Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
File:                     77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json)
Hash identifier:          8kh9GqD8lE6hYrP/S1X78sZscY1h6QKyjZVC/+3K0cQ=
Subject key identifier:   5A:F0:32:F3:4B:9C:6A:77:3B:FE:E0:F9:EA:DE:53:45:2E:5B:CB:F0
Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
Certificate issuer:       /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Certificate serial:       0CFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
Manifest number:          0CF0
Signing time:             Wed 22 Jul 2026 18:38:46 +0000
Manifest this update:     Wed 22 Jul 2026 18:38:45 +0000
Manifest next update:     Wed 29 Jul 2026 18:38:45 +0000
Files and hashes:         1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: +Y7KsImbdemrzEq3ittOhiLWs0mrXS2nEiPVxKqpUF0=)
                          2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: lK8WYlW/sGNnnRMcLOEhnAiWj1a7xDPNyjs1znIbG8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
                          rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3322 (0xcfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
        Validity
            Not Before: Jul 22 18:38:45 2026 GMT
            Not After : Jul 29 18:38:45 2026 GMT
        Subject: CN=6a610e36-4a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:15:3a:e2:c4:0c:9e:9d:85:72:3a:43:ef:
                    86:dc:7c:9b:22:18:67:f7:69:ba:28:e8:ab:d5:de:
                    99:0a:7f:f3:77:85:70:e5:94:9d:28:e2:c1:d9:0d:
                    70:ab:46:59:51:ac:4a:e7:3c:a0:5b:de:0f:5d:a4:
                    44:e9:6d:ec:b3:76:23:1d:fb:aa:5e:8d:bc:c8:5d:
                    3b:11:d5:0e:49:92:0c:d1:2c:ff:c2:1e:4c:2e:d2:
                    0c:39:a4:f2:25:78:57:26:4d:0f:d1:f9:36:6f:ad:
                    bd:65:5d:b0:4e:ac:d9:12:d6:41:4e:ac:84:75:a2:
                    62:62:86:cc:9e:46:af:35:99:84:d8:9f:3e:60:91:
                    b5:28:38:a6:5d:8d:01:3c:31:2d:6d:97:17:4d:ed:
                    57:07:2a:ee:ee:94:c2:ef:5b:d1:ba:c5:9c:f4:24:
                    65:79:08:f2:ec:f9:1f:58:38:69:70:57:e9:0f:dd:
                    3e:17:91:c5:4b:a1:95:03:9b:92:58:f0:b0:ab:ec:
                    7e:c3:ea:5e:30:30:ca:75:8b:29:b9:9f:23:76:76:
                    22:ad:0d:27:38:00:b6:93:ea:81:3f:92:ae:39:20:
                    20:91:11:3f:89:98:bf:38:8a:49:71:8a:1b:1f:ba:
                    e8:76:a1:5d:d7:66:38:f7:75:e8:28:b4:44:2e:64:
                    4d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F0:32:F3:4B:9C:6A:77:3B:FE:E0:F9:EA:DE:53:45:2E:5B:CB:F0
            X509v3 Authority Key Identifier:
                keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d5:7e:eb:e3:f3:9e:67:d6:02:44:eb:51:9d:8b:d5:ea:32:
         f3:86:6e:33:5f:71:e9:d4:73:7e:84:d2:5c:af:04:c1:90:cc:
         2a:a9:06:1b:f7:2b:c1:43:9d:85:6c:02:7e:e7:d5:bc:d8:5e:
         a9:29:d3:22:fe:1c:1d:fb:7e:53:d4:3a:fd:68:93:b5:e2:3f:
         ac:eb:d7:23:67:2f:d7:ca:0c:e3:ee:ca:43:70:c6:f7:a8:12:
         6d:8f:14:4c:2f:12:d1:c6:a4:41:a6:d2:da:02:ba:6e:09:d6:
         42:1a:9d:56:d0:60:5f:af:fd:c5:44:3e:e1:70:ea:55:c9:5e:
         53:95:53:bc:92:4e:be:6b:6d:5a:37:94:69:b8:cd:d3:d8:53:
         37:54:95:45:49:89:8c:14:cb:94:87:ad:14:0b:31:55:89:ce:
         51:7a:c0:31:90:95:73:f6:ab:0d:72:05:f0:3a:06:f0:3e:33:
         1b:f9:a0:4e:08:42:b3:4f:b7:66:1a:47:40:a9:9b:f9:af:b1:
         ba:4a:dd:c7:44:1f:15:d8:ca:28:b4:bb:07:49:56:54:7d:6f:
         ba:2d:57:53:60:bb:c4:84:2b:83:6f:09:27:44:9b:67:18:25:
         29:7a:ad:9e:ab:cf:25:e2:00:58:5a:dd:34:b9:89:58:35:cb:
         ac:c8:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:48 2026 by rpki-client