Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
File:                     lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json)
Hash identifier:          rZstqIQdKyk39BxRWpFq6wyI6RfrkyIIu6h5UrLRIiM=
Subject key identifier:   1B:43:68:35:17:8E:53:3B:91:DE:8E:9C:7C:AC:45:23:A0:FA:E1:7D
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Certificate issuer:       /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial:       0522
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
Manifest number:          04F7
Signing time:             Thu 23 Jul 2026 00:36:04 +0000
Manifest this update:     Thu 23 Jul 2026 00:36:04 +0000
Manifest next update:     Thu 30 Jul 2026 00:36:04 +0000
Files and hashes:         1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: Vp+veC5HuqX18k8bXltVgb51qZWV9l5Zhc/vRWojXFk=)
                          2: AFF169A0F34111F0B7AB4BD35C6F56BC.roa (hash: vVW7527z8oKpKM3+fK3b3v+qQSbJYZfIJ5Q7l1xCldg=)
                          3: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: 0P3dqvWYda9lLWl1wge90QahspxZ2fOocNpXJvgS+I0=)
                          4: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: ETprqd4TG0fz1XKpXzLSp0H4HleJTU3ZCwBa2O0/5NQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314 (0x522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
        Validity
            Not Before: Jul 23 00:36:04 2026 GMT
            Not After : Jul 30 00:36:04 2026 GMT
        Subject: CN=6a6161f4-827c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4b:f3:a4:16:d2:d7:a0:2c:a5:d9:ed:1f:f5:
                    d9:ea:3d:19:14:f9:ef:ec:62:ad:6f:84:fe:93:d0:
                    88:4f:ea:d8:bd:2b:e5:c0:84:5d:d7:66:ef:74:aa:
                    73:43:b6:96:92:f3:5e:45:6f:a1:3c:5b:14:41:58:
                    b2:b3:b8:71:be:7c:c3:aa:51:bb:bc:00:ba:4e:03:
                    ad:ee:cd:af:eb:9a:42:4b:a6:be:3b:f4:f2:3c:c9:
                    8e:ca:44:2c:50:e9:35:c5:c3:3c:3f:a2:6e:7d:53:
                    1c:f2:7b:28:dd:cc:97:d1:ea:94:96:c0:3f:61:f3:
                    e1:4b:98:67:07:bc:c3:49:98:ad:ad:3f:14:aa:32:
                    e1:53:9e:30:49:a0:07:33:f1:f6:49:5c:05:43:8f:
                    1c:ab:e4:01:62:ea:48:17:fb:09:2e:78:0f:f6:77:
                    69:47:d6:b5:33:18:d3:41:21:47:35:df:52:8a:87:
                    61:87:84:ad:13:85:ee:8d:88:d1:c4:18:8f:3c:a6:
                    8e:7f:42:18:74:f3:a4:d1:10:ed:a5:c2:61:3f:2e:
                    2b:71:9b:b9:71:79:f0:97:da:f0:2e:6b:40:8c:1f:
                    a0:04:8c:ec:76:b4:34:42:fa:70:9a:ca:82:97:0a:
                    cc:ec:ca:c6:93:02:09:5c:db:b8:3f:63:04:05:30:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:43:68:35:17:8E:53:3B:91:DE:8E:9C:7C:AC:45:23:A0:FA:E1:7D
            X509v3 Authority Key Identifier:
                keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:03:ce:ce:05:cd:46:8d:48:78:22:8e:bb:ec:57:b0:31:d4:
         1e:58:d7:17:76:e6:de:3d:78:93:6e:c6:d8:7d:e4:f8:6f:23:
         ad:46:2e:69:e7:d4:4a:84:5c:1c:cd:a5:8f:85:cf:16:d9:bf:
         2f:1c:15:b9:3c:8b:54:17:24:bd:04:34:43:33:39:f0:89:ab:
         f0:eb:b9:b0:47:d2:6e:48:a2:ce:ad:7c:90:ff:cc:d8:cf:46:
         74:6e:a9:1d:48:22:56:12:00:89:28:f7:0d:49:1e:96:64:c9:
         b4:7b:11:26:fb:7b:a8:ac:bf:80:05:0f:26:6a:cb:f8:6a:79:
         bb:2d:10:d3:fc:6d:a0:93:0b:42:f2:6d:e9:87:8e:c2:b0:84:
         f4:7e:d4:a7:4a:21:77:68:93:0e:84:15:b3:76:f5:9c:44:f3:
         16:f6:c0:1d:c8:3b:f5:ca:a7:ad:07:87:4a:5d:1a:b1:4a:2a:
         07:c4:21:0d:3f:73:79:38:6b:b9:dd:e8:1e:bb:32:2e:6c:9e:
         df:a0:5d:9c:05:3c:41:fb:c0:5f:91:c4:10:4e:7a:b9:34:8e:
         93:49:32:c7:f4:b4:c7:eb:42:f5:70:66:b7:3f:bc:6a:85:b6:
         18:9b:17:38:bc:e9:d8:71:31:c8:b7:53:c6:e0:40:12:d1:7e:
         41:f5:54:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:27 2026 by rpki-client