Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
File:                     74BCtCGhAXh1OrlTjaNDuJh4nbs.mft (raw, json)
Hash identifier:          qnd9Fixm0B3qMyhndayR9ojoqiZmVtshI3csPYNBhgU=
Subject key identifier:   B1:53:D7:81:38:36:49:61:E1:14:15:45:D1:45:45:2B:76:B8:B4:78
Authority key identifier: EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB
Certificate issuer:       /CN=A91D8157/serialNumber=EF8042B421A10178753AB9538DA343B898789DBB
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
Manifest number:          50
Signing time:             Thu 23 Jul 2026 10:18:47 +0000
Manifest this update:     Thu 23 Jul 2026 10:18:46 +0000
Manifest next update:     Thu 30 Jul 2026 10:18:46 +0000
Files and hashes:         1: 74BCtCGhAXh1OrlTjaNDuJh4nbs.crl (hash: mnhEb1lmEqsLoKda3FYmmLJdHQuWzS2lRZWVNGQHbJ0=)
                          2: 46C3253C114511F187FE79C5213D8C67.roa (hash: d5jss6YgiDgyamXt9/dxf7fL1qrUfpWSSJLZZ7FjVz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl
                          rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8157, serialNumber=EF8042B421A10178753AB9538DA343B898789DBB
        Validity
            Not Before: Jul 23 10:18:46 2026 GMT
            Not After : Jul 30 10:18:46 2026 GMT
        Subject: CN=6a61ea87-7953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:0c:35:b2:c8:33:3d:92:77:1f:1b:e9:44:
                    78:ff:ae:90:04:f1:81:8f:84:2a:28:bb:cc:35:77:
                    72:b1:c7:e6:51:82:1c:bd:4c:e9:fb:70:7f:a9:a3:
                    92:a5:ed:47:eb:ff:13:16:21:27:16:94:06:2a:e0:
                    1a:8b:7c:17:64:9c:63:bd:3d:8a:20:34:b4:33:13:
                    97:50:d5:f3:6b:2b:11:7a:ca:f5:78:bc:17:0f:e0:
                    73:90:73:a5:46:7d:be:94:37:11:b9:51:cb:77:f3:
                    fb:83:86:6d:07:35:b5:1a:ca:a0:4b:56:ab:4c:bd:
                    b3:3f:2c:5d:f1:83:df:43:c6:8d:73:6c:6b:6e:bc:
                    8e:4d:60:be:35:96:5e:6b:0e:6c:a9:12:ad:2a:ef:
                    3a:90:3e:83:07:1c:cc:2b:ca:dc:0d:1b:ba:29:4a:
                    22:1d:eb:42:bd:72:1e:8f:09:26:1d:2a:7a:54:52:
                    d0:92:65:41:a5:1c:49:5d:90:e2:05:1b:f5:21:66:
                    8f:4e:f6:11:d9:e5:80:db:8c:ee:9a:0d:12:d3:50:
                    49:74:25:64:53:62:26:67:ab:06:44:8b:af:a6:c5:
                    09:4d:d4:ee:58:89:97:7f:e0:54:0e:f4:20:23:51:
                    38:77:73:76:a0:08:08:50:01:5a:90:17:b6:ea:85:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:53:D7:81:38:36:49:61:E1:14:15:45:D1:45:45:2B:76:B8:B4:78
            X509v3 Authority Key Identifier:
                keyid:EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:e4:32:8f:d9:c0:9b:ed:9c:e3:3a:94:4d:37:b5:cf:2e:
         53:a0:ab:ac:e2:cb:b3:59:09:65:fb:26:a2:12:f5:74:02:51:
         01:8d:85:4d:96:34:81:8f:c8:2c:f8:57:59:d3:dc:c1:19:e8:
         1f:37:27:a1:3e:07:2d:35:a9:f4:55:0f:ce:79:cc:10:0c:fb:
         0e:ef:96:12:0e:25:c3:96:fb:25:ed:80:44:f2:d1:14:93:68:
         b6:bd:6d:5c:7a:7f:17:26:e2:c9:66:cd:92:55:9b:5d:83:6f:
         3d:3c:03:aa:4f:fc:7d:be:63:75:52:a4:68:40:b0:b1:90:f4:
         30:8d:70:66:8e:35:18:cb:8b:27:e7:f4:4f:9e:c3:26:92:0a:
         85:39:20:8e:d3:52:96:9e:fb:0e:3a:b5:b8:71:42:65:44:37:
         69:5e:06:17:e6:d3:aa:91:78:fa:27:8d:e9:5e:46:6a:03:b1:
         8b:4e:54:81:76:20:ad:02:e6:5c:5e:ab:d0:0b:a2:30:d6:0c:
         d7:22:3d:71:2a:ae:76:26:88:7d:0e:76:b1:8a:b7:63:5e:4f:
         b1:2c:d0:8e:f5:9e:2d:e2:fa:39:be:9b:ae:9f:db:72:2d:96:
         18:32:a0:ba:87:72:7f:6d:c7:de:d6:4f:41:a7:96:b6:b7:cb:
         2a:40:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:00 2026 by rpki-client