Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
File:                     m2fIchTtmWVAcRkL688LjZ-hr04.mft (raw, json)
Hash identifier:          s4QrJYHTPLR0Nr+rC7Q7zlg6bDzYzXrOPmd4tJQEBLI=
Subject key identifier:   D6:6D:FC:80:03:6C:AA:A6:16:DC:3A:44:F7:53:FA:D0:89:AE:03:7B
Authority key identifier: 9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E
Certificate issuer:       /CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E
Certificate serial:       0CED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
Manifest number:          0CD2
Signing time:             Wed 22 Jul 2026 18:47:28 +0000
Manifest this update:     Wed 22 Jul 2026 18:47:27 +0000
Manifest next update:     Wed 29 Jul 2026 18:47:27 +0000
Files and hashes:         1: m2fIchTtmWVAcRkL688LjZ-hr04.crl (hash: 9B9MSNtDvQXzykNSpggKsb+MfMrL5kXWocss+nTFVmQ=)
                          2: 988741FEDB8111F0B008B5AB60D3641D.roa (hash: rh5kanvG5QXPAMOrNiNLJLVHnbyU12f7aHXUzCF2hMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl
                          rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3309 (0xced)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBDC8, serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E
        Validity
            Not Before: Jul 22 18:47:27 2026 GMT
            Not After : Jul 29 18:47:27 2026 GMT
        Subject: CN=6a611040-13a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:23:98:f5:66:eb:1e:b4:1b:1f:17:17:78:
                    bb:e1:bc:b1:a9:53:38:1c:b3:92:9e:f0:15:36:6a:
                    4d:96:43:eb:f5:d4:50:22:a5:3e:0e:5b:e0:4b:d9:
                    7a:8b:70:65:88:51:e0:bd:2d:54:15:12:ba:60:22:
                    ac:15:35:da:c5:88:37:58:4e:2e:4a:76:df:73:b0:
                    20:96:41:98:07:1f:29:87:9e:e6:93:66:40:45:1b:
                    1d:c2:bb:c4:1d:33:e4:d8:5c:32:da:07:8a:24:90:
                    7a:f2:30:8f:35:0b:14:9b:3d:cd:65:08:10:6a:fe:
                    b0:1a:e0:e1:ef:fc:66:5b:f5:bb:18:fe:12:2f:9f:
                    85:98:f4:57:ba:26:86:6a:07:cc:6a:c2:db:a0:44:
                    c2:b1:1e:6e:5c:a8:74:26:dc:ec:1b:88:cc:e3:1c:
                    1d:ad:0a:d2:12:b9:e7:7f:47:9c:9f:96:fb:60:dc:
                    e1:69:d4:fe:e0:18:46:e5:15:44:1a:1c:49:42:3e:
                    c5:87:a4:91:cf:3e:ef:af:40:e9:26:10:c5:14:b3:
                    8a:b5:25:e4:71:58:9c:db:09:ea:3e:31:7f:b0:b3:
                    9f:54:e7:d7:5c:52:e0:9d:60:7f:96:db:68:b6:72:
                    29:89:3f:fc:52:43:14:46:2d:55:44:5e:85:2d:0c:
                    3e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6D:FC:80:03:6C:AA:A6:16:DC:3A:44:F7:53:FA:D0:89:AE:03:7B
            X509v3 Authority Key Identifier:
                keyid:9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:91:fd:4a:8b:1a:26:dd:85:57:b3:1b:7b:38:9c:86:c3:69:
         92:0f:b0:21:0e:18:68:16:3a:a0:8a:17:dd:ad:61:b3:d1:1f:
         35:4b:4e:4e:27:81:82:04:d8:68:5f:14:3f:c0:5c:37:c0:5e:
         88:12:3e:c5:04:84:f4:e5:36:fc:11:3b:8e:99:69:01:96:45:
         8f:6c:15:2b:6e:50:c1:91:5d:97:6c:d5:1a:f9:6a:5c:8e:f8:
         2d:8e:f6:2b:cd:88:13:7b:5a:09:7b:98:bd:8d:4e:ef:9f:7d:
         55:e2:ff:54:7f:4f:a1:6a:ed:5d:1a:b9:92:31:7f:5b:4c:4c:
         b6:24:78:3c:f0:df:6b:37:7f:59:09:20:07:a0:5c:eb:6a:7c:
         8a:b2:9a:56:91:57:f9:1e:f1:b6:59:7c:02:79:70:ce:3f:11:
         2b:6f:b2:7b:64:a9:0e:8a:3d:18:69:52:56:b5:2e:50:2c:1a:
         d3:30:6f:98:4d:72:ae:0b:87:87:2b:85:f0:ef:71:3b:4e:4b:
         4e:76:c4:61:53:be:5a:aa:d2:ab:2c:cc:58:a0:6a:ed:68:e3:
         3e:51:17:04:40:f0:cc:4b:8f:5e:31:29:83:9c:cf:4b:ca:f7:
         6f:a4:6e:d9:e7:97:3d:3f:a9:5e:5d:af:cf:0c:04:8c:bc:50:
         5e:7c:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:44 2026 by rpki-client