Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
File:                     mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json)
Hash identifier:          YXhQQzweyVbO3xHDTOvBk1AMsY5ey4R5C0RX2UjriCY=
Subject key identifier:   B6:ED:80:7F:E6:2D:32:07:BA:E5:7E:43:3E:46:EA:ED:30:22:31:65
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Certificate issuer:       /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial:       0575
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
Manifest number:          0561
Signing time:             Thu 23 Jul 2026 00:12:50 +0000
Manifest this update:     Thu 23 Jul 2026 00:12:50 +0000
Manifest next update:     Thu 30 Jul 2026 00:12:50 +0000
Files and hashes:         1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: JcN7SUjFgU345GOJlWaDXtCWGfNCIFB/gKw8oJIkcms=)
                          2: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: VJgHTQOVu03GlBSuXPQzuVHdwrsQzGniIaHaw00H0Kk=)
                          3: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: VIlx0l5j7GQ7Beoam2Qgv31QWbO2E+gcDdeVz2IPgAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
                          rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
        Validity
            Not Before: Jul 23 00:12:50 2026 GMT
            Not After : Jul 30 00:12:50 2026 GMT
        Subject: CN=6a615c82-1341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3e:c4:01:2b:e4:5c:07:b5:91:65:02:62:1e:
                    7c:95:26:95:f8:dd:40:b7:93:e3:f8:45:fc:1b:49:
                    0a:8c:9c:4d:e1:63:5d:81:82:45:ad:a9:7e:ef:5d:
                    42:17:63:90:4c:ec:3a:13:94:1b:be:47:7f:af:ac:
                    59:0c:92:d9:26:ce:b8:cc:13:9b:1b:05:ed:bd:f8:
                    c6:0d:47:f7:a0:63:c5:a3:1b:2c:2e:c9:d1:1f:90:
                    e4:a1:32:d4:3b:99:31:a9:07:ff:92:4d:b5:4c:44:
                    b2:39:18:22:4a:f5:da:10:65:ff:04:c5:c5:b4:9e:
                    29:ac:9c:dd:17:64:b1:fb:33:1e:e0:3a:31:71:25:
                    0c:8c:7d:9b:a4:8d:33:b0:44:7e:a6:10:cc:c7:1c:
                    f9:f9:19:ff:a1:57:12:74:78:5e:7d:e6:c7:02:ca:
                    b0:3a:e8:eb:8a:2d:57:f4:d3:c1:5c:29:77:fa:5d:
                    50:1c:ea:dc:99:72:5e:a0:56:a8:6c:d2:41:41:2f:
                    37:dd:3f:99:91:5d:c3:35:a3:a4:e3:40:be:f3:d3:
                    11:81:37:8c:2e:e3:20:ba:b8:aa:36:85:c7:1a:d4:
                    cd:ed:68:6c:13:46:5e:57:29:a2:ff:2d:77:13:47:
                    25:a9:eb:c1:e0:87:84:d5:86:57:1c:0c:89:3f:bd:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:80:7F:E6:2D:32:07:BA:E5:7E:43:3E:46:EA:ED:30:22:31:65
            X509v3 Authority Key Identifier:
                keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:75:dd:0b:be:1e:a8:a4:31:68:14:72:0d:a9:f7:4b:03:37:
         10:89:55:90:70:93:9f:b5:d2:6c:20:47:fb:0c:2e:c8:4a:4b:
         7b:45:68:58:d2:48:18:c4:df:85:4b:93:a0:87:da:d5:a4:fe:
         d4:76:55:56:34:31:2a:a7:dc:58:79:67:90:91:9d:e1:3d:d1:
         e9:9f:8d:ce:c9:fe:e2:5a:ca:44:3d:bd:c2:af:d1:d4:16:9e:
         fb:2e:fc:28:e6:f4:8a:d2:19:f0:90:f9:00:1b:de:ae:e0:b7:
         ae:4b:ee:00:3f:ca:c1:f2:71:69:8e:a3:39:9e:de:38:ef:f2:
         45:c4:60:d2:e3:df:c4:72:12:73:52:cf:b7:b2:b0:54:82:89:
         13:9f:1e:35:57:f6:25:a4:f9:c6:f7:f7:45:96:51:e3:f3:ff:
         36:89:e4:1a:e7:2f:2e:df:d1:07:91:96:f6:e3:ed:c7:40:84:
         ed:ec:ad:86:5e:af:44:03:1b:40:ed:a1:f8:58:cd:07:34:95:
         21:15:41:16:e0:c4:a8:d6:5f:44:86:1a:5c:7e:94:40:f7:78:
         7e:9c:76:14:d6:7a:a5:c6:91:10:07:d0:94:47:dc:5c:d0:3d:
         29:19:81:48:04:88:41:cc:36:68:52:be:e0:2e:63:a4:ea:68:
         ab:b6:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:25 2026 by rpki-client