Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File:                     B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier:          RRXN0QdCE7mp8jIFKuk4LbeooR0L2MamUSiLPDXUGt0=
Subject key identifier:   0E:5C:03:E8:70:D9:DD:15:8B:AC:AD:16:69:15:45:6C:F9:22:A1:C3
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer:       /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial:       1F1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number:          1EF4
Signing time:             Wed 22 Jul 2026 16:07:12 +0000
Manifest this update:     Wed 22 Jul 2026 16:07:11 +0000
Manifest next update:     Wed 29 Jul 2026 16:07:11 +0000
Files and hashes:         1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: 2Nn2yz8Xm4faSHXMhUp3Px4WGNoBunKogBnI1nY16PE=)
                          2: BD314CEA619711EE81211277C4F9AE02.roa (hash: 5im2El+XqMtWQp5XtOEvy4f/d1/1FRGNJyssOKlFrL0=)
                          3: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: VMJkk/VVPV9Iy+puWdZ7776oUW7EEdM96gkspmEQArY=)
                          4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: n9OEIi5D0MMrsYRQLCAAp//0ZBA0omE88k2orZdv2K4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7964 (0x1f1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
        Validity
            Not Before: Jul 22 16:07:11 2026 GMT
            Not After : Jul 29 16:07:11 2026 GMT
        Subject: CN=6a60eab0-cfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3f:fc:42:cd:3f:82:e5:19:df:7e:79:57:f8:
                    78:60:9d:1c:ff:fe:fc:6d:be:c2:80:bf:f8:fd:85:
                    20:e2:7b:ea:27:18:c1:1a:3f:7f:24:d1:c7:4c:f2:
                    d2:2e:64:e7:16:ed:d0:95:d5:9f:c2:e1:43:82:cf:
                    dc:6f:26:24:27:99:b5:a2:89:e8:dc:bd:0c:fc:c9:
                    c8:0c:3b:8d:ec:cd:5b:f7:4d:db:f3:c1:31:14:6b:
                    92:b2:6d:b3:46:3e:4e:96:58:3c:34:74:3d:e5:29:
                    dd:33:dd:30:29:ad:9d:02:53:dd:39:ff:c6:4e:96:
                    70:ac:44:d0:65:0d:8b:29:66:0e:1d:9e:13:d4:92:
                    ed:f1:8a:f8:98:2a:bb:99:2f:c2:d6:47:67:d0:e8:
                    b0:23:e9:d0:c6:d2:33:d8:93:7b:79:df:3c:a1:c7:
                    fe:1f:e6:44:fa:8d:de:d9:ca:c6:a2:d6:f8:db:fb:
                    d8:a3:2e:9e:f4:67:fb:98:6c:62:5b:00:29:f0:4a:
                    83:ef:fc:95:48:09:b7:72:05:52:8e:e7:d9:c7:60:
                    55:62:ee:cb:3c:94:cd:80:1d:d2:2e:de:5a:67:4f:
                    9a:7c:75:2a:7d:c4:c4:83:5f:14:f7:a0:ee:0c:30:
                    56:42:c4:52:a8:20:5d:1b:e2:3b:6a:0f:e4:14:5b:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5C:03:E8:70:D9:DD:15:8B:AC:AD:16:69:15:45:6C:F9:22:A1:C3
            X509v3 Authority Key Identifier:
                keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:aa:63:39:33:95:9d:a5:9d:bc:e4:4c:c0:4f:35:84:95:31:
         1d:49:a2:8a:39:09:72:e4:ee:44:4f:e5:1b:eb:e9:e3:8a:b8:
         3a:ea:76:5f:72:5b:70:ce:a0:73:cc:88:a2:9b:27:7c:2f:5c:
         0a:72:63:98:44:98:99:65:ee:5d:1c:0e:cf:55:54:8e:05:94:
         24:57:12:20:ae:35:a5:31:10:05:fd:3b:9c:0a:1a:2d:df:a7:
         e7:c8:45:b6:ca:89:b5:5f:d9:26:86:52:79:82:21:ca:70:f6:
         03:77:34:e9:c5:04:b3:73:81:cc:98:66:51:bd:b9:11:b3:0d:
         bc:d4:c1:a7:25:22:17:26:b7:21:2a:aa:44:b0:80:fa:58:f6:
         41:66:b5:9c:06:dd:e5:db:ed:a9:47:3a:20:db:28:ef:3b:95:
         fd:d9:6c:e9:8a:98:a0:c1:69:7b:31:54:70:8e:0a:ca:20:4f:
         25:d3:81:9d:3f:3d:ca:26:aa:80:63:c3:a4:0f:3a:e4:2c:4c:
         c7:6e:6c:b0:9d:81:4d:4c:b1:0b:ad:48:18:05:79:58:48:97:
         c8:ff:11:59:50:ea:bb:02:bd:f5:8d:4c:1c:82:40:e2:88:ad:
         10:33:6b:cb:3a:8b:31:d0:c7:bd:91:16:98:7e:95:66:b6:42:
         2b:61:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:38 2026 by rpki-client