Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
File:                     bGgIQDgcHvMtPI2786zECCz2pbM.mft (raw, json)
Hash identifier:          j7zWFn/JHUfq5gTiob0OS4WlXKGASmBTjfiq54TAS8g=
Subject key identifier:   23:6A:D6:94:24:E6:47:D1:81:D7:E2:54:68:49:A4:E4:78:77:AB:D9
Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
Certificate issuer:       /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Certificate serial:       0B43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
Manifest number:          0AF5
Signing time:             Wed 22 Jul 2026 19:45:33 +0000
Manifest this update:     Wed 22 Jul 2026 19:45:33 +0000
Manifest next update:     Wed 29 Jul 2026 19:45:33 +0000
Files and hashes:         1: bGgIQDgcHvMtPI2786zECCz2pbM.crl (hash: aKcgtRF3xYgy7N9tDjW4Ac/zirlQ0tXlC74x6HOBDE0=)
                          2: 2131145E9E4C11EABF30421BC4F9AE02.roa (hash: L46lyNGF7xref2PgtpwYQAu20HQOQ2fkzes7fFR03pE=)
                          3: A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (hash: 00l1R5FwZcWzFUVZ2aqvW97Qwqjz6xknwlkADPfSXV8=)
                          4: A32546F8A3DB11EA98BC5D48C4F9AE02.roa (hash: O9t3MGde1CPLLyHzaHW4c/VnESPgcMHRUVCLnNs5iqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
                          rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2883 (0xb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
        Validity
            Not Before: Jul 22 19:45:33 2026 GMT
            Not After : Jul 29 19:45:33 2026 GMT
        Subject: CN=6a611ddd-6836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:b1:e8:e3:1d:ed:c0:1f:42:13:44:8e:7d:
                    2a:69:9d:54:9c:e8:db:59:c4:a2:fa:43:7e:d6:de:
                    da:c2:9a:33:46:78:5c:6d:1c:c2:6b:44:d5:42:4a:
                    68:5c:65:ea:6b:92:8c:7e:dc:79:7c:22:1e:01:58:
                    7b:b6:3d:f0:78:33:3f:ac:3a:14:4d:c6:b9:98:b2:
                    18:9f:b3:cf:74:c0:eb:03:af:84:5b:20:e8:90:87:
                    ad:1b:f5:26:6e:57:7f:5b:34:a8:80:84:f8:e1:90:
                    01:db:bf:a4:65:91:1c:a3:95:9e:08:25:b5:85:00:
                    0f:dd:63:f8:75:44:22:6d:07:5b:3e:c1:6d:b9:6e:
                    e3:28:6e:96:50:dd:bb:e0:c0:b3:7e:78:6a:62:5d:
                    d2:e7:ca:33:39:3a:0a:5f:50:06:ff:b1:d1:4c:bb:
                    3a:53:f7:2b:29:d0:e8:13:bf:c3:a9:df:95:18:9f:
                    7a:41:e5:8c:27:ec:33:10:19:c5:78:02:53:cb:95:
                    54:50:84:7f:6d:12:43:65:d4:d9:1e:8c:25:52:b5:
                    96:86:78:8f:6b:97:45:e5:5b:ca:43:3a:5b:bc:d5:
                    68:44:35:9a:b9:3b:28:0c:af:93:ca:81:f4:c1:d7:
                    2a:d3:29:41:33:25:33:e9:7d:6d:d6:44:b2:bc:1d:
                    a1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6A:D6:94:24:E6:47:D1:81:D7:E2:54:68:49:A4:E4:78:77:AB:D9
            X509v3 Authority Key Identifier:
                keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:04:79:53:96:ab:ac:13:a5:41:ca:f6:17:8e:8f:fc:1e:bd:
         95:36:f8:b1:88:b5:9c:7a:11:93:50:29:19:03:4c:57:96:08:
         f4:8d:eb:47:e6:81:cb:aa:a3:b9:aa:73:a4:cc:63:b7:bf:8c:
         ad:da:2f:10:aa:ec:e0:5e:ce:03:9f:de:24:be:1f:e9:da:19:
         b0:11:d1:3a:5b:7a:e1:ac:f0:eb:50:4e:22:dd:b1:92:86:6e:
         43:d9:e8:38:7e:f4:4b:3f:de:25:e5:a8:a0:60:9d:62:02:43:
         d6:47:f6:42:d1:0e:45:8a:7e:b3:37:d0:4a:f5:2a:3b:2a:c4:
         e9:62:51:cd:db:18:b4:ab:71:f4:1a:ef:16:54:87:c0:9e:a4:
         1c:13:6a:c5:c3:db:c5:6e:69:87:0a:31:ff:55:b3:39:cf:04:
         2e:97:2a:d3:53:f5:95:8e:61:ce:0f:df:ce:0e:39:37:80:82:
         8b:dc:0c:7f:35:ef:65:7e:97:97:35:d6:b1:d5:33:b5:3a:3f:
         b5:51:03:60:af:54:7a:96:e1:b8:2e:8e:da:33:48:24:99:4b:
         c2:aa:dd:d5:b8:33:4a:9a:92:1f:a7:12:96:03:41:24:0d:ab:
         c7:59:60:79:a4:b7:8a:3f:67:f4:31:f9:5a:2a:ae:cf:ff:ff:
         d6:55:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:36 2026 by rpki-client