Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
File:                     4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json)
Hash identifier:          Pz/wJl1EvVibKEJt+7slKychJ+VFGCxT/p4mMVk/gwI=
Subject key identifier:   91:BE:1C:30:2D:73:6D:97:D0:C7:AE:21:0B:B5:95:AF:4E:09:B2:C6
Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6
Certificate issuer:       /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
Certificate serial:       0DCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
Manifest number:          0DBE
Signing time:             Wed 22 Jul 2026 18:07:51 +0000
Manifest this update:     Wed 22 Jul 2026 18:07:51 +0000
Manifest next update:     Wed 29 Jul 2026 18:07:51 +0000
Files and hashes:         1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: yPpOFlZT+sx61VrGYWlI6pF2AY0MvZCquTIlR4S0BMU=)
                          2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: 4+Ac/qmp1PMvnSJouQnIg3+M0ch95gCYSQtb1scOlcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl
                          rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3533 (0xdcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
        Validity
            Not Before: Jul 22 18:07:51 2026 GMT
            Not After : Jul 29 18:07:51 2026 GMT
        Subject: CN=6a6106f7-2005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:56:b5:3c:b8:3a:58:b8:2f:91:5d:28:de:
                    c1:69:f2:43:4a:63:65:bc:4a:f1:88:0a:ba:8d:e7:
                    c8:6e:a7:8f:dc:9f:73:4f:cb:0f:49:3d:90:08:51:
                    c3:37:0e:18:77:d7:72:7a:6b:7e:b2:bf:7d:1e:9b:
                    f3:1a:45:61:99:04:79:99:24:45:4e:96:e1:16:49:
                    88:de:a1:8c:0e:24:41:dd:aa:9c:e7:1a:c0:a3:3c:
                    a8:81:83:93:6e:6f:8c:d1:a2:28:e3:3b:ed:87:64:
                    3c:e4:21:2c:68:6f:87:56:08:8d:22:4b:2f:e4:f5:
                    aa:79:3a:fd:3b:93:ca:f6:0d:86:b4:04:cd:b3:ee:
                    9f:48:58:9a:3b:71:6c:2c:ef:ec:20:f1:1d:0c:f3:
                    f5:05:fa:b3:1d:08:aa:90:94:16:08:fc:40:fb:90:
                    13:49:d9:f4:b2:46:91:e0:40:64:1a:ff:c6:27:d0:
                    8b:97:2d:bc:50:d1:3d:7e:bc:49:c3:55:91:d8:79:
                    58:87:5f:98:3e:c7:ad:f2:18:44:37:ed:74:5c:5b:
                    7b:66:5c:9c:88:80:d4:63:e9:32:ec:e8:1d:77:ea:
                    a3:a7:b1:5a:3e:49:a2:58:57:e5:60:23:35:b0:52:
                    87:b9:d1:32:33:30:36:f7:fa:59:f4:d5:ec:17:0d:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BE:1C:30:2D:73:6D:97:D0:C7:AE:21:0B:B5:95:AF:4E:09:B2:C6
            X509v3 Authority Key Identifier:
                keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:5c:74:8c:aa:ef:45:63:eb:ed:56:2d:37:08:50:6e:e4:0b:
         38:a2:46:8f:6f:bd:8c:10:a1:f6:9e:a2:93:40:d3:bd:35:db:
         c7:54:07:50:88:eb:61:da:9f:19:c4:61:62:cb:6f:3b:c2:24:
         9e:ac:55:37:96:01:ca:7e:b1:03:ad:6b:1e:9d:d0:ea:ed:d6:
         23:3d:cc:73:63:fe:57:7e:c4:d8:92:60:f9:96:7e:82:91:bd:
         dd:b7:65:18:30:76:1c:c4:1c:ee:7e:03:2d:3f:29:44:57:a7:
         6f:e1:3f:5e:5c:59:16:f8:31:5c:64:3e:55:56:81:78:d5:6c:
         8b:21:fa:70:68:db:e2:8f:8d:8c:1a:cd:83:d3:63:f8:9f:2e:
         03:a1:e7:8f:f8:d9:e6:8c:2f:25:43:89:86:8a:34:52:28:2d:
         f5:0d:7a:03:61:e3:e5:8b:2c:ce:46:da:33:5a:a6:ee:c4:d2:
         47:73:a3:4d:73:12:2a:f7:32:da:97:12:df:85:31:cf:e6:22:
         e5:4a:13:cc:c7:27:23:be:41:c7:fd:b8:25:06:29:d7:cf:26:
         bf:d8:74:00:42:fb:67:fd:fd:9b:3e:83:48:d4:b4:18:ae:ad:
         58:84:19:23:47:25:9a:d6:ce:73:ec:cb:77:b7:be:3a:e7:e6:
         e7:97:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:32 2026 by rpki-client