Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
File:                     iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json)
Hash identifier:          DXczkdvu2nuwZewYVV7HNDReaYG4tmzDTKMcSSShnLc=
Subject key identifier:   21:15:5F:65:EB:26:53:16:B3:25:FB:53:72:B3:AB:CE:22:29:93:77
Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Certificate issuer:       /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
Manifest number:          091E
Signing time:             Wed 22 Jul 2026 21:24:58 +0000
Manifest this update:     Wed 22 Jul 2026 21:24:58 +0000
Manifest next update:     Wed 29 Jul 2026 21:24:58 +0000
Files and hashes:         1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: oRJicqYc01cw7RJruCsiEXbg0HqZv4UxkOWWnMaFqRw=)
                          2: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: B8m2ePIUCgEMFkUqEdw865bj5KYfUZe6gW5FvbGFIPQ=)
                          3: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: w4kX8b17fTC2s9BhESajxJlKj2QyQzvAORehV2EbPSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
        Validity
            Not Before: Jul 22 21:24:58 2026 GMT
            Not After : Jul 29 21:24:58 2026 GMT
        Subject: CN=6a61352a-5f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:83:f4:19:dc:63:5c:2b:a9:65:5e:63:b2:
                    bf:8e:36:0d:67:96:e6:47:64:36:20:8e:9a:20:fd:
                    a6:ab:89:39:a6:8e:9f:68:06:f5:ea:29:f8:60:f1:
                    9d:a0:17:19:c8:20:fd:34:92:20:59:46:67:f3:5c:
                    a5:0a:19:a8:b0:0f:ba:1e:8d:1c:47:93:db:b3:54:
                    04:65:09:06:ba:6c:8f:2b:8e:f8:c9:aa:44:fb:82:
                    63:e0:25:9e:63:64:7b:9e:dd:dc:25:80:7e:87:fc:
                    de:4a:56:17:22:a9:d8:44:be:56:a9:75:76:3c:12:
                    19:38:a2:2f:cf:17:1f:bd:ec:4c:51:6c:e9:11:8a:
                    7c:34:ab:e7:e1:aa:67:c5:3c:d6:17:c8:69:ac:79:
                    f1:56:2b:c0:5b:c7:60:da:51:ff:7f:5c:58:32:d0:
                    09:0b:14:66:f5:5b:1c:b7:99:39:d9:e5:cf:69:f1:
                    43:5b:01:36:a9:14:cb:01:b6:74:c4:55:d4:d8:34:
                    fe:da:30:53:51:11:fd:8b:34:88:99:7a:72:8f:4d:
                    cb:7a:06:1e:97:bd:0b:c1:2a:48:76:08:15:a7:e5:
                    26:14:d7:e4:0b:5c:bc:95:78:5b:6f:54:e9:8f:5b:
                    b6:2c:cd:40:45:7a:09:c8:4c:fb:90:d6:b6:a1:3b:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:15:5F:65:EB:26:53:16:B3:25:FB:53:72:B3:AB:CE:22:29:93:77
            X509v3 Authority Key Identifier:
                keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:30:8e:bc:3b:1b:8e:ee:ea:ab:42:f2:d6:3b:9d:46:9c:
         25:62:59:a1:1f:60:75:92:da:2b:c1:59:85:97:19:22:d7:56:
         ec:98:3d:42:4f:d8:6d:99:91:49:ef:83:ac:60:7d:36:e2:00:
         22:cf:e2:b2:79:5e:f8:9f:07:ca:23:b5:2e:76:90:da:2b:34:
         0d:b7:52:42:4e:82:c6:dd:ef:b9:be:34:b9:bb:08:f5:98:37:
         3b:e0:aa:c8:7e:ee:9e:61:c2:fe:ee:a0:99:bc:51:0c:a8:e0:
         5e:eb:fc:c1:70:e1:d9:67:b5:c3:d0:91:c9:32:4a:59:6e:d6:
         fc:76:a8:96:86:2f:66:83:c6:53:32:92:3c:1b:a4:57:15:a7:
         6a:cd:44:9a:22:4d:fd:7f:dc:9b:c0:4b:42:82:a5:20:87:e1:
         ac:85:e7:48:3f:ae:6d:cd:a8:62:13:4b:77:6a:e9:42:df:fe:
         9f:20:2a:e8:70:60:5e:6b:25:c3:fb:dc:11:9c:fb:19:6c:6f:
         6b:c5:ce:63:82:92:23:27:cc:74:75:c2:55:a6:98:d2:3a:43:
         db:58:9f:82:13:76:14:49:5b:c2:56:4e:4f:7d:31:b9:87:0c:
         f9:dc:12:25:f5:0b:a6:b1:7c:11:59:f3:d3:57:92:62:03:71:
         8a:ea:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:53 2026 by rpki-client