Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
File:                     sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json)
Hash identifier:          eD22FBLCnLoldrNNE2L4WFoiQoJ803oQcs7jxUaO0cA=
Subject key identifier:   28:C7:0F:10:60:33:1E:2A:33:9F:B4:4B:D3:64:72:AF:B2:15:4D:3D
Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
Certificate issuer:       /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Certificate serial:       0DF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
Manifest number:          0DEF
Signing time:             Wed 22 Jul 2026 18:03:53 +0000
Manifest this update:     Wed 22 Jul 2026 18:03:53 +0000
Manifest next update:     Wed 29 Jul 2026 18:03:53 +0000
Files and hashes:         1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: qIp6arUbqOFnpMUzWYnybYvR0+gc4A2SauJRWOQ78z0=)
                          2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: 5ZMmyMryQucfNp+56gWj7IUfWmQlJppiEYV0jS6pkCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3577 (0xdf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
        Validity
            Not Before: Jul 22 18:03:53 2026 GMT
            Not After : Jul 29 18:03:53 2026 GMT
        Subject: CN=6a610609-1df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:e1:e7:af:8a:ee:18:e1:ea:44:ee:98:15:
                    2d:56:fd:d1:70:4a:ae:69:a7:c0:26:af:9e:4f:22:
                    e1:e9:33:69:d8:22:a1:8c:c1:4c:3b:5e:a1:49:4f:
                    f0:46:fc:8c:c6:38:3e:8e:64:0c:19:51:5c:20:8d:
                    5e:43:58:38:26:4d:77:5e:cc:b4:78:bb:8f:4d:24:
                    6a:b5:59:4f:be:c7:3a:1e:ba:4c:28:86:6f:f3:4e:
                    49:7b:4d:26:20:49:be:29:ce:d5:02:4c:98:5e:9a:
                    01:db:e1:d1:db:2c:d3:f4:53:2c:3f:e2:3a:4a:99:
                    13:79:b8:dd:26:66:b0:bf:56:ba:aa:67:89:2d:da:
                    db:26:67:dc:3c:15:12:76:56:79:4f:a3:a9:2f:2a:
                    c3:75:68:df:52:93:2c:2f:4a:bf:e9:9a:0a:7d:bd:
                    54:a7:6f:d1:d4:9c:ec:4f:2b:d5:4c:a6:4f:da:d2:
                    6f:18:f8:a1:d9:3e:dd:48:62:a5:8c:47:14:8a:ee:
                    c3:56:d0:64:fe:8a:17:53:a8:a1:a6:28:a7:25:1e:
                    93:74:a3:ed:3d:d1:01:3f:f9:5e:23:01:2f:7c:1b:
                    73:18:5e:c4:2b:42:01:bd:6c:c8:3a:97:36:2c:8a:
                    ae:ab:90:a4:28:d5:35:a7:90:03:f1:af:fd:94:54:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C7:0F:10:60:33:1E:2A:33:9F:B4:4B:D3:64:72:AF:B2:15:4D:3D
            X509v3 Authority Key Identifier:
                keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:11:9d:53:1d:ac:0c:09:89:e0:ce:1a:7c:45:fd:00:45:
         07:20:d9:2d:b6:a9:da:cc:f1:6e:78:a4:5a:4f:09:06:57:b0:
         58:52:b0:f6:5e:54:a3:f7:10:41:a4:4e:e3:fb:c3:4d:82:a9:
         63:56:b6:7e:96:75:b9:e5:6e:9c:74:7b:1a:97:0d:ec:57:07:
         e6:5e:54:09:51:5a:b1:7f:4f:f0:ea:ea:d3:9e:08:93:8e:1e:
         e8:aa:e4:e9:62:5b:bb:ec:4f:38:25:79:5f:97:45:9e:a6:ab:
         7b:20:6a:37:a8:41:40:8c:49:86:cf:1a:60:b9:e7:63:e4:0a:
         ee:b2:7d:8b:10:fd:b5:38:1f:3d:e6:aa:25:4a:de:0b:f8:40:
         82:7c:1a:f1:f5:95:86:0d:48:6d:e5:1b:e2:e3:06:42:ff:bf:
         0a:63:d3:d6:d3:67:a4:49:bf:77:4e:e6:ed:4e:12:02:40:21:
         62:42:c7:e7:ec:9f:ce:79:d3:07:b0:c4:af:c8:f7:3e:7f:e1:
         bf:68:90:40:b9:1f:cd:44:1d:67:88:12:23:eb:d8:35:e0:7d:
         02:e2:f6:66:d4:bd:a5:0e:6e:30:9f:eb:6e:09:c7:d2:7b:43:
         ce:c8:fb:21:3a:b4:7b:c5:51:74:e9:b3:e2:ce:71:e0:de:49:
         aa:39:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:08 2026 by rpki-client