Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
File:                     A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json)
Hash identifier:          vPirwgFwrz8Ep1K+IQDs/6RFaSmhlaoWAQjQzr4QySk=
Subject key identifier:   C7:FB:0A:35:D2:77:F2:4B:44:17:FE:E3:3E:AF:78:54:0B:C5:50:C2
Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
Certificate issuer:       /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Certificate serial:       1253
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
Manifest number:          0FFD
Signing time:             Wed 22 Jul 2026 18:09:41 +0000
Manifest this update:     Wed 22 Jul 2026 18:09:40 +0000
Manifest next update:     Wed 29 Jul 2026 18:09:40 +0000
Files and hashes:         1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: l1ah6jJ0ktMFivGxmpBarLGE+TWbE10b761EDq9p1Mw=)
                          2: 55D1A87064CC11F18E187B1B6847A888.roa (hash: WSNq80m7RseKwiVBTN0MUdvWJK6F5MMYD9rHdnxgZJE=)
                          3: 21ED263081BC11F194DC9B0164A30FBC.roa (hash: sTSMY2SrzuubL9hlTUJjC97u9IPP17LQiw+iVmX7BL0=)
                          4: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: kccLJAAJUftI3LLIsTKo7BiUv/BhOLEvY3/TqmL54Ss=)
                          5: BD60B6F059A211F183AF6F31B8833773.roa (hash: cNwv63/9s+kMtXt+Cr4yAjM1fI/LlZbgaRJaSG3g5nA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4691 (0x1253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
        Validity
            Not Before: Jul 22 18:09:40 2026 GMT
            Not After : Jul 29 18:09:40 2026 GMT
        Subject: CN=6a610764-9f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:78:ab:66:21:ed:d6:04:9f:19:f1:a9:58:
                    fb:10:00:8f:40:56:8b:78:23:9a:48:df:8e:84:3b:
                    60:7f:c7:b7:7f:9d:9f:2a:aa:65:aa:f2:0e:b8:b5:
                    55:63:92:fa:a0:47:ce:07:a1:22:e3:19:9a:d5:98:
                    83:1f:94:44:7a:2d:fa:72:6b:78:1f:b3:af:65:4a:
                    06:f0:bb:3c:9a:02:4d:5a:85:34:aa:e6:8f:af:fe:
                    18:fc:ec:be:3d:a4:30:24:68:aa:81:d5:05:00:b5:
                    19:b8:fa:4f:df:4d:d0:aa:12:40:33:1b:e6:b9:68:
                    7c:e8:d9:b4:e6:1c:d7:c7:b4:2d:6c:b5:d3:cd:85:
                    be:68:95:8c:0d:c8:f2:74:69:78:43:f6:34:51:e8:
                    45:9b:45:81:b1:a7:cf:08:a3:6e:5e:db:e1:42:eb:
                    68:c6:db:00:d9:01:9c:5a:b1:7f:14:bc:59:97:b7:
                    8a:2e:eb:09:98:93:46:e2:ef:a3:74:19:f4:79:bf:
                    27:29:24:f0:28:9e:6a:d6:39:a8:43:39:46:26:a6:
                    ac:a0:9f:40:38:0c:dc:0a:e5:51:0a:95:4a:c5:fb:
                    fe:76:44:0b:04:1a:03:6f:00:b6:f7:b3:e6:27:f6:
                    9c:e3:37:49:89:ef:b6:d8:9f:1c:81:91:f4:78:05:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FB:0A:35:D2:77:F2:4B:44:17:FE:E3:3E:AF:78:54:0B:C5:50:C2
            X509v3 Authority Key Identifier:
                keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:68:c9:86:3f:5f:2c:19:cb:73:fc:48:7c:e0:8f:eb:f6:eb:
         5b:61:3b:d3:b6:64:48:dc:f8:1b:35:ae:07:8a:43:71:8c:c0:
         8a:59:16:a9:14:c2:19:b6:ef:67:00:07:9d:b4:3b:b5:cb:f6:
         d9:e1:30:fa:c2:36:65:d1:3f:4f:85:d7:dd:67:00:68:0d:73:
         a4:a4:e7:bc:ac:46:86:4c:18:28:22:15:d1:b0:74:fc:c7:07:
         3a:9c:81:54:5f:0e:d8:bf:48:49:cb:0e:97:80:49:89:4d:94:
         03:08:2a:21:d5:91:70:d0:22:a6:e0:8d:87:d2:63:c7:c0:54:
         c7:f6:34:f6:20:5f:80:c7:46:10:7f:7f:df:e9:78:2c:9d:57:
         50:a2:8a:e4:87:4d:46:61:aa:7f:81:66:c6:99:63:58:37:0d:
         08:91:23:2e:48:7f:d2:8a:64:cc:86:6d:fa:6c:51:c1:c9:48:
         bd:4b:3d:4c:18:42:74:c2:24:7c:68:f0:39:51:be:ba:57:bf:
         d2:99:6f:40:25:52:41:bf:98:3d:0d:50:9a:2f:56:b9:6a:df:
         c7:75:18:27:ee:08:75:0e:30:2d:d2:a2:86:0e:33:0c:cc:77:
         13:a4:79:8c:aa:ef:8a:af:bf:a0:3a:0b:32:14:d9:97:01:55:
         59:b3:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:47 2026 by rpki-client