Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
File:                     0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json)
Hash identifier:          Bp7CS2/AtEMgZ3LKMU49pPgk1K/smpsd+fXQvAivncY=
Subject key identifier:   DC:03:69:C9:37:F9:9D:A0:9E:05:B9:1B:44:E7:2F:EF:A2:59:2B:34
Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51
Certificate issuer:       /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
Manifest number:          0100
Signing time:             Thu 23 Jul 2026 07:56:00 +0000
Manifest this update:     Thu 23 Jul 2026 07:55:59 +0000
Manifest next update:     Thu 30 Jul 2026 07:55:59 +0000
Files and hashes:         1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: Qbs+F67s/aE2TRBMzRfIgkzCsloTQW9lJ0lEctfXSCc=)
                          2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: G7QqbuS3t/iTX6LomgThshVcOQtAVpBN0imWLjN0zDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl
                          rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
        Validity
            Not Before: Jul 23 07:55:59 2026 GMT
            Not After : Jul 30 07:55:59 2026 GMT
        Subject: CN=6a61c90f-0f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d6:f4:c6:e7:af:ef:7b:a2:39:8b:07:32:2b:
                    d1:83:07:fe:30:99:2a:77:42:ce:57:87:d5:e7:85:
                    f0:40:72:1c:d6:4f:c0:c5:12:e2:cb:47:eb:9b:f4:
                    1b:eb:7d:c0:01:47:0f:81:bf:04:0b:ed:dc:c1:8e:
                    c8:5f:55:70:46:43:2c:a9:ac:d5:cb:61:49:8a:45:
                    1a:6c:5b:85:65:bf:4d:02:d5:db:6d:e3:83:cf:09:
                    df:21:bf:5c:41:bd:f7:00:b4:2a:42:6f:be:5d:28:
                    f2:68:58:ca:ef:d2:82:ad:ca:34:8d:ba:cb:dd:b5:
                    eb:aa:a8:80:50:07:a2:b3:cd:82:2d:fc:6e:ae:3f:
                    33:72:43:84:e8:d6:6d:8d:5e:3d:99:df:7c:46:4d:
                    f4:20:b4:17:a3:74:bb:82:5b:a5:b4:42:ff:9a:30:
                    e8:3e:17:30:09:85:47:1c:7b:d6:85:c3:e5:64:56:
                    a5:dd:8b:96:3d:78:2c:be:60:9a:fb:97:58:17:16:
                    c8:56:6f:c1:3c:07:fc:76:d5:ce:4f:c6:48:19:97:
                    cd:d1:93:3b:c8:cb:be:fa:1f:cc:5e:ab:bd:df:24:
                    6d:99:40:0c:ac:de:36:94:85:ce:c9:bd:90:ef:5f:
                    21:eb:e3:c5:58:a0:04:66:6c:03:82:d2:8d:fe:83:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:03:69:C9:37:F9:9D:A0:9E:05:B9:1B:44:E7:2F:EF:A2:59:2B:34
            X509v3 Authority Key Identifier:
                keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:59:1f:34:1c:93:cc:61:90:6a:00:b1:07:85:d7:3e:da:ce:
         ac:0a:eb:cd:b2:cc:d7:d8:a7:ac:d4:3f:99:8f:a1:23:d1:fb:
         4b:86:29:22:ee:ea:f2:0a:d1:65:f1:a6:95:0b:1a:45:2f:d7:
         f2:fa:13:95:be:17:5d:48:09:56:5a:d3:03:e3:49:61:38:5c:
         c0:ee:71:89:9a:d5:6f:17:b8:5e:75:86:ce:3e:68:b9:22:2d:
         45:1a:8c:95:b4:29:37:80:ff:a8:bc:21:18:06:ff:6c:9c:d0:
         0d:a6:3b:52:3f:63:7a:aa:f8:2b:c1:bf:f2:21:ae:79:5d:59:
         1f:d1:90:5b:d7:36:00:12:60:6c:70:e4:93:22:4f:c3:06:e4:
         c2:d0:bc:43:5d:26:e3:e4:a6:79:2d:d3:bf:b2:43:50:0d:b0:
         c2:b9:f8:c1:9d:0e:ba:0e:0a:e2:8c:11:f9:86:79:f9:18:65:
         7f:93:b0:3e:96:92:e1:93:a9:b1:5f:7e:b6:88:b3:40:d3:03:
         85:08:4c:f5:19:b9:2e:81:ab:ae:c8:c4:6f:89:b7:4e:4f:ad:
         c6:b7:f8:46:c7:22:d3:27:79:cc:ea:8c:2c:b2:d3:39:79:58:
         0a:49:c9:9c:eb:f0:9f:43:ec:5a:0f:de:e0:b3:63:95:c4:77:
         b9:91:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:43 2026 by rpki-client