Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
File:                     1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json)
Hash identifier:          6alJ54jWpHdJEBzDVWPhPADJowmYnMzn0YwneV0xAL0=
Subject key identifier:   E2:C4:8B:A6:A4:C9:18:32:68:2F:D4:52:79:8E:8F:ED:D9:EF:A1:28
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Certificate issuer:       /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
Manifest number:          01B6
Signing time:             Thu 23 Jul 2026 05:24:46 +0000
Manifest this update:     Thu 23 Jul 2026 05:24:45 +0000
Manifest next update:     Thu 30 Jul 2026 05:24:45 +0000
Files and hashes:         1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: kJu4WWD2UUMePYkMrr0CmDtsNPtOb+Q+2feTJQ2Bn3A=)
                          2: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: mVKVwUNodXC2dILmuSgM+YaGamOWVYaoYaJr0bNv0L4=)
                          3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: 4ltPjkJAsX+6JN5WYsYcJkqkB/QGduq8OB4qSY5kFTc=)
                          4: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: AhKlMEv2PuM9Bfvy73cb9Wj3F7xu3e3qXO027TlJaIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
        Validity
            Not Before: Jul 23 05:24:45 2026 GMT
            Not After : Jul 30 05:24:45 2026 GMT
        Subject: CN=6a61a59d-7c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:b7:ac:f5:61:7d:9a:85:fb:d9:a0:af:04:
                    f6:f1:8a:bc:48:69:76:52:d2:3b:ed:8c:b4:4c:11:
                    45:0f:09:56:ff:18:30:0f:6e:4f:cc:3d:00:e5:76:
                    8f:f4:10:30:81:b7:8d:19:ec:12:7d:4f:fe:c0:64:
                    f6:c0:78:1e:13:d1:5a:bf:5d:01:cc:12:de:71:68:
                    b3:15:1b:51:60:c5:dc:f8:92:b9:1e:11:e1:85:70:
                    73:05:a8:f0:6d:9f:a1:49:3e:4d:f7:b9:8a:2f:c7:
                    8f:2f:13:66:18:f9:9f:07:cb:ef:7f:97:64:45:81:
                    37:74:b8:5f:ee:15:e7:ec:3e:ab:b1:99:f6:13:59:
                    e7:28:50:c8:33:36:7a:a8:0a:48:de:98:74:c9:e0:
                    8d:f3:30:fd:f9:5d:30:2f:0c:41:cd:e3:a2:95:d5:
                    6c:1c:e3:35:04:f9:c0:17:2f:77:66:cd:46:e8:ee:
                    d2:50:5e:7e:82:b1:c5:80:6f:e7:93:41:63:a9:32:
                    d1:33:12:dc:bc:6d:ad:ed:1c:e7:5c:6e:f7:cf:cd:
                    d0:ad:52:31:df:a6:ad:1b:29:99:25:03:af:90:8d:
                    7a:e6:f4:58:5b:8d:b2:f4:4b:3b:28:4c:16:c4:d0:
                    96:af:bf:cc:d9:a1:f5:4b:1a:a3:2d:ba:02:49:16:
                    8d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C4:8B:A6:A4:C9:18:32:68:2F:D4:52:79:8E:8F:ED:D9:EF:A1:28
            X509v3 Authority Key Identifier:
                keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:84:5a:6c:14:a1:73:6c:b7:85:16:3a:07:82:b1:14:8a:b8:
         58:4a:e8:db:fd:e9:ca:01:e7:79:de:34:1b:4c:07:fe:b6:b2:
         79:9d:fc:77:65:4e:2a:a0:f6:8b:4f:85:5d:2b:fb:79:a0:4b:
         8c:40:64:5c:fc:08:b1:5c:70:21:31:ee:67:b3:ca:a3:e4:42:
         3b:b5:b8:ba:d2:67:47:0c:f7:9f:22:91:af:17:dd:ef:08:ce:
         4e:c7:64:e9:76:e3:33:9a:45:f2:e8:22:29:1c:96:d7:85:30:
         60:88:96:0a:36:77:81:c0:20:e7:b4:0e:4b:f4:ad:e9:e9:b4:
         df:de:c2:05:7d:63:6b:27:c8:fc:2d:e7:49:2e:82:a3:97:10:
         ca:eb:31:cd:e2:79:b0:20:b6:e9:dc:d9:fe:07:b4:47:52:d7:
         e8:7f:87:26:f1:ee:ff:c9:da:f5:1a:bd:a6:0e:2b:3a:bf:f8:
         fb:bd:b0:ba:04:45:ec:c6:3d:9b:ca:21:64:47:b7:98:d4:21:
         e8:44:12:03:d3:21:e2:c9:ee:41:fd:88:f7:37:1d:3f:79:ee:
         02:2e:48:09:de:ac:b0:78:2f:4a:75:d9:0a:39:5d:ba:74:6a:
         13:c4:4c:af:f4:b6:7f:20:33:43:f7:95:1c:f3:82:cf:59:ba:
         25:ff:f8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:45 2026 by rpki-client