Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
File:                     sxbAG3t1QxTi8Y9zen19iayrfmg.mft (raw, json)
Hash identifier:          4g41TsAlDaZjYclzXB7DAglLUCyNfmnaSyYrUTjfaPc=
Subject key identifier:   F2:2C:8F:E7:4F:F2:F6:7C:DB:4A:88:FD:EB:1F:8D:D7:A5:BF:C2:79
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Certificate issuer:       /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
Manifest number:          86
Signing time:             Thu 23 Jul 2026 09:39:59 +0000
Manifest this update:     Thu 23 Jul 2026 09:39:58 +0000
Manifest next update:     Thu 30 Jul 2026 09:39:58 +0000
Files and hashes:         1: sxbAG3t1QxTi8Y9zen19iayrfmg.crl (hash: slDBXJ5PvOIrDNmUCBwWl51kGpmuO15NSknhqnQEa/o=)
                          2: A8F5E5EE21BE11F183C1AD111C3D8C67.roa (hash: Ieln71UjZ6UVyBBDQ/jNR5EcXnNAYyh6zzX3XZ/UHBM=)
                          3: 8BB48B56CCFB11F0B624EC45C4F9AE02.roa (hash: idkvQzFYbdsBSjCaqZAU9RiEXtrOEJOl+VsJAR0ESu4=)
                          4: 2601F1CEEB7111F0839E97F34E6F56BC.roa (hash: E07ldg3v3DN0Yw10RFkEuAEAUbz8ZBv51AcBSf3INAU=)
                          5: F6921460F58D11F0BCCF7FE5756F56BC.roa (hash: pMD/GHJGLubTp0PpPOjyflk922Gz+1O37/zrmRW8WCQ=)
                          6: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (hash: QrH4+yF/QV8+PWn2diJ35OJkx405jDujszCVYOanSfQ=)
                          7: F715DFB6F58D11F0BCCF7FE5756F56BC.roa (hash: PeJla8eoBWwUJgQxEstU1E2su1skE1min+boSaLfihI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
                          rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
        Validity
            Not Before: Jul 23 09:39:58 2026 GMT
            Not After : Jul 30 09:39:58 2026 GMT
        Subject: CN=6a61e16f-0ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:65:e0:9c:0d:2b:6c:75:04:3d:f3:a2:91:
                    b0:78:93:94:75:34:b7:60:69:90:64:2d:58:5a:55:
                    9a:71:7a:cd:b5:7e:fd:50:77:35:70:01:96:27:d9:
                    0c:d2:de:72:b3:e0:21:c4:50:8d:6b:af:12:d6:81:
                    64:33:9c:8a:66:eb:a2:75:b4:0f:f6:48:0b:2e:50:
                    3b:07:b1:76:65:ef:4e:b3:c3:3e:f8:19:14:f2:50:
                    11:e1:b7:55:61:0c:e8:22:a9:35:f9:54:bd:5b:25:
                    6a:cd:63:6a:20:f9:68:c4:3e:30:3c:fb:92:17:e1:
                    ed:1e:63:4b:ff:65:a7:b3:39:9d:f7:34:78:94:f9:
                    40:e2:53:6f:51:90:59:f9:90:60:fa:31:1a:bb:b1:
                    91:04:c8:b1:3f:de:f9:27:48:f8:35:8a:c0:cb:f7:
                    11:41:ae:2b:3a:28:b1:0e:28:73:7f:8c:b4:b0:5a:
                    41:a0:9e:a5:ac:e4:b5:9c:dc:e2:e2:13:45:46:19:
                    70:e6:ee:36:1c:24:56:df:65:d9:2c:ec:56:c9:82:
                    0f:d4:7a:89:fe:17:2e:7a:a6:13:a7:2e:5c:91:03:
                    17:92:a6:5d:7f:78:38:5f:f9:b8:77:24:08:76:4a:
                    3e:3f:ca:15:87:e1:ce:eb:4d:bf:ec:64:eb:be:0e:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2C:8F:E7:4F:F2:F6:7C:DB:4A:88:FD:EB:1F:8D:D7:A5:BF:C2:79
            X509v3 Authority Key Identifier:
                keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5b:de:db:8b:76:59:b9:30:e8:ef:17:32:30:91:80:82:51:
         9d:e5:7d:89:49:51:c3:cc:02:b2:85:88:1a:74:9a:0d:18:6e:
         41:96:e1:2d:83:ba:69:6e:2a:5a:62:c4:90:6f:9b:3b:f2:c0:
         da:a9:7c:4c:67:6e:98:0c:fa:c9:3a:6f:95:ee:e6:11:b4:4a:
         23:37:84:f0:0e:9b:ea:ae:41:b0:50:48:4a:d4:38:66:69:99:
         1c:e2:03:e9:5b:9d:d8:98:08:40:9d:7e:66:37:3f:b1:3d:31:
         b6:37:47:cb:92:7b:8a:6d:c1:1b:a8:5c:ab:ac:0e:f9:9e:58:
         b3:bb:06:e0:00:a8:48:4c:21:88:a0:ad:c0:7f:0f:98:57:f4:
         d8:54:1d:0c:cd:e5:c4:08:a7:59:f5:47:a2:2a:9c:75:de:b7:
         9a:3e:79:e3:ff:bc:89:f1:23:6c:72:a9:77:60:4b:7d:d8:ff:
         3c:3c:c8:7a:48:1b:8a:b8:49:1a:e7:96:98:f1:5c:c2:c1:b2:
         3b:1f:aa:94:71:fa:ae:41:42:93:5c:df:ba:01:1c:f7:b3:fa:
         2d:ff:a9:b1:0d:c4:6d:09:3c:f7:26:39:e1:f7:b2:42:db:46:
         2e:0c:79:cc:7c:a8:d9:8c:75:8d:74:6c:0c:70:e3:2b:1f:f9:
         08:50:da:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:01:29 2026 by rpki-client