Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
File:                     rQUyxqhtSiMdAK5R-tgo9qK2qos.mft (raw, json)
Hash identifier:          +TnP81JDQfAuR42In5jsvZVrkz52gSQDKY5y5nv4YHg=
Subject key identifier:   DE:41:88:64:81:6E:8E:31:B7:01:84:BD:38:66:78:DF:6C:CF:D6:94
Authority key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B
Certificate issuer:       /CN=A91DE334/serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
Manifest number:          72
Signing time:             Thu 23 Jul 2026 09:53:56 +0000
Manifest this update:     Thu 23 Jul 2026 09:53:56 +0000
Manifest next update:     Thu 30 Jul 2026 09:53:56 +0000
Files and hashes:         1: rQUyxqhtSiMdAK5R-tgo9qK2qos.crl (hash: MToXDYhTW2MgYx3tQecdxrwJcgXjowCyDz7pSI3hxkw=)
                          2: 38D21898F49411F08DD0DDBA746F56BC.roa (hash: 2TmQLP3BLhtpTJZcn16jZ9UXy19wv2rakTfjxerLpXo=)
                          3: 81346F96F49411F0BFEF52BD746F56BC.roa (hash: KtQdT3wKXi5XLWS0IbUBySou/W4dYxSu83urtoPZVvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
        Validity
            Not Before: Jul 23 09:53:56 2026 GMT
            Not After : Jul 30 09:53:56 2026 GMT
        Subject: CN=6a61e4b4-d67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ba:b7:0c:ae:3c:44:a8:97:28:ab:0f:42:5f:
                    23:aa:73:65:f1:35:61:19:be:4a:6f:59:92:4d:08:
                    43:b6:d3:5b:57:62:40:af:45:32:bd:11:7c:04:3d:
                    d8:e9:e7:ba:14:60:c5:a9:73:62:6a:80:06:66:fc:
                    d8:f9:06:25:d8:4f:dd:6a:b0:dd:f0:c2:69:64:d8:
                    ff:0a:a6:a4:26:68:8f:43:51:f3:a8:49:82:91:be:
                    cd:f5:de:12:f7:cc:6a:f6:56:2e:7e:0e:68:d4:74:
                    d8:02:94:5a:7a:b2:e6:ca:6e:9a:27:27:91:3c:39:
                    01:27:80:90:d6:ff:85:ea:8e:1a:0a:35:58:15:e5:
                    37:88:e1:24:03:94:75:c7:6f:c6:5c:d6:15:de:c4:
                    11:99:3c:70:b6:e2:7e:31:f0:ec:16:73:84:db:b9:
                    09:f3:35:28:cb:03:b6:94:a2:f2:1a:66:78:b3:ce:
                    3e:c0:e1:0b:27:0f:8e:fa:6c:83:2b:34:e0:d6:fd:
                    5f:d2:a1:7b:a9:b1:4a:75:2d:e7:63:63:96:11:2f:
                    65:85:2b:b9:df:79:52:1e:07:55:98:45:f5:e6:ca:
                    0d:87:ed:d6:52:e8:af:04:38:c3:03:02:2a:3d:f7:
                    73:39:73:6a:0d:19:1f:72:cf:34:d7:6e:5c:fd:b0:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:41:88:64:81:6E:8E:31:B7:01:84:BD:38:66:78:DF:6C:CF:D6:94
            X509v3 Authority Key Identifier:
                keyid:AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4b:46:b0:c9:f7:c7:77:5a:cd:bc:e0:d4:a6:cd:1c:22:2f:
         c1:ab:16:2e:f2:8e:2c:27:da:c4:88:fa:fb:e4:59:d3:cf:d1:
         4e:85:ed:02:18:91:5f:c7:0c:f0:ba:dd:15:f2:d8:64:e6:f6:
         73:ab:85:87:f4:16:d7:11:37:2d:20:b8:d4:ea:c0:9f:6d:2d:
         2f:55:a8:a6:0b:ff:26:38:00:1f:ef:28:2f:68:30:ab:f2:d0:
         9c:1c:e3:aa:8c:2b:51:cf:9c:65:06:df:a9:1b:98:5b:be:fe:
         7c:11:f0:3b:07:4e:bb:d2:03:bb:1b:0a:ea:9e:5a:54:e8:e0:
         a4:83:0c:db:15:d6:61:bf:58:0f:08:2d:29:9e:f9:10:10:50:
         de:b3:0a:ef:dd:4d:19:3b:f2:da:dc:91:55:54:81:32:8d:76:
         4f:f7:ae:de:46:ad:89:f7:6a:6f:8d:e8:79:7c:f6:95:8a:4c:
         8e:40:0a:cb:01:05:29:d1:8b:bd:46:f6:93:f3:f4:95:4a:98:
         6a:4e:1f:fc:b2:d3:2e:e5:55:f4:8e:ee:09:3c:cf:81:2e:e7:
         65:83:32:34:52:98:01:66:81:8f:f7:d3:cb:79:8d:4c:31:38:
         3d:48:b7:e4:79:e2:5b:48:17:ea:0f:28:98:9d:cb:0a:f8:8c:
         0f:cc:b0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:45:21 2026 by rpki-client