Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
File:                     0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft (raw, json)
Hash identifier:          trm45PmHj2LKyhIrFRkicKbKya7rN6EP2Ja6ckK0A2o=
Subject key identifier:   15:85:AA:A4:00:0F:51:53:00:70:47:E3:60:7D:98:B4:2F:DD:C7:7C
Authority key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4
Certificate issuer:       /CN=A91D6C43/serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
Manifest number:          53
Signing time:             Thu 23 Jul 2026 10:17:40 +0000
Manifest this update:     Thu 23 Jul 2026 10:17:40 +0000
Manifest next update:     Thu 30 Jul 2026 10:17:40 +0000
Files and hashes:         1: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl (hash: ozdBqsvMxhrU7EPAhl9FD2dqNk2o4TPKfG9B4JAESTI=)
                          2: DF277BF6108811F191FBC4DC323D8C67.roa (hash: kvVPZoMA2NCQIEL7Qt23JRtXW0EGzPWXpSZ3FwVtIdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
        Validity
            Not Before: Jul 23 10:17:40 2026 GMT
            Not After : Jul 30 10:17:40 2026 GMT
        Subject: CN=6a61ea44-1160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:43:0a:48:bb:67:5a:33:ed:07:84:8a:6a:
                    de:58:63:be:b3:2e:52:f1:b3:f2:6a:ba:ad:ac:98:
                    94:af:23:ca:3b:fb:5e:f2:71:9e:3d:c2:a3:8b:de:
                    97:fc:06:39:a9:7e:97:ad:6b:16:00:b0:fe:ae:6e:
                    22:71:f2:6b:b4:52:eb:45:66:57:00:e6:90:0b:9d:
                    4e:f6:64:ce:82:36:54:cf:1e:22:fc:3b:a3:c4:64:
                    2f:28:1c:e2:6b:53:06:66:c5:01:fc:fe:58:ee:51:
                    6e:59:1e:cf:3c:d0:00:16:d5:54:0d:c5:e9:3d:f8:
                    b5:2f:0c:6a:cb:a5:d4:8f:f5:3a:bd:4e:3d:d6:fa:
                    c9:e4:1b:63:2e:b3:5d:23:58:29:85:14:c4:00:a1:
                    9f:fb:ad:39:dd:a0:58:0b:a1:82:36:fa:a3:6b:54:
                    f8:39:97:de:bf:53:42:b8:03:bc:8b:66:dc:61:71:
                    e2:67:98:8f:85:99:dd:c9:b2:d9:33:ca:e2:bf:65:
                    e5:cf:06:3b:e8:c4:db:64:80:dc:d8:66:72:f4:4e:
                    29:24:59:69:2a:54:4c:37:91:bd:9f:b8:7f:3f:d3:
                    80:8a:4d:fe:b0:8e:8b:ac:19:05:7f:62:3b:99:c6:
                    08:02:cc:22:ef:31:35:45:7f:68:76:ee:15:f4:dd:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:85:AA:A4:00:0F:51:53:00:70:47:E3:60:7D:98:B4:2F:DD:C7:7C
            X509v3 Authority Key Identifier:
                keyid:D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1c:36:ba:2e:6c:e0:68:32:63:1b:7b:49:bd:cc:6b:0b:16:
         f4:8f:ee:cb:99:bb:10:fe:29:e2:b8:8a:cf:bf:52:9a:81:92:
         fd:e2:60:92:dc:82:3c:0c:cf:a1:65:12:61:70:f7:74:53:c3:
         91:9c:56:80:5f:74:2e:97:e0:83:63:2e:07:cc:cb:8f:69:a6:
         b2:ff:70:ea:fd:0e:48:8c:1d:b4:4f:84:8f:b4:7c:fc:a8:81:
         b5:2e:55:f4:6b:48:3d:df:d4:af:8c:72:4b:77:99:b7:86:24:
         6e:ef:3d:3e:0f:bf:5a:90:1b:e9:a0:1b:13:6f:e0:9b:66:6b:
         d1:fd:42:da:cb:fd:e7:21:8a:5f:c3:71:bf:ca:54:f4:e2:fe:
         08:c2:a1:c3:48:96:44:9f:b2:27:92:1c:31:fd:47:39:e3:2f:
         6e:7c:af:21:07:67:51:81:af:e4:11:d4:c7:ae:57:f7:e9:5c:
         e1:04:ee:80:9f:c1:3d:3d:a0:b8:66:b2:a9:c9:e8:83:0e:8b:
         8e:ab:bc:91:68:dc:c4:64:55:b4:03:40:00:28:37:72:ee:67:
         97:e6:f4:49:90:3b:03:6e:fe:ed:11:41:06:11:df:4f:9f:59:
         9a:df:53:c1:54:eb:c7:b5:af:ba:30:15:b2:5f:b4:63:9b:09:
         d8:8b:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:46:43 2026 by rpki-client