Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
File:                     AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json)
Hash identifier:          U+JT0kGdGs/nwuht1jXUrKOB78wMUb8K/yr6C0dgRxY=
Subject key identifier:   1A:5D:CC:F7:BE:86:F6:34:D4:C7:00:AB:C8:13:07:E8:1A:FC:42:19
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       233E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
Manifest number:          22E7
Signing time:             Wed 22 Jul 2026 15:55:25 +0000
Manifest this update:     Wed 22 Jul 2026 15:55:24 +0000
Manifest next update:     Wed 29 Jul 2026 15:55:24 +0000
Files and hashes:         1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: 5h6UUJjm3H+ilY5rvVCABB55imD8w1/kGEjxs+1yrq4=)
                          2: E049BA50335911F193981E57CA833773.roa (hash: ccrqPCbKxkHUXLuFhP49NrNOV6bbgxDvMbrEYPU0/70=)
                          3: B4A61D2A501511F19B7490E3C0833773.roa (hash: ULhHp7+sYXuEA4oAMAlvVXNC4B0eNrv0HmhmrXot1Bo=)
                          4: 114016CE65DB11F0A01C3E60C4F9AE02.roa (hash: qG9igdUpXB7wk8yx/k2tOuq/gYueDRGW4t5eH6cDkms=)
                          5: D128F6A2366111F19FA677FACA833773.roa (hash: ZY7Vk9qpQDHcmIYTowz44r/Aadjt59khWHwSNvAaAYk=)
                          6: 05302944D38811F096791A31C4F9AE02.roa (hash: 0TpazCbbP+eq5jbcmOC+QEukwM8XRQa407MbLaS5Vso=)
                          7: 0EB9C488501611F1BCA6FB50C1833773.roa (hash: hjLor0naDuB1MHE0ASMpLEp5N2HxCBYq1jwBVQbTUI4=)
                          8: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (hash: fekDwvX/Pg2YZ9Fe3QZAnU92TpFpbncEnNKE83KMH+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9022 (0x233e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Jul 22 15:55:24 2026 GMT
            Not After : Jul 29 15:55:24 2026 GMT
        Subject: CN=6a60e7ed-8e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:32:af:8e:01:2e:da:26:a6:59:61:c6:87:
                    c4:11:2c:0c:b8:f1:9d:4f:43:a7:76:a5:18:c1:f8:
                    51:6c:66:2d:7a:9e:12:81:26:c5:21:f0:5b:e3:d9:
                    bb:f2:5d:d3:51:98:e5:5a:fe:96:99:ae:24:68:ac:
                    bc:c7:c1:3a:c7:5c:67:49:7c:3b:28:2c:70:7b:0e:
                    5c:21:7d:da:a0:ed:4a:03:91:f3:7a:82:9b:04:20:
                    5c:a7:4c:a9:73:69:98:df:0a:8c:2b:1c:80:da:4b:
                    5d:e5:cc:59:83:7c:9f:22:d2:cf:20:2a:d1:8b:21:
                    00:8c:81:15:90:2c:8d:44:81:1e:a7:eb:01:1a:31:
                    aa:f1:10:7d:e7:3a:ac:86:88:dd:73:fd:1e:cb:13:
                    b8:1f:93:90:cc:fa:af:70:9c:cc:bc:d6:ca:5b:06:
                    71:5e:c3:07:d4:6f:77:73:fb:6c:70:39:88:22:fd:
                    69:ce:c9:eb:60:d1:48:5d:d3:09:ef:9a:87:81:a0:
                    bd:3c:24:9c:82:5a:70:7b:54:34:84:d7:2d:49:62:
                    5b:66:83:b4:26:e1:22:90:59:68:72:62:90:74:24:
                    a7:75:8a:f4:38:59:21:b8:19:73:bc:7a:1a:3d:4b:
                    41:40:14:40:b2:2d:d8:11:75:c5:42:b6:f6:91:10:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5D:CC:F7:BE:86:F6:34:D4:C7:00:AB:C8:13:07:E8:1A:FC:42:19
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:b0:89:e1:ec:80:2e:a5:f0:ec:a0:28:08:f5:5b:be:5b:
         05:5c:dc:22:e0:fc:f5:96:22:8a:6b:cd:e4:64:a8:bb:97:0b:
         98:39:3e:8d:62:46:d7:a0:c2:85:1c:0a:c7:95:93:93:41:b8:
         56:14:f3:7a:0f:50:e3:68:8a:c2:95:ec:e7:18:08:f1:2f:74:
         fa:4b:39:45:86:6e:b7:05:c6:88:e8:11:e9:81:0b:55:07:51:
         1f:a8:5d:c3:34:d4:ae:8a:a2:56:b7:d0:a4:90:98:3c:ba:32:
         04:7a:8f:82:cc:ed:c3:e5:51:c6:55:b7:06:e8:0f:cb:89:2e:
         40:f5:6f:d9:c2:e3:60:4b:d1:3f:cd:eb:11:05:d6:ff:28:75:
         38:35:45:e7:e1:5a:2e:f8:e2:60:91:0e:35:64:69:d4:be:b0:
         7a:65:25:7a:37:41:43:ab:88:76:40:a6:83:df:0f:24:1d:fe:
         8d:ce:54:a5:84:70:e8:41:e2:ed:e8:ee:df:33:6a:8c:46:90:
         4b:b5:4c:05:3a:2d:3b:3f:39:8f:92:20:a1:1d:c9:ce:c4:cc:
         e5:7b:06:50:b3:20:97:97:b7:e5:03:97:70:d1:1c:7a:41:7b:
         a6:6c:a9:29:fa:b6:63:d1:c8:b4:4c:31:e6:fa:55:8f:5d:03:
         04:61:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:17 2026 by rpki-client