Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft
File:                     pSAa7m9KXB64p-HHhTv7srp1y9I.mft (raw, json)
Hash identifier:          zIQ8+5R7CWG6RPhsO5GXdZ5mpoGwaavZP4duxbT3ueU=
Subject key identifier:   4C:7A:24:32:69:5A:73:56:8F:BD:8F:82:1F:4C:D0:7C:CA:43:96:FF
Authority key identifier: A5:20:1A:EE:6F:4A:5C:1E:B8:A7:E1:C7:85:3B:FB:B2:BA:75:CB:D2
Certificate issuer:       /CN=A91D1003/serialNumber=A5201AEE6F4A5C1EB8A7E1C7853BFBB2BA75CBD2
Certificate serial:       0C47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft
Manifest number:          0C3A
Signing time:             Wed 22 Jul 2026 19:04:11 +0000
Manifest this update:     Wed 22 Jul 2026 19:04:11 +0000
Manifest next update:     Wed 29 Jul 2026 19:04:11 +0000
Files and hashes:         1: pSAa7m9KXB64p-HHhTv7srp1y9I.crl (hash: xGWonlvZ6XyR36BJKKj+wxcvgazBNmRn93Swlcb1sPM=)
                          2: 0DC2568E320511EA8CF6B72DC4F9AE02.roa (hash: lrXJAG9pwB68/9ymul53XjFddHdzlUams6o2moAtAtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.crl
                          rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3143 (0xc47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1003, serialNumber=A5201AEE6F4A5C1EB8A7E1C7853BFBB2BA75CBD2
        Validity
            Not Before: Jul 22 19:04:11 2026 GMT
            Not After : Jul 29 19:04:11 2026 GMT
        Subject: CN=6a61142b-6c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:f6:05:80:af:0b:7a:93:bc:68:88:1e:9f:
                    48:dc:5a:fd:89:01:36:72:64:2b:89:58:dc:8f:ac:
                    54:66:76:ed:e1:12:16:95:d0:48:6a:b7:18:e7:33:
                    51:8b:64:2d:50:33:90:6d:09:f8:bc:01:dc:dd:6b:
                    b4:7a:11:5e:2e:4b:8c:42:d7:73:3d:b1:5e:4c:50:
                    d2:68:39:28:83:17:9b:b0:c0:52:94:84:e1:89:3d:
                    c6:cf:59:46:d4:06:ef:cb:88:31:58:7f:09:ab:18:
                    f7:c7:dc:fc:ea:b5:6d:17:80:9d:bf:db:73:6c:a1:
                    26:e7:16:b6:cd:e8:ff:f3:ed:e2:2e:1f:ea:04:24:
                    ca:52:3e:7d:38:35:eb:2b:da:ac:fd:47:71:4a:a4:
                    cc:b3:89:38:58:96:db:01:26:c1:0b:6e:67:55:98:
                    68:32:cc:28:86:89:b6:84:24:90:d4:f5:38:41:0a:
                    f8:51:ed:b4:83:5f:0d:78:15:82:65:88:98:7c:3a:
                    ee:7e:4d:ba:ad:08:f9:fe:a2:1f:72:c2:86:ac:ca:
                    b8:08:e4:be:d4:57:97:f0:20:f4:c2:ea:a5:01:01:
                    75:8c:78:eb:7b:5d:51:52:31:23:91:6c:e6:dd:51:
                    9e:e3:c9:f2:ba:6e:6d:d1:65:4c:0d:46:16:21:c2:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7A:24:32:69:5A:73:56:8F:BD:8F:82:1F:4C:D0:7C:CA:43:96:FF
            X509v3 Authority Key Identifier:
                keyid:A5:20:1A:EE:6F:4A:5C:1E:B8:A7:E1:C7:85:3B:FB:B2:BA:75:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ed:1d:5a:04:3d:46:a4:22:d2:21:fc:b5:fe:d2:74:f5:17:
         b9:fb:3f:36:ba:42:d5:da:2d:b1:5b:3f:8b:64:2d:6a:90:80:
         21:ac:c2:8c:90:5b:78:bc:fc:50:92:c2:a8:41:ba:dc:16:42:
         9d:af:65:71:55:2d:95:90:e2:da:9f:fe:ed:36:89:6b:ef:fd:
         a2:5c:e6:8f:ed:60:eb:d5:c0:c1:74:ad:47:7b:78:c1:97:bb:
         d9:2b:de:76:83:b5:aa:d6:df:ba:fa:a6:72:5d:b6:cc:0d:41:
         a4:8e:73:cf:4c:b9:13:7d:a2:4c:b6:03:a7:cd:65:a1:fa:ce:
         b1:c6:9f:96:74:e4:d6:81:89:32:0d:69:f7:a8:5b:a9:5f:cc:
         ec:67:bf:f3:66:38:96:65:bd:73:9a:42:14:cd:cb:fd:57:b1:
         e0:04:76:b2:83:42:c4:0e:17:98:bf:22:00:fc:07:77:32:e2:
         cf:4c:6f:cc:16:f2:1b:1a:4c:79:0d:c9:4e:08:11:bb:fb:d3:
         0c:68:0d:da:a8:10:84:06:91:c1:cf:97:94:39:86:e1:57:df:
         43:8e:58:17:ca:d6:ce:c3:2f:e5:c6:54:2c:9f:dc:a5:dc:a4:
         3c:3e:d8:a2:14:9c:86:4e:f1:9c:f9:7b:2b:6a:7a:38:83:ba:
         6f:03:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:47 2026 by rpki-client