Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
File:                     fqB__DIeh8j3RMqqCf_5ixzAtos.mft (raw, json)
Hash identifier:          fUmxC8nN7FIVPjXbWhxZeUUj5/T40kuaHFUI4x5CVd4=
Subject key identifier:   88:80:B6:B7:C7:4B:7E:6D:33:84:E6:4B:FB:69:E0:A4:17:87:35:79
Authority key identifier: 7E:A0:7F:FC:32:1E:87:C8:F7:44:CA:AA:09:FF:F9:8B:1C:C0:B6:8B
Certificate issuer:       /CN=A91E859E/serialNumber=7EA07FFC321E87C8F744CAAA09FFF98B1CC0B68B
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
Manifest number:          1D
Signing time:             Thu 23 Jul 2026 11:06:11 +0000
Manifest this update:     Thu 23 Jul 2026 11:06:10 +0000
Manifest next update:     Thu 30 Jul 2026 11:06:10 +0000
Files and hashes:         1: fqB__DIeh8j3RMqqCf_5ixzAtos.crl (hash: QDjUqF7zAcf38MCdnpGrnG18fITkrIbwpRUNO7yqaq8=)
                          2: D22158C0674811F1B78F7ABD8247A888.roa (hash: MGUrpK1K2oupHxzWSgO6Nc9+anYE61p1UNik8Cr88aI=)
                          3: 0CB90268678411F1A5717FF39347A888.roa (hash: FMjrzW19UpAuLU2zd+ioPWQz9JPl11mv3uL2SMTAKOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.crl
                          rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E859E, serialNumber=7EA07FFC321E87C8F744CAAA09FFF98B1CC0B68B
        Validity
            Not Before: Jul 23 11:06:10 2026 GMT
            Not After : Jul 30 11:06:10 2026 GMT
        Subject: CN=6a61f5a3-e596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d4:83:f6:ce:62:02:85:3f:4a:d2:2a:b3:2c:
                    45:58:1c:fe:aa:d5:b0:97:bc:bf:28:41:a6:c6:9b:
                    20:96:87:ae:32:c4:17:ec:6f:7e:09:a6:0a:83:a9:
                    ad:70:21:1c:ab:3d:20:40:05:21:d6:a8:a3:81:b2:
                    b0:03:ea:5a:7a:dc:88:51:4e:96:c9:5c:8c:43:8b:
                    4f:30:e2:be:9e:72:84:05:5e:19:53:50:e0:75:7f:
                    44:7e:9c:3a:09:28:ea:03:41:cd:f9:37:c1:61:48:
                    2b:47:f6:3b:63:51:53:15:b4:03:ae:cd:46:d1:f1:
                    e6:f6:7b:0b:44:94:67:1c:73:4a:04:bb:8b:ed:fa:
                    af:b9:b9:8a:c1:51:6b:bc:e9:af:69:19:ca:d0:f5:
                    08:40:3a:9c:26:2e:19:b4:34:6a:fe:ee:29:9b:84:
                    ce:f2:18:c6:9e:bf:27:3b:9f:64:dc:27:62:10:79:
                    1a:9c:d4:07:8c:57:9d:c4:4f:7c:0d:be:b7:83:3b:
                    e8:6a:cf:19:8d:ec:42:04:18:41:c0:74:b5:f0:e9:
                    ea:8a:b7:74:f5:c2:3a:57:7e:37:63:34:fc:76:0c:
                    b8:80:f1:98:b4:59:14:27:a0:39:8c:5e:e9:df:b0:
                    cc:39:b9:ee:9e:9b:23:86:73:33:4b:de:b5:86:f0:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:B6:B7:C7:4B:7E:6D:33:84:E6:4B:FB:69:E0:A4:17:87:35:79
            X509v3 Authority Key Identifier:
                keyid:7E:A0:7F:FC:32:1E:87:C8:F7:44:CA:AA:09:FF:F9:8B:1C:C0:B6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f8:2b:34:84:4d:3b:73:73:56:07:53:ac:ff:b9:8a:59:1a:
         db:4a:ba:ed:7c:a2:a6:5a:7e:84:1f:5d:84:b6:95:93:4b:77:
         bf:28:36:26:96:e1:d7:3e:e4:7f:5a:32:d8:94:b2:16:25:44:
         77:06:ef:01:36:d5:01:22:64:49:be:1b:a5:fe:de:91:fd:50:
         1b:f2:93:35:bf:a8:2f:7a:8c:02:34:5d:3b:d3:1c:f4:1d:8b:
         15:63:51:50:be:06:44:62:fc:5d:3f:42:c0:9c:f0:f5:9f:01:
         cc:be:d1:c1:4f:75:b1:5d:d7:d3:97:d8:2d:44:3b:42:91:91:
         2b:14:5c:23:bb:d5:72:32:ee:1f:d0:5c:f7:9c:e9:d7:d5:b5:
         76:9e:64:3a:a9:f1:0e:74:4b:d0:76:b3:03:5f:11:e5:81:51:
         70:0b:29:ba:a5:11:26:d5:b1:5c:91:7e:96:b8:41:41:42:29:
         a5:61:f1:34:78:25:7c:af:2d:81:db:b7:06:3c:b3:73:63:3f:
         77:1f:df:5a:cc:87:05:52:eb:33:0d:52:ac:6a:0b:ea:68:1a:
         38:71:1e:0c:ea:4b:93:f5:b7:9e:b9:e0:61:d9:b1:35:43:bd:
         aa:a5:be:1b:57:f2:01:24:59:56:f9:ca:1b:de:af:c9:eb:86:
         38:db:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:51 2026 by rpki-client