Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
File:                     IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json)
Hash identifier:          8P/kxn9jofxhvEh+xs/LMM3aUMld24Gs1YJj/mqhbkg=
Subject key identifier:   71:15:F8:B2:A8:37:40:1C:DE:08:7E:0A:8C:FE:6C:08:0D:C0:53:6F
Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8
Certificate issuer:       /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
Certificate serial:       05D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
Manifest number:          05C6
Signing time:             Wed 22 Jul 2026 23:51:44 +0000
Manifest this update:     Wed 22 Jul 2026 23:51:44 +0000
Manifest next update:     Wed 29 Jul 2026 23:51:44 +0000
Files and hashes:         1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: CzWspNjS8eAp/7iGePBszLZ82RPqp+Q/VQX6Bj1Z3E8=)
                          2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: 0zuqIS8hbfV5A711MSih3uxG9p+AWNnca2aMV8NXs2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl
                          rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
        Validity
            Not Before: Jul 22 23:51:44 2026 GMT
            Not After : Jul 29 23:51:44 2026 GMT
        Subject: CN=6a615790-0665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:e4:1d:51:55:e8:da:49:cb:06:a7:62:a5:
                    2b:bf:d7:28:c8:31:b4:2b:09:18:7c:98:23:08:1e:
                    6a:cd:b1:0f:c7:5e:5a:0d:c9:3d:e0:4e:af:d2:c0:
                    82:41:e6:cb:a0:85:66:92:4f:44:93:d1:29:1a:46:
                    45:6f:1c:42:21:56:44:4b:a8:32:96:c1:b4:5e:6f:
                    30:d6:e1:6d:b2:0c:fb:4d:a4:06:5c:c8:96:e8:20:
                    73:a8:66:06:de:95:ac:c1:a3:a0:d1:74:fe:4e:9c:
                    af:f6:c2:b4:36:d0:3a:e7:10:dd:2d:b1:79:de:1c:
                    a9:17:91:ab:01:c5:3c:39:c9:31:87:bb:e7:db:c4:
                    12:62:c2:95:98:31:42:e6:36:44:08:ea:ec:a2:6a:
                    ad:1a:e7:0a:a1:e2:ee:26:82:9c:20:d0:17:4c:41:
                    9b:c5:f0:11:73:3a:46:f8:d5:9b:42:07:af:f1:a7:
                    b2:e7:3e:97:59:db:42:3e:01:c9:1a:10:36:95:42:
                    23:39:b8:df:f1:81:0c:77:08:a9:56:ff:90:47:9d:
                    7e:21:c1:da:19:03:92:2f:82:ef:12:01:d7:ca:5a:
                    1a:67:61:a9:21:5f:c1:4c:db:6d:2f:6f:3a:ab:9b:
                    f1:7d:1a:b2:d2:bf:b2:0f:f8:ae:04:82:59:97:63:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:15:F8:B2:A8:37:40:1C:DE:08:7E:0A:8C:FE:6C:08:0D:C0:53:6F
            X509v3 Authority Key Identifier:
                keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c8:f7:f1:18:00:ad:10:66:0c:39:51:aa:c0:5f:08:0c:23:
         58:6e:e9:ea:3a:7f:8a:83:3d:a1:a0:a9:b0:77:2d:cb:c0:4b:
         86:06:94:ca:ee:df:3b:df:d1:25:94:b5:ab:62:e9:6d:8b:55:
         28:f3:9a:a7:70:ed:62:73:e9:cb:2e:cb:a4:5e:47:a6:b7:a3:
         68:bf:d9:31:5f:30:82:6d:98:a1:7f:56:c0:7f:b9:d9:fd:da:
         ba:75:e4:7e:c7:d5:2e:f3:0f:ec:9e:39:91:69:c8:f8:af:54:
         64:b1:cf:57:b5:d2:ae:4a:76:66:66:f8:3d:b2:00:54:5b:6a:
         12:c8:ab:62:5b:5b:28:87:08:c6:a0:15:a8:24:fa:46:ce:b4:
         1c:6b:04:69:b1:bc:0e:8f:45:2a:bb:01:ea:35:2f:8c:a5:78:
         b2:8f:cf:9b:4c:88:d3:de:fd:bc:37:28:c3:9c:67:0a:36:86:
         0f:fe:89:ee:eb:7d:88:8e:fa:19:6f:b4:bd:1d:f4:76:ce:0d:
         ac:dc:50:4a:b3:f4:ea:b0:ee:ed:21:fc:fc:8e:d8:19:27:ae:
         2c:04:93:eb:f3:83:38:16:38:83:49:1f:73:71:c2:70:d4:87:
         d3:8b:5d:bf:5d:fc:18:6e:29:70:ab:91:d9:52:d8:76:78:63:
         c7:41:b8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:54 2026 by rpki-client