55:46:4f:4b:
         b4:84:07:6b:7b:be:e4:3d:cc:00:43:92:d2:1a:f6:fc:4f:51:
         f4:7c:1c:d7:2e:c9:0a:08:d7:e4:0c:c2:d4:b1:bf:6e:f4:02:
         c3:0f:b8:e5:c6:17:06:e5:24:96:e5:e3:15:3e:49:91:86:d4:
         de:ee:3c:f4:cf:73:8e:25:cd:18:8f:30:7d:eb:18:f2:a9:24:
         e1:76:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:38 2026 by rpki-client