Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
File:                     MQjy14qQC-lzk3j4GKWpYcpRLEs.mft (raw, json)
Hash identifier:          zvpfufiMVlqdZCZJdiDAedtBkek0Ho1WhMZhWET3Hu0=
Subject key identifier:   70:49:CF:9F:AD:70:E2:EB:12:F4:3F:BE:BE:2A:B9:50:EB:26:70:74
Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
Certificate issuer:       /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
Manifest number:          5C
Signing time:             Thu 23 Jul 2026 10:06:46 +0000
Manifest this update:     Thu 23 Jul 2026 10:06:46 +0000
Manifest next update:     Thu 30 Jul 2026 10:06:46 +0000
Files and hashes:         1: MQjy14qQC-lzk3j4GKWpYcpRLEs.crl (hash: TOHW8loeTB96ylyu+ivJk+0FyE2HTi72G4x1PsjI2i8=)
                          2: B3695572FD9E11F087EE26735F6F56BC.roa (hash: rCPj89ZhrAuLJpKSrj2V9nyJ0NP4IwMB9Wn3wdAsanU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
                          rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
        Validity
            Not Before: Jul 23 10:06:46 2026 GMT
            Not After : Jul 30 10:06:46 2026 GMT
        Subject: CN=6a61e7b6-7c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:91:cd:22:ea:4c:5c:ad:bf:61:c2:02:76:
                    f9:b5:1a:4d:6e:07:67:80:78:f7:5d:24:b3:35:80:
                    0d:29:94:7c:26:31:39:75:8a:b4:db:00:18:81:06:
                    19:3c:26:c6:0a:fc:f6:a0:5e:8c:22:f5:9f:8f:b8:
                    0b:97:21:f7:5a:a0:a6:c6:10:4d:77:50:e0:13:25:
                    be:ab:79:2d:ee:18:4f:cd:9a:10:48:d6:e1:50:e4:
                    bd:6e:d6:ac:d5:cb:76:7f:6e:56:42:de:d2:64:10:
                    ad:eb:a6:f0:83:d8:6d:f1:ff:6e:87:67:55:98:d7:
                    8f:6a:f5:b4:fe:c4:e4:ff:fd:6e:b5:f4:b2:28:41:
                    2a:96:ad:1c:fc:3e:2b:08:e3:cd:b3:bd:e8:39:de:
                    e2:db:ba:f3:24:29:b0:dc:e8:a4:f9:cd:1a:57:b4:
                    8b:71:b8:d5:0c:aa:a4:f2:50:a0:90:29:4a:db:ed:
                    75:09:c6:1f:32:66:08:df:08:54:1b:63:54:14:63:
                    2a:97:88:3e:fb:55:d1:fc:c6:7a:20:d5:66:8a:28:
                    17:f5:84:69:03:d6:ac:35:71:a2:fd:56:09:23:cb:
                    8d:42:17:51:40:66:15:e2:1a:19:0f:3b:a0:e5:53:
                    8c:25:01:6a:65:f2:6d:d1:b6:49:23:1f:f3:21:20:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:49:CF:9F:AD:70:E2:EB:12:F4:3F:BE:BE:2A:B9:50:EB:26:70:74
            X509v3 Authority Key Identifier:
                keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5a:1a:ec:24:cd:05:15:a0:fd:ef:57:40:64:ec:f7:7f:c6:
         3e:38:5d:44:ec:2d:02:ba:5a:d3:78:96:7c:08:80:89:3a:86:
         03:bb:0a:94:88:32:29:f4:ea:ab:d7:29:6c:63:f0:a4:d2:a1:
         2a:f3:88:1d:e4:85:0b:ce:59:5b:0a:a9:47:4d:e4:00:85:6f:
         bd:4f:89:c5:f9:54:50:ec:e1:1f:d2:9c:dd:13:c4:1b:7c:3f:
         9d:aa:7c:8b:9c:ea:9e:56:ed:98:33:0c:57:e9:f3:08:7f:ad:
         03:22:f0:1c:f8:42:1e:51:4a:ef:bb:24:64:a2:7b:fd:ac:1e:
         41:d4:bd:39:58:06:27:e0:cc:df:ab:dc:ad:6a:97:2c:62:44:
         4c:9d:e5:f9:62:a0:02:47:ff:b9:e5:d8:11:6b:aa:26:10:d8:
         c3:1d:f1:1c:0e:de:9b:72:5b:9a:59:4e:e1:69:ee:84:c2:7b:
         ec:8d:da:73:fe:d9:aa:45:b2:98:e0:2b:d4:84:35:6a:10:07:
         be:74:8a:c9:bf:6b:2a:ff:77:ec:39:b2:65:40:86:70:4a:86:
         d1:0f:63:54:47:35:b3:20:02:a1:db:e5:25:9d:a8:15:fd:c6:
         9a:d3:80:ac:60:b5:7f:77:31:04:74:04:c6:85:d1:ab:f8:c4:
         0f:0e:ee:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:41 2026 by rpki-client