Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
File:                     8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json)
Hash identifier:          DJM3Cy2zJxoxajtmZn7ZWX1cA1Y6ai+He+m7JaUAn/o=
Subject key identifier:   47:1E:84:35:DD:7D:0B:AC:48:9C:00:AC:86:5B:3D:73:60:93:20:25
Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8
Certificate issuer:       /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
Manifest number:          96
Signing time:             Thu 23 Jul 2026 09:15:24 +0000
Manifest this update:     Thu 23 Jul 2026 09:15:24 +0000
Manifest next update:     Thu 30 Jul 2026 09:15:24 +0000
Files and hashes:         1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: 9tzp6ud3xllv7+1OASLEVp9h++Mo3g6SJK0t92fzw1M=)
                          2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: NZ2PR9JzupHRbIAvvTjexUgRAGHGGYmk/Ol3V3TWapU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl
                          rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
        Validity
            Not Before: Jul 23 09:15:24 2026 GMT
            Not After : Jul 30 09:15:24 2026 GMT
        Subject: CN=6a61dbac-a794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:bd:51:a3:1d:6e:53:30:12:30:22:df:c7:
                    7c:ed:f0:55:65:6d:78:a5:30:20:cc:56:51:7c:b2:
                    ce:1a:96:1b:c0:c8:cd:b1:f4:18:a9:6f:f3:bc:77:
                    78:8a:f4:99:cd:c3:08:1e:dd:e6:71:b0:30:b0:80:
                    fd:64:20:76:12:99:73:21:37:0f:b5:15:c8:cc:11:
                    eb:2c:a9:ac:87:0b:6c:05:91:e3:d0:62:c4:58:c4:
                    c5:ea:57:a4:16:3e:48:b7:d6:65:e8:e3:e4:c2:f9:
                    12:52:e2:b0:6f:b1:09:f0:36:ee:db:38:a6:0e:8a:
                    2e:d0:39:c2:82:96:7a:7b:b6:d0:cb:0b:1f:8e:87:
                    eb:41:c9:b8:ad:49:91:9f:90:a9:14:f8:60:e8:9a:
                    0f:06:5e:93:0e:4c:3b:ec:fe:32:b0:8f:6e:0d:fb:
                    e8:56:0e:6b:13:b6:25:1f:a6:84:88:27:cf:ea:ba:
                    80:22:8f:64:3c:ef:62:45:c2:d0:a1:0a:ab:8f:ee:
                    67:21:6f:fc:fa:2a:78:93:7c:90:bf:31:79:64:95:
                    7b:1f:f2:89:b1:60:82:0f:85:fd:c1:6d:be:a1:3d:
                    f5:0e:12:0c:b9:41:25:41:26:96:79:dd:09:87:be:
                    02:a4:73:15:a0:69:37:cc:46:44:d3:fd:f5:dc:5f:
                    97:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1E:84:35:DD:7D:0B:AC:48:9C:00:AC:86:5B:3D:73:60:93:20:25
            X509v3 Authority Key Identifier:
                keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0c:8d:c1:ec:3a:ee:28:71:57:73:13:72:93:64:04:dd:d9:
         33:36:b5:df:f2:a8:72:cd:43:7b:bc:a1:c3:6d:54:88:e0:6a:
         31:94:27:27:57:f5:aa:0e:e1:ff:d0:b4:31:3c:b3:35:25:09:
         a0:07:54:7f:65:d7:93:9c:c2:c5:19:47:86:bb:a2:19:7d:a0:
         4c:90:6c:75:44:bd:3d:69:1b:fa:7a:7c:b3:45:ad:ad:82:48:
         00:f2:46:bd:49:aa:2e:8c:34:de:e1:fc:51:16:da:90:0c:90:
         ba:a1:ec:6a:44:bf:25:72:bb:24:f5:4a:70:39:13:65:80:92:
         5b:16:e1:7f:cb:12:d6:67:c2:c7:28:f9:cc:3a:0b:f3:c8:1c:
         04:c3:33:f1:d1:b6:7d:a0:0b:da:b5:fd:f4:c5:58:73:f8:11:
         6b:ee:db:1a:9a:b3:6b:69:07:d5:e5:5b:ba:b7:68:36:fa:0b:
         15:7e:16:a5:a5:bc:74:f4:35:9a:1d:01:97:35:b1:f9:df:44:
         6c:00:c3:85:62:18:57:ab:95:4a:5f:3f:de:ca:ff:0f:a5:7f:
         1b:b5:6d:6c:f1:4c:b6:61:f1:90:46:b6:e3:82:e9:fa:cc:ed:
         b3:fd:24:b7:9a:b2:c1:3f:4e:10:02:cf:f0:79:41:7b:3d:2c:
         ae:21:90:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:19 2026 by rpki-client