Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File:                     mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier:          H/dJiCBZLTOMCKXlWn3bXtW98wV64MVTUBhJ4A3/Sxg=
Subject key identifier:   FA:4E:8D:64:BD:A9:CB:CC:DF:55:50:85:89:C7:21:9A:C5:9A:08:94
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       124B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number:          0DD3
Signing time:             Wed 22 Jul 2026 20:36:33 +0000
Manifest this update:     Wed 22 Jul 2026 20:36:32 +0000
Manifest next update:     Wed 29 Jul 2026 20:36:32 +0000
Files and hashes:         1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: 6Lnn0vGerEqJ4rmXu36iWZmZ+Dd/lCS5HkGuucJxtbM=)
                          2: B0F927B62E5111F1BD10F65598833773.roa (hash: lEC4h0C/BlWeoQezEUq/wosvOp1Bq3k86rCVxSiaJ7c=)
                          3: A173B894112711F0845DF16FC4F9AE02.roa (hash: PZTxpjB636ZwcR/b+ew6RaaC+tAKodGrZdfamhS9xkI=)
                          4: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: WOG/JDnTMbLnKggPICFOEZMrJLYgxzH3vajEoHzJKiM=)
                          5: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: leKyUuCIlZ14TjNCgY53HEbyQblwhhLPh9MB2YSGjFw=)
                          6: 9415082C580911F1AF5AA0C49D833773.roa (hash: ZXqZlUpuR0qiSlcSWwYD4VZZKGXWPn1lkEN6cYxmbW0=)
                          7: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: bNrxB+4vYm1vYBbu7foU1nk5+0scTY3fNESf2+DiIQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4683 (0x124b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Jul 22 20:36:32 2026 GMT
            Not After : Jul 29 20:36:32 2026 GMT
        Subject: CN=6a6129d1-593a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:3c:d8:74:db:c8:4d:0d:20:5f:98:f0:2b:
                    95:db:2d:63:47:55:c4:0d:19:55:45:1c:77:cf:d8:
                    b9:fb:ad:40:68:2d:6b:fa:69:01:e3:ba:2b:0b:f5:
                    ca:81:d9:7a:a3:c1:98:55:05:6f:ce:41:51:9b:a7:
                    42:02:4c:28:84:9e:5b:8e:b5:5f:a4:8b:3b:bc:33:
                    76:ee:70:4c:61:7e:b7:83:10:aa:80:23:e6:16:49:
                    07:3a:46:40:8e:12:e0:a3:1a:03:27:b3:f4:33:21:
                    40:69:54:8a:f2:ee:af:f4:4a:88:8f:f6:7d:53:9b:
                    78:eb:2c:8c:f8:db:95:15:d5:fb:02:52:a7:4b:53:
                    ab:13:ec:7c:15:a3:48:6f:68:02:13:b5:60:eb:59:
                    c4:0c:25:db:00:e9:7b:b3:e7:00:55:c2:b2:f5:2f:
                    dc:86:a5:f9:b4:ea:d7:e7:1b:02:02:de:75:1d:fa:
                    18:1d:ab:43:59:b0:33:c5:b3:d8:43:1f:32:e2:01:
                    86:38:b9:bf:f1:c8:c5:07:27:76:ae:b5:91:dc:d3:
                    c8:4f:3a:35:45:68:28:72:9d:28:e4:52:59:8d:73:
                    3b:4f:17:a6:16:1c:5b:66:c9:c1:89:aa:6a:f8:a8:
                    64:3d:79:6f:b5:a8:85:e0:1f:e0:cf:df:2f:04:84:
                    ae:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4E:8D:64:BD:A9:CB:CC:DF:55:50:85:89:C7:21:9A:C5:9A:08:94
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:11:64:68:4e:b7:88:47:48:a7:50:09:39:0b:88:76:d8:
         80:7f:a7:ce:25:d6:45:eb:ad:7f:93:b3:9b:85:0b:34:63:0a:
         9c:c9:55:5f:99:bd:73:b6:6a:c3:66:f9:19:f8:5c:53:89:ae:
         ad:06:93:7e:5c:a4:04:de:c3:eb:e6:a7:ac:d8:c8:a0:62:1b:
         5d:19:04:c8:0c:fa:ee:50:e5:f4:02:2a:6f:72:61:91:39:ba:
         39:83:4b:37:94:12:48:a0:45:f0:2a:3f:88:0c:ad:4b:8b:20:
         d7:87:c7:9a:69:49:83:62:98:cc:64:a7:c9:cc:36:73:80:0c:
         8e:12:45:35:da:56:94:c5:19:17:69:96:14:f8:83:fd:6e:49:
         de:2c:0d:6f:eb:d6:bd:ed:dd:29:c8:3c:dc:1c:0e:49:1b:5b:
         e8:b6:99:be:69:92:7f:a3:0e:39:b3:73:d7:da:b1:fb:84:55:
         cb:32:f9:90:23:5b:80:6b:6f:3f:2b:a7:61:58:ae:d4:b0:5b:
         7c:f4:93:bb:9d:80:99:8f:30:85:fd:09:c3:65:53:0e:6a:ef:
         2c:37:40:26:1f:d4:16:8a:c0:1b:05:90:22:44:a4:00:ae:93:
         cf:41:1f:10:4e:11:99:97:36:37:10:6f:08:31:1e:74:28:7d:
         7a:89:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:47 2026 by rpki-client