Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
File:                     0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json)
Hash identifier:          tZzy/nEIG3mY6w3w2zD2ZnC9+W4mx0aDPALA0tI81Is=
Subject key identifier:   CA:B5:19:0C:4D:86:65:BE:AD:02:80:8F:CB:1E:FA:94:94:1E:71:E7
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Certificate issuer:       /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial:       02A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
Manifest number:          029D
Signing time:             Thu 23 Jul 2026 02:50:02 +0000
Manifest this update:     Thu 23 Jul 2026 02:50:02 +0000
Manifest next update:     Thu 30 Jul 2026 02:50:02 +0000
Files and hashes:         1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: YrVO3cP9kVzkGf+QMz//Wj5NOK+AqTIFH2grT2hwcvQ=)
                          2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: kbZVkD6jRKFqNBUgIZMNtq7Y+KDfzPzcA1djWWgpFT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
                          rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
        Validity
            Not Before: Jul 23 02:50:02 2026 GMT
            Not After : Jul 30 02:50:02 2026 GMT
        Subject: CN=6a61815a-8833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:d7:4f:15:a8:f0:52:b6:4b:6c:21:55:45:
                    59:d3:16:3e:22:47:51:75:be:8a:2f:e4:ce:35:5b:
                    83:37:9b:dc:64:21:7a:d3:fd:8f:fc:04:09:48:9a:
                    15:7f:ce:9d:a2:85:23:46:d1:1e:66:32:f7:43:8b:
                    c3:b8:3b:65:31:d1:80:a8:c3:98:c8:90:97:5c:6d:
                    d0:4d:25:c1:48:b4:44:a5:d7:56:2e:ae:b2:31:b1:
                    36:f5:d8:1b:01:02:99:3b:33:30:67:56:b1:8c:d4:
                    20:fb:74:10:72:22:4c:3a:8e:6e:eb:1d:f0:0a:ed:
                    92:c8:9e:ea:96:26:7f:94:f0:df:90:1d:fa:2a:e8:
                    57:03:66:26:ba:77:d1:6b:67:18:c1:9a:fb:e9:f1:
                    4e:d7:33:be:d8:2f:aa:76:df:03:81:b6:4d:93:cb:
                    ab:0c:8c:20:96:23:8b:6f:0e:96:17:45:1d:0f:da:
                    2e:51:8d:f3:7d:ee:3c:44:95:f7:53:43:fe:ec:f6:
                    e7:a4:ae:65:01:12:4f:2f:e8:5d:f8:e7:1a:66:79:
                    47:dd:af:07:b8:ec:ec:04:6f:28:4f:1e:25:83:b9:
                    93:25:44:a5:f4:33:b0:0f:61:3f:57:c4:79:51:d4:
                    d2:26:d5:2c:56:61:47:51:7e:43:ea:83:2a:fa:b0:
                    7d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B5:19:0C:4D:86:65:BE:AD:02:80:8F:CB:1E:FA:94:94:1E:71:E7
            X509v3 Authority Key Identifier:
                keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:cf:e8:f8:9a:e1:db:e2:4e:68:d8:89:b9:29:f5:87:10:
         fd:ed:da:5f:de:01:df:72:49:4d:c6:26:b1:05:66:c5:29:29:
         a6:58:13:d1:d5:cc:7a:d4:9b:77:fa:b3:24:26:c9:66:2b:db:
         93:c0:d4:dc:23:c5:77:13:3d:92:35:1a:8d:44:fd:5f:a7:55:
         53:81:a6:ab:21:e7:78:33:b4:aa:0b:ba:78:63:51:c5:06:a4:
         f3:c6:36:79:41:0d:b7:eb:17:9f:dd:31:68:43:47:71:d0:6e:
         dd:ba:5b:8d:01:db:a6:aa:3f:8e:9e:7d:a3:31:13:2c:8e:9f:
         60:d2:58:c9:a9:fb:0a:29:c9:5c:cd:b6:9e:38:b3:d7:e3:da:
         55:99:a0:49:d8:96:fb:15:3e:d8:de:b0:fc:84:f8:2e:71:36:
         f1:4f:2c:3e:cb:4e:85:18:55:5e:19:dc:69:13:6d:ec:47:76:
         3d:04:28:75:f6:97:82:0b:3b:5c:93:33:a3:a5:ff:fb:fb:f4:
         cd:d2:61:af:4a:ee:c7:35:9a:03:e5:d2:5b:26:71:64:be:9d:
         97:78:12:d5:fc:bc:f0:8a:e8:2d:91:ae:3b:41:01:08:1c:be:
         9f:31:be:03:a4:76:8f:70:c6:7a:39:0a:1c:dc:c8:9f:51:3c:
         06:a8:1d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:45 2026 by rpki-client