Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File:                     31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier:          1kkj76vj4jJbYAch9s1VmopBoNYPnLsin9Ojl2Mu1Z8=
Subject key identifier:   31:91:B4:CD:46:6D:94:A1:8D:24:40:AA:5A:FF:D9:83:67:D6:6A:48
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer:       /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number:          0218
Signing time:             Thu 23 Jul 2026 04:22:10 +0000
Manifest this update:     Thu 23 Jul 2026 04:22:10 +0000
Manifest next update:     Thu 30 Jul 2026 04:22:10 +0000
Files and hashes:         1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: Ripor4VSBUaPVi0GPPDtQ/Ato+VG7L46gyf96kr8kks=)
                          2: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: 6r9HMe5N7O3EO/hoVyMLGjAo1zMWyRsh6cOTtVL/RMY=)
                          3: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: 9GGpKqMuP60pZTecgihCPtCUwjJQr1u5VITWHt4kvQc=)
                          4: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: ZY1siwjbqnQaZCIx96bLhb0d0HA6YypX15NteDeXL0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
        Validity
            Not Before: Jul 23 04:22:10 2026 GMT
            Not After : Jul 30 04:22:10 2026 GMT
        Subject: CN=6a6196f2-5404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:0e:82:ac:97:19:45:c2:af:d6:13:34:95:
                    93:f4:e7:70:00:04:7c:34:57:cd:e8:b7:17:25:e7:
                    b4:fb:1a:bd:6c:22:aa:8f:1c:56:8f:03:13:63:f6:
                    3a:46:93:f3:33:dc:4e:9e:31:90:ae:43:7c:d2:02:
                    d0:82:93:b1:63:95:c7:bc:33:3f:4b:12:04:e1:dc:
                    a4:ff:31:21:16:68:14:9b:c2:7c:cc:cb:3b:ab:a6:
                    42:d1:42:0d:e6:ac:81:3d:b1:07:22:90:4b:f7:f2:
                    d3:ca:92:5d:74:93:3b:d3:3d:45:1f:a3:af:ab:08:
                    00:0f:c0:87:b9:a7:1a:cf:1a:6c:3c:7b:8a:a4:44:
                    b0:a0:33:ee:4e:ee:74:02:77:5e:5c:a9:69:70:73:
                    46:a6:5e:03:c5:7f:dc:b2:d7:8c:f9:00:f2:64:b1:
                    e2:8a:0f:81:c5:3a:84:f4:97:c8:f1:eb:4f:1c:54:
                    5c:a7:01:cb:05:b2:8a:7e:4f:a8:05:5e:20:47:18:
                    e8:29:af:8d:4b:a6:b6:8f:b5:75:12:04:00:b1:07:
                    51:15:3b:b3:3c:e1:3b:96:83:62:d0:ee:4f:4e:f1:
                    92:70:03:9b:c7:97:50:12:56:a0:66:87:c1:a7:03:
                    12:b9:1e:e7:98:98:db:ce:b8:73:29:f1:08:76:96:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:91:B4:CD:46:6D:94:A1:8D:24:40:AA:5A:FF:D9:83:67:D6:6A:48
            X509v3 Authority Key Identifier:
                keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:70:2c:f7:7a:fe:56:f4:a2:ce:ab:c8:84:67:0c:83:3a:c8:
         73:91:f9:49:2e:09:d2:e9:dd:47:80:ea:76:85:8a:e6:78:15:
         32:d7:0b:47:26:c2:1c:49:2b:ab:d3:81:30:a9:ea:cc:5d:a8:
         62:c7:5a:57:63:66:67:90:a3:81:ff:f2:11:51:9e:80:80:1a:
         48:65:8b:09:38:c7:de:bd:89:8b:c6:9d:0a:06:0b:52:ae:76:
         af:77:f3:cc:c6:90:58:4e:c9:08:66:aa:24:77:17:b0:03:c4:
         c1:94:82:4f:36:bd:db:27:cf:12:15:1c:2e:bf:d6:b8:02:c7:
         ea:85:bd:06:0c:50:1d:b4:b5:7a:0a:d4:82:a2:85:78:20:c3:
         cb:34:df:1c:e6:63:e7:4b:f2:c2:ae:0a:fd:6c:54:51:4c:4d:
         b2:e3:08:9a:c1:56:5b:cf:e2:b4:1c:b7:12:fd:3d:c5:0a:14:
         33:21:9e:ad:62:5f:38:c4:98:3f:83:f5:d1:06:d6:4e:85:d9:
         64:eb:6c:db:bd:1c:d1:62:d0:96:9c:a7:b7:97:d1:da:28:9c:
         d5:c1:7d:86:63:32:67:c7:6a:ee:22:d7:4b:b9:30:fe:e0:00:
         f2:b3:d0:65:ad:aa:c4:29:ac:a4:e5:3d:8b:93:ee:46:ad:6a:
         63:23:76:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:54 2026 by rpki-client