Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
File:                     mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json)
Hash identifier:          t3fim8QPPa0nBw4lHfSAhdjNBhLepwbPPAN0yJs/WHg=
Subject key identifier:   39:7F:ED:CA:8D:10:9C:D2:72:12:71:14:A7:6F:06:5A:7A:90:FE:9C
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Certificate issuer:       /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial:       0912
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
Manifest number:          0904
Signing time:             Wed 22 Jul 2026 20:45:56 +0000
Manifest this update:     Wed 22 Jul 2026 20:45:56 +0000
Manifest next update:     Wed 29 Jul 2026 20:45:56 +0000
Files and hashes:         1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: 3NOEq1coEiD3zrrPMBZirrom69VWcJT6Qn8/WnHx+cE=)
                          2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: y0ZDNF6cJnenBSxzNT9Zg+guSF3PdEPjBHywfaHzzjo=)
                          3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: cE48WGS9kboOii2J8VTr2sUZ9DzkZ2EoWEhl3gouzMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
                          rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2322 (0x912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
        Validity
            Not Before: Jul 22 20:45:56 2026 GMT
            Not After : Jul 29 20:45:56 2026 GMT
        Subject: CN=6a612c04-9a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:df:48:d6:aa:44:a2:ca:49:c2:22:fb:d9:
                    88:73:8b:23:48:31:98:10:4e:49:8f:ed:c8:6f:0d:
                    5f:50:a2:45:48:d5:5a:6e:1d:48:c4:b4:8d:db:17:
                    bc:5a:65:2d:33:ae:81:a6:e7:00:e1:60:b3:3a:16:
                    7e:d3:07:77:0b:2e:0f:95:46:a7:7d:2c:03:66:13:
                    79:92:e4:45:8a:9c:a4:a1:d4:a9:75:58:39:1c:73:
                    84:03:fd:44:4b:83:a6:de:30:b2:f4:4e:44:d8:32:
                    c7:7c:ce:bf:ce:95:fa:5c:0c:65:da:4a:ef:10:3d:
                    3f:8c:86:ac:f5:a5:df:01:80:cf:59:a5:11:aa:a9:
                    25:95:c9:bb:73:a1:94:59:c8:6a:5e:9b:17:a7:57:
                    b2:5d:32:de:4e:22:c6:bb:f6:db:63:ac:d4:5e:9d:
                    d9:01:c4:f1:cf:bb:c7:56:71:7c:68:64:a9:33:1c:
                    17:2b:86:2f:b1:e5:4a:e6:96:c0:99:78:01:a1:00:
                    72:ea:d2:28:5f:6c:ac:c7:2e:8b:74:8e:73:6c:df:
                    79:ee:c7:d9:8c:43:77:02:71:fb:19:15:af:b4:13:
                    8e:86:03:ac:9b:4b:aa:59:c6:f0:25:67:46:b5:e3:
                    07:ea:79:78:39:21:b3:ed:ce:95:55:96:1d:13:2b:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7F:ED:CA:8D:10:9C:D2:72:12:71:14:A7:6F:06:5A:7A:90:FE:9C
            X509v3 Authority Key Identifier:
                keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:b7:e4:a7:99:c4:52:2d:38:87:1a:bf:80:92:0f:58:b1:
         c6:b5:38:70:04:fd:81:8c:81:4d:13:98:b0:ab:d6:af:63:28:
         23:41:75:1d:3f:58:af:52:ed:74:76:54:ac:1a:38:83:c4:0a:
         72:a0:c2:21:3e:31:07:7f:62:c5:18:1d:b5:21:3d:7b:49:a8:
         12:ea:a7:de:e2:1d:5e:b3:1e:46:e1:e1:61:23:df:1d:00:02:
         98:aa:d2:00:e6:c2:7a:00:cd:34:6a:ac:b6:4a:a5:29:91:d5:
         15:d2:e2:4f:3a:0a:62:e0:81:e7:ab:9c:0b:e5:4d:e9:bd:e4:
         d6:61:6e:b7:51:9f:00:85:93:9d:b8:ae:57:30:d3:2d:1b:06:
         af:38:1c:7c:d4:65:ef:ad:6e:0f:42:d8:d8:33:ab:ba:84:2c:
         1a:81:f0:1d:c3:0c:1c:19:a4:ec:59:1a:99:4a:65:46:54:8d:
         85:c2:23:62:91:87:ac:e8:78:78:ef:c6:16:f3:1f:4a:29:e6:
         cc:93:d1:bd:63:9b:66:35:4b:43:0d:8f:ff:c7:5c:d6:c8:62:
         34:b2:f3:b5:c6:0e:0c:60:3e:2d:5b:5d:83:9c:5c:44:e9:78:
         7c:76:8c:80:ec:56:d0:ed:8b:db:e6:f9:da:43:42:a4:12:ee:
         da:3d:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:51:59 2026 by rpki-client