Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
File:                     k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json)
Hash identifier:          KTQzNy+e52oNnYyxykqIHGe84l/ocizcOVi187qngOY=
Subject key identifier:   10:01:C1:03:42:28:32:08:B9:49:48:38:79:64:67:91:90:89:A8:32
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Certificate issuer:       /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial:       19C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
Manifest number:          1993
Signing time:             Wed 22 Jul 2026 16:29:55 +0000
Manifest this update:     Wed 22 Jul 2026 16:29:55 +0000
Manifest next update:     Wed 29 Jul 2026 16:29:55 +0000
Files and hashes:         1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: PRZjOfqWhaOkvkBx2JNnSLQvCLxLKoGUpXBCoKuUcbM=)
                          2: A6ACA298858911E88026B416C4F9AE02.roa (hash: xvpQufWbZtoOPenCGqByU4W+/Qf1CoRrTb220/EylgU=)
                          3: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: aHUYKJz3swuqsMEmIFAJ0GsRrZYFSKs8JsA+7j3SS9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6601 (0x19c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
        Validity
            Not Before: Jul 22 16:29:55 2026 GMT
            Not After : Jul 29 16:29:55 2026 GMT
        Subject: CN=6a60f003-463a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:78:c4:68:05:3a:f5:1c:63:4d:44:94:e3:
                    0d:94:05:d6:3e:5a:00:e6:f7:6c:ad:15:e6:85:bc:
                    08:34:b7:92:a5:ed:46:54:87:8a:b7:23:9f:90:c3:
                    c7:f9:db:ad:3b:1c:2e:48:a6:15:88:13:93:b8:e5:
                    7c:74:15:2b:a5:11:f0:18:9e:28:9c:c1:bb:2b:a8:
                    bc:29:b3:24:23:38:96:ce:3f:47:8e:12:be:26:fe:
                    33:a7:08:aa:9d:5b:2a:2f:5a:b9:bf:c0:20:89:a1:
                    30:47:1a:23:c7:d2:f7:90:f7:fe:fd:8b:32:4a:7e:
                    3d:98:1c:a2:8c:14:9f:8e:97:c2:4d:e1:e5:74:63:
                    e2:61:30:30:84:e4:16:f0:b2:c8:e7:39:a7:b6:62:
                    8e:89:f8:2a:60:97:98:71:eb:1b:9a:09:27:f9:e7:
                    b2:9e:cd:d6:fc:d2:da:b7:71:29:4a:7b:58:9b:bf:
                    81:90:40:98:de:09:ba:44:2b:1c:74:d2:99:8f:51:
                    26:c1:fb:5f:bb:c6:09:94:46:f8:49:57:95:a5:b9:
                    5b:60:a6:17:57:3f:c8:16:e8:b3:fc:56:fb:d0:99:
                    a7:77:be:de:52:64:95:07:1a:cf:c8:d7:31:64:ce:
                    99:ac:46:1f:5f:89:02:56:f0:a5:f7:ec:66:d9:a2:
                    37:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:01:C1:03:42:28:32:08:B9:49:48:38:79:64:67:91:90:89:A8:32
            X509v3 Authority Key Identifier:
                keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:28:f8:72:17:be:cc:37:da:f3:3c:ef:45:84:1f:8f:f7:da:
         cd:25:8d:36:98:14:7f:2e:46:78:87:8c:e4:c8:02:fc:d1:75:
         aa:18:39:8d:37:1a:99:78:b1:1d:12:0a:1f:0d:6a:9f:d9:ee:
         bd:2b:85:74:25:4f:c1:a3:1d:96:5f:f9:46:38:0d:78:08:ba:
         91:cf:d0:f9:ae:62:8d:48:b1:25:63:eb:29:89:3c:3e:19:0a:
         d0:26:f1:bf:2a:2f:41:7f:2a:a2:99:e6:5d:a0:90:59:e8:79:
         58:f0:81:75:31:80:9a:21:49:79:b0:75:83:13:a1:7e:18:93:
         1f:99:5d:7e:19:ad:ae:25:2a:bf:dc:55:a6:c5:16:9c:e1:60:
         67:66:e8:ef:61:fc:21:d6:f1:09:d6:ba:35:45:f3:d3:44:5e:
         0a:c9:d6:07:d4:f7:6a:bd:91:8f:24:26:0c:36:b3:be:3b:f2:
         8b:6b:9d:a4:3e:71:3c:f6:bf:9a:85:e0:6b:74:2a:47:93:79:
         7d:db:61:63:ea:07:73:20:ee:ac:28:f2:65:49:a8:7c:cb:a7:
         43:98:8e:8a:df:3c:bf:bc:ff:33:86:79:6c:2d:c9:d4:e6:4b:
         c5:1f:9d:6d:48:ff:04:f4:fa:11:e8:25:04:53:bd:bb:ce:97:
         29:bb:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:34 2026 by rpki-client