Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
File:                     pOjrw6c5dZmQTabHaUiVu8npE-4.mft (raw, json)
Hash identifier:          R5O9OG3LufXp7l0dz5r6/lwCotBdxVLfWFseZmcepZU=
Subject key identifier:   44:95:47:3A:6F:BD:00:67:F5:A2:F3:6E:C8:3B:DF:20:C4:08:B1:11
Authority key identifier: A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
Certificate issuer:       /CN=A91DABAA/serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
Manifest number:          77
Signing time:             Thu 23 Jul 2026 09:43:40 +0000
Manifest this update:     Thu 23 Jul 2026 09:43:40 +0000
Manifest next update:     Thu 30 Jul 2026 09:43:40 +0000
Files and hashes:         1: pOjrw6c5dZmQTabHaUiVu8npE-4.crl (hash: 8fu8m+h6mrD3+YM/Ugy8w4MdWLUgw2pA4YUHwovFn44=)
                          2: EF7ACD02D19D11F0B7EBD972C4F9AE02.roa (hash: n7mxRLHf+OoO7/6cNs++NJsQTzj4AvvR2XuxwLHJ8V4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
                          rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DABAA, serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
        Validity
            Not Before: Jul 23 09:43:40 2026 GMT
            Not After : Jul 30 09:43:40 2026 GMT
        Subject: CN=6a61e24c-2e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:60:65:05:a0:28:0d:ec:bc:6f:c9:8f:0d:c7:
                    11:4b:1d:9d:d0:07:57:0d:01:15:db:cb:24:25:75:
                    05:48:d7:bd:d6:eb:e1:30:4f:b7:ba:8f:b2:4b:a8:
                    d5:06:ee:1b:39:ff:ab:97:1e:35:89:91:9b:d7:53:
                    fd:ff:d5:52:27:56:10:f0:43:9a:2a:39:be:7d:b8:
                    a9:fb:ee:65:69:8f:14:d9:f7:ea:1f:51:32:7b:bb:
                    70:40:0b:91:f5:ec:57:ed:7a:a7:d1:3a:55:6b:2f:
                    84:11:52:75:4b:51:15:dc:72:32:b4:df:ef:7f:c8:
                    b0:b8:02:95:90:19:40:e1:42:b1:c7:a0:7e:d4:b0:
                    45:76:3b:d4:ca:88:aa:e2:5e:a6:ab:9d:00:d9:76:
                    48:87:d0:6c:18:74:86:81:3f:07:b7:d3:f1:a0:88:
                    8b:43:d1:50:17:0b:c3:0c:48:79:12:15:4e:f8:f5:
                    04:67:43:38:73:76:31:ec:b6:4e:40:ac:f7:4d:d6:
                    3c:06:20:6c:dc:38:65:0f:4d:3f:02:4c:bf:db:2f:
                    9d:86:a1:cc:9e:d9:a0:69:4e:51:f4:66:0d:6f:b4:
                    b8:2b:18:c5:60:b9:73:12:b2:1c:16:71:ec:b4:d4:
                    33:41:af:89:13:0d:c1:b3:d3:17:d8:e4:d3:1c:c4:
                    71:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:95:47:3A:6F:BD:00:67:F5:A2:F3:6E:C8:3B:DF:20:C4:08:B1:11
            X509v3 Authority Key Identifier:
                keyid:A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:30:7b:21:17:7c:14:37:10:4e:8b:9f:18:36:04:88:99:22:
         9b:74:52:b1:19:72:30:13:03:5e:9c:3a:e6:ca:92:e4:8e:9c:
         31:78:fd:e1:fc:90:c6:3a:39:1c:b0:61:2e:4f:90:b9:cb:4f:
         01:d1:dd:67:f7:2e:2a:d0:91:5a:11:f8:60:84:71:18:d2:81:
         d3:02:a7:97:bf:d7:e6:f5:c8:b6:97:31:79:a1:f2:c5:30:ce:
         dd:c6:38:2f:0f:73:81:f1:90:1f:7b:07:b5:5f:17:cc:93:60:
         4c:70:35:e6:04:9c:0b:10:7e:eb:70:ba:b0:c5:ea:98:10:c7:
         93:35:7f:a8:97:5f:d7:e8:62:4f:96:5b:b6:a6:7c:26:98:fb:
         80:61:2c:48:d4:a0:23:52:ae:7a:cc:32:b5:53:6e:38:0d:be:
         67:c3:a7:ac:dd:01:e7:ca:4a:bd:ab:dd:6f:73:ea:a3:e4:78:
         fe:3f:25:06:93:49:c0:59:b1:9c:56:fe:95:14:42:f4:12:d1:
         e2:31:d4:0f:1b:78:26:da:8b:b5:f8:b7:8c:44:e8:e0:0e:4d:
         6b:02:50:b0:87:b7:3b:e2:ca:31:a5:38:53:30:9d:fa:ab:b7:
         d7:ae:5e:c6:00:b5:19:97:dd:2d:b2:41:c0:23:91:33:b3:25:
         f8:5b:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:09 2026 by rpki-client