Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
File:                     aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json)
Hash identifier:          2HIhzbu2BQ0+DBwwtNjOALR8TldU73qSFXdmrLpKjwg=
Subject key identifier:   42:9A:89:E0:C1:8C:78:45:6C:FC:56:C3:77:B4:00:48:F6:B7:7C:84
Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51
Certificate issuer:       /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951
Certificate serial:       06D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
Manifest number:          06CB
Signing time:             Wed 22 Jul 2026 22:58:51 +0000
Manifest this update:     Wed 22 Jul 2026 22:58:50 +0000
Manifest next update:     Wed 29 Jul 2026 22:58:50 +0000
Files and hashes:         1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: g1PJ1Tg3Yi4XkMnr0UrzA7c8T6GeX9+9mOhIpWLVLyc=)
                          2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: F1fXz2/fZOT0A+vWKAw94iaOGisACVQx2A9nYViYNaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl
                          rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC146, serialNumber=690C729F18390564D670B18F7774754E5D279951
        Validity
            Not Before: Jul 22 22:58:50 2026 GMT
            Not After : Jul 29 22:58:50 2026 GMT
        Subject: CN=6a614b2b-ae98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:e6:8b:0b:a7:81:ad:8e:9a:24:2a:f3:0b:
                    d0:83:25:bc:ee:08:3f:eb:db:01:8b:b2:80:d4:d9:
                    b7:90:fc:bc:c7:e6:a3:f4:b2:04:2d:c6:b6:5d:6b:
                    7d:fe:c9:57:70:4a:fa:cb:ea:e8:0c:44:be:86:ea:
                    21:b7:9e:a4:38:be:a6:2e:74:66:ed:73:c9:ec:bb:
                    55:44:a3:8d:80:00:8e:93:29:d0:e0:81:27:4d:1e:
                    02:74:89:c3:19:cd:47:d6:37:39:a5:4f:88:17:0b:
                    68:eb:43:f6:bb:4c:0c:aa:81:06:c6:08:87:0c:b1:
                    9b:46:59:e2:60:d4:9f:cc:c6:e0:8a:a5:13:6d:e6:
                    fe:6f:f9:24:f0:86:a9:ea:a3:28:d4:7e:99:6d:1b:
                    77:03:71:c2:97:bd:0a:0b:9c:25:51:d0:f8:71:b4:
                    5f:21:38:af:2e:d2:e9:e5:f1:4e:56:e3:df:b3:98:
                    e9:98:a5:70:6c:eb:0f:22:3d:72:90:33:c4:31:de:
                    9c:52:b8:cd:b2:50:f1:b1:a1:31:e9:72:30:d8:37:
                    33:a8:f4:16:06:61:81:9f:a3:68:5c:13:0f:19:35:
                    22:77:b6:78:59:b9:d9:61:e7:3b:e5:22:48:69:8a:
                    81:38:00:cc:7b:93:e5:36:29:40:dd:49:74:90:fc:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9A:89:E0:C1:8C:78:45:6C:FC:56:C3:77:B4:00:48:F6:B7:7C:84
            X509v3 Authority Key Identifier:
                keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:20:72:f4:a6:4e:7f:f0:a9:97:41:3b:ae:6a:fd:8e:1c:c2:
         1d:36:03:d6:ae:2a:83:04:ce:06:94:a0:9e:09:69:2e:cc:dc:
         04:f2:b9:ae:94:15:84:83:80:08:46:a7:c0:c2:f2:fc:fc:01:
         f8:65:01:61:ed:d4:9c:05:72:59:b4:60:2f:48:c7:48:4d:66:
         8a:40:f0:b0:5c:f0:f9:3b:bd:d1:b5:5b:45:7c:f8:9d:a8:b3:
         67:b5:dc:5d:b1:30:58:4a:2e:d6:ce:ca:fe:ae:47:da:4b:d0:
         45:07:7e:c8:70:49:a2:b0:be:ec:fe:93:47:6e:8a:8e:e9:37:
         0a:6f:54:74:15:eb:b7:ab:55:b8:3a:6d:34:c2:0d:d0:66:cf:
         c7:81:76:81:60:1d:1f:cb:b3:a9:57:0b:7e:7b:a0:b5:81:b3:
         b7:82:69:02:3a:ee:a5:2e:75:c7:49:a4:07:ac:3c:db:c7:62:
         d1:77:9a:1f:35:c3:86:b7:cf:f0:dc:06:64:cc:b2:ec:a7:07:
         26:36:d5:da:f3:4c:06:9e:41:20:47:c6:ce:0d:5e:b3:16:41:
         4b:61:2b:9f:d7:1c:90:05:9b:a1:91:54:d5:57:c3:3d:59:66:
         c4:14:85:b2:44:fe:77:ce:46:62:f2:14:1f:02:8b:2c:0d:61:
         b0:4b:b0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:29 2026 by rpki-client