Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
File:                     8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft (raw, json)
Hash identifier:          uIlZomK5Ijpas6QHU+iNhbqH9V6H/+QFAKmJL4OvjZ4=
Subject key identifier:   42:34:E3:BD:DD:63:B3:06:C8:7D:6E:2A:E5:48:5F:DF:2F:9A:AD:0F
Authority key identifier: F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58
Certificate issuer:       /CN=A91CDF78/serialNumber=F244815D5B391E2000B78CA96E193020FF902258
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
Manifest number:          2A
Signing time:             Thu 23 Jul 2026 10:49:49 +0000
Manifest this update:     Thu 23 Jul 2026 10:49:48 +0000
Manifest next update:     Thu 30 Jul 2026 10:49:48 +0000
Files and hashes:         1: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl (hash: z/HR5c8vkp1pkFl92uqJ+VrTrN3an/6EJFnRG9rS3zc=)
                          2: 46165CDE490411F1BC93ABE395833773.roa (hash: X96VcqcjafQHkS8RXd769VXGiUvTLL5bk9V9PsYGSzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF78, serialNumber=F244815D5B391E2000B78CA96E193020FF902258
        Validity
            Not Before: Jul 23 10:49:48 2026 GMT
            Not After : Jul 30 10:49:48 2026 GMT
        Subject: CN=6a61f1cd-ce90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:0a:46:a6:0b:f4:e0:78:8d:34:02:f8:d5:
                    1e:e3:09:c9:58:48:7c:4b:3d:a7:b9:f7:51:52:7d:
                    de:40:ef:a0:4b:24:1e:d2:24:41:94:5b:c1:e1:17:
                    24:23:1f:1a:15:38:20:62:a0:0e:b3:dc:78:5f:71:
                    6a:0b:dd:d5:cd:f9:2a:1b:09:3e:fa:08:5a:da:dc:
                    28:11:35:a6:0c:8d:c7:b5:16:38:28:fc:1f:86:ba:
                    63:3f:90:b0:70:c8:c8:b3:04:8b:1f:e6:c2:e3:90:
                    00:b7:a8:7c:df:42:9d:ce:ff:d1:7c:e1:5d:61:36:
                    82:ab:81:96:72:53:c2:6b:f3:74:32:34:35:d6:5e:
                    01:79:4b:0c:5c:b8:49:10:7b:d6:fd:8e:4b:a4:b3:
                    3d:c7:12:28:5d:97:ce:00:d3:ce:66:48:07:49:ea:
                    3f:6b:96:6b:16:a1:84:53:cc:2e:45:14:48:37:6b:
                    af:34:cb:2e:14:7e:eb:5f:7e:b9:7f:ab:ee:81:62:
                    2a:e1:dd:06:67:08:f0:84:a8:de:4f:69:2b:bc:59:
                    2a:e5:c5:de:44:af:f4:cd:2f:a7:b6:95:93:51:60:
                    56:00:f2:1a:ba:5c:36:de:51:6e:fd:11:fd:6e:53:
                    43:9b:04:fb:2d:a0:be:0a:5a:5d:0a:be:a6:e9:4e:
                    42:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:34:E3:BD:DD:63:B3:06:C8:7D:6E:2A:E5:48:5F:DF:2F:9A:AD:0F
            X509v3 Authority Key Identifier:
                keyid:F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:fb:32:00:f4:6a:33:a2:e0:b2:4d:14:ca:df:77:8e:0b:25:
         d4:e7:b9:b0:2c:44:20:65:45:25:31:53:91:42:ea:6e:5e:9d:
         15:7a:73:ea:f1:af:e4:e1:53:8c:6c:99:19:82:a5:3d:8b:85:
         c0:4c:4b:4b:ea:71:15:28:f0:a6:8e:70:d1:4a:6e:86:38:d4:
         18:a8:f7:bf:53:6a:c4:f6:28:f9:b5:72:79:ae:27:27:7d:ec:
         ec:dd:e1:d6:13:d0:04:a7:82:ab:ad:63:84:01:79:79:3a:a8:
         ee:fe:55:f1:a5:4e:f9:ea:bb:40:e4:f6:b1:f8:0b:1d:ce:1b:
         e6:87:8e:4e:f9:e1:0a:d9:12:d6:a1:f0:39:0f:b8:6e:ab:c8:
         17:fe:84:17:45:53:59:dd:f9:61:cd:d0:82:59:39:44:23:91:
         4d:c9:70:5e:0c:e6:67:6e:34:ba:a1:e0:65:c0:69:72:9c:60:
         fb:75:29:af:bf:b0:5c:8d:0f:d9:3d:3f:0e:8a:b4:7e:ac:a9:
         78:04:fe:e1:5c:26:4d:f0:dc:ef:99:f2:58:21:98:db:80:a2:
         8c:09:ce:3b:6c:75:9f:d6:de:2d:9b:10:25:27:ad:d3:90:ea:
         42:dc:e6:c5:22:08:58:36:95:62:2d:04:d2:25:a8:d9:2a:22:
         41:c0:52:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:54 2026 by rpki-client