Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
File:                     rRUq9u8CmWIL-fd_1gzYsxQEF68.mft (raw, json)
Hash identifier:          rkomEXHj4AH4ymNT2pYPQ9KKfe31yurxYtWwyUhEA5A=
Subject key identifier:   4F:6D:49:2A:CD:56:03:1B:D2:D0:08:D1:3C:AF:5F:FA:65:1C:93:E5
Authority key identifier: AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF
Certificate issuer:       /CN=A91CB92A/serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
Manifest number:          AB
Signing time:             Thu 23 Jul 2026 09:02:34 +0000
Manifest this update:     Thu 23 Jul 2026 09:02:34 +0000
Manifest next update:     Thu 30 Jul 2026 09:02:34 +0000
Files and hashes:         1: rRUq9u8CmWIL-fd_1gzYsxQEF68.crl (hash: lksRf3EfHWS4ieO6uBy1N3n9YdYkcS6FPp4KMWeovTw=)
                          2: 8CAFF0E884AF11F0A1FF182BC4F9AE02.roa (hash: n3JoaRohuK3vZGwx1NSLDBtMi6V3V4zWpmj5eBkILR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl
                          rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB92A, serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF
        Validity
            Not Before: Jul 23 09:02:34 2026 GMT
            Not After : Jul 30 09:02:34 2026 GMT
        Subject: CN=6a61d8aa-f178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b0:16:7b:98:4f:6a:28:26:de:7d:67:37:83:
                    5b:e7:a4:fb:a2:fe:8f:b9:c5:c4:e1:bc:63:c8:ae:
                    35:b0:3d:fb:b7:4e:49:1f:8c:f0:52:36:c5:ed:b6:
                    33:cb:30:92:ef:31:11:f1:dd:46:8c:fb:84:e1:8c:
                    59:8a:fa:b6:24:d7:b9:02:12:a4:94:f9:dc:7f:fe:
                    53:1b:cf:15:4d:64:4b:00:38:3b:b3:0e:7f:d8:cc:
                    ad:f9:bd:87:cb:f3:c2:42:a3:44:69:1d:fd:24:13:
                    bb:bb:af:9d:0e:bf:0c:5a:0b:55:38:91:6e:0e:a7:
                    c1:3e:7f:4f:7e:9d:52:d1:a0:cf:e0:02:fb:85:5c:
                    87:7a:f2:bf:a6:3f:73:25:87:e3:df:64:dc:c5:bb:
                    5c:84:c2:40:95:75:ee:bf:79:3c:ea:85:6c:8d:d5:
                    bc:ed:46:aa:b8:9e:3e:7c:7b:ce:0b:cf:10:08:82:
                    af:b4:e5:88:bd:ae:9d:cd:5c:0b:8e:d9:76:6d:57:
                    8e:4b:82:13:17:50:49:04:39:74:7e:4f:d0:e7:e3:
                    06:9e:3f:56:c3:be:32:97:b9:90:8d:9c:4d:a8:72:
                    b5:15:82:91:49:56:68:8d:d0:88:c2:ee:30:30:03:
                    bf:d1:87:50:09:72:20:2e:8d:20:5e:c1:fa:c7:3d:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6D:49:2A:CD:56:03:1B:D2:D0:08:D1:3C:AF:5F:FA:65:1C:93:E5
            X509v3 Authority Key Identifier:
                keyid:AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c6:69:29:27:a2:bb:bd:d8:1f:32:6b:b4:1f:26:0c:e4:13:
         d7:b4:cd:6c:1e:aa:fd:0c:be:48:97:dd:55:15:f0:cc:f8:15:
         00:7d:4d:5c:ac:b0:b3:5b:9f:40:e1:b6:0c:cb:23:df:c1:fc:
         65:15:7a:ab:d1:1c:a2:3a:f4:d5:dc:ff:4d:45:90:55:4f:fa:
         df:65:5f:c8:3e:e1:d6:4b:6a:a6:32:43:8c:c4:fe:24:dc:5a:
         e3:e2:0e:7c:74:f2:a9:25:12:07:4d:94:8d:bc:97:96:2f:18:
         86:11:1d:2e:dc:a7:fa:37:40:87:5f:7d:5f:65:ce:53:66:d4:
         ef:e2:f9:5c:4e:0a:b5:d5:6c:c8:25:9e:43:81:bd:99:73:46:
         a9:2b:fa:c1:99:48:22:3f:ff:d5:e6:bc:70:83:31:93:53:ab:
         dc:12:56:a7:73:34:7e:3b:9a:75:ce:e2:fa:46:6a:f6:3e:1a:
         ea:ac:12:dd:89:90:9d:4c:92:d7:e2:e3:60:bd:65:d7:26:fe:
         86:3d:fb:a8:99:89:c1:4b:f7:07:aa:aa:2a:ff:2f:b9:0f:cf:
         a0:5d:54:43:ba:23:7d:71:f7:1e:f4:08:44:4d:bb:7b:c8:94:
         a7:07:20:f5:01:b3:80:08:ae:27:6f:e8:42:62:2d:2e:c5:21:
         39:8e:4e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:36 2026 by rpki-client