Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
File:                     FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json)
Hash identifier:          8wYqykG5twvF2V3s9pNTkA61Xvk5TcdCaVkEqbhwR9I=
Subject key identifier:   A6:1B:B5:CC:9D:98:E0:7F:8C:83:20:50:DB:90:9E:B9:48:87:81:4E
Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E
Certificate issuer:       /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
Certificate serial:       01DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
Manifest number:          01D7
Signing time:             Thu 23 Jul 2026 05:00:11 +0000
Manifest this update:     Thu 23 Jul 2026 05:00:11 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:11 +0000
Files and hashes:         1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: IwedseRSO5CiYVbiECCaN5cHS18Ikcf6NWOyIhhxams=)
                          2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: oVA7A9xbq/3XzKnToy39T95rB3d7qRIRIGsB5By2kNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
        Validity
            Not Before: Jul 23 05:00:11 2026 GMT
            Not After : Jul 30 05:00:11 2026 GMT
        Subject: CN=6a619fdb-3d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:69:a5:9e:d7:36:15:af:7c:c4:49:c0:bf:
                    31:83:d7:da:24:51:98:5f:0a:49:4a:62:fa:d2:fa:
                    3b:62:03:55:92:26:9d:de:c6:d7:c2:5b:bc:72:c6:
                    5e:f7:c4:e2:db:3c:fd:59:c0:6b:af:12:79:0d:b7:
                    80:c2:e9:f4:a4:1f:83:3c:e8:d6:32:b3:33:e6:29:
                    7f:07:43:e4:1f:c4:5d:28:d3:a5:1a:96:a5:2c:db:
                    03:b9:71:9e:35:8f:e7:08:69:41:12:53:76:2e:70:
                    51:35:82:fc:72:5c:c4:8d:02:7b:20:5f:d1:a9:5e:
                    e8:ce:f6:a2:aa:66:0d:d6:29:b4:80:98:6e:2b:39:
                    41:53:c1:64:34:0e:ee:79:04:f4:ad:40:87:06:92:
                    f1:fe:50:22:8e:75:0c:cc:46:41:47:7d:fc:40:44:
                    73:87:73:72:ca:f9:07:41:40:0a:c8:76:33:c4:30:
                    9c:31:7d:39:c1:67:b5:94:dc:e8:87:19:e1:a6:2d:
                    01:5d:46:d3:c9:97:76:60:c1:48:cc:b9:68:f3:0c:
                    c1:61:e7:ab:85:1f:ae:0c:42:ff:b5:c3:fd:fd:96:
                    1c:d6:81:11:d1:63:63:07:ab:dd:a8:63:ca:41:23:
                    9a:07:ea:d2:64:61:2d:f3:fb:af:33:9d:a6:1d:e1:
                    4c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1B:B5:CC:9D:98:E0:7F:8C:83:20:50:DB:90:9E:B9:48:87:81:4E
            X509v3 Authority Key Identifier:
                keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ec:8b:46:00:f2:a4:e3:52:ba:1e:3a:74:38:3e:f8:13:8a:
         c1:7d:0b:49:d3:48:d7:fa:d8:4e:07:fd:5f:4b:7f:8c:01:c6:
         8f:94:f9:79:67:4c:e1:0f:64:7b:fa:51:38:1d:4f:c0:0a:19:
         dc:c3:34:21:dd:8a:2a:e7:2e:22:bc:c8:f1:40:9c:a5:6d:d7:
         93:3e:99:18:56:07:2e:61:d9:56:90:ce:33:82:99:79:6f:31:
         42:90:0f:f0:2a:86:8f:12:17:15:eb:c5:81:94:80:3d:67:60:
         8a:bb:5f:2e:2b:08:3f:6d:08:ac:f8:40:08:a9:01:13:9d:5b:
         68:43:53:5e:eb:74:9a:36:13:a2:cd:0d:3f:b1:b2:c8:44:30:
         bc:1c:19:21:83:40:ff:45:9a:6b:ab:71:97:91:39:ed:39:f4:
         ed:80:5e:bd:3e:7d:01:7c:f8:3b:76:30:ce:11:8b:70:43:23:
         2d:bb:00:fe:c4:c8:f6:95:e9:60:43:48:3d:66:b3:b4:46:1b:
         42:05:1d:f9:a4:33:c4:ad:ab:69:e9:8b:60:e1:0f:b4:91:1e:
         7a:eb:79:d7:3e:6a:aa:14:67:08:d5:3b:d6:4d:91:d2:b4:4f:
         e7:59:e0:90:8b:b2:f4:66:f3:9d:5e:38:3f:21:96:26:6a:b3:
         8d:67:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:13 2026 by rpki-client