Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
File:                     40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json)
Hash identifier:          n8VnThPA3VGq+ymHUpcX49NcoAYleUPaJjB9kr6IM4Q=
Subject key identifier:   1B:F9:DF:08:43:D6:B9:32:90:D0:6A:58:5E:A6:D2:14:A8:06:A9:57
Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
Certificate issuer:       /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Certificate serial:       033E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
Manifest number:          0336
Signing time:             Thu 23 Jul 2026 02:00:06 +0000
Manifest this update:     Thu 23 Jul 2026 02:00:05 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:05 +0000
Files and hashes:         1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: CylyHGVfa1l7nKYbXPbGJL4GtnXm+4KnrtFRoo7HZfM=)
                          2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bTkT2MqFX/19qcSjcX3ccXtP/wVqXRGcmC6IZgoF9mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 830 (0x33e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
        Validity
            Not Before: Jul 23 02:00:05 2026 GMT
            Not After : Jul 30 02:00:05 2026 GMT
        Subject: CN=6a6175a6-2f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:76:49:46:9b:39:02:e6:1e:55:84:bd:17:
                    36:04:f6:3a:35:5d:35:9c:ee:6e:c5:13:0d:f2:89:
                    00:d4:5c:f9:b5:57:2a:b8:4b:70:37:5b:1c:11:5f:
                    91:89:12:88:b2:32:de:4d:75:2c:ad:26:40:4f:ae:
                    63:c7:7c:97:68:ba:d9:35:ad:8e:e0:6f:89:a2:0b:
                    ea:4f:e0:a0:7b:5d:5a:4a:26:4c:60:e5:88:28:f3:
                    0f:5a:aa:f3:b5:e5:66:7a:63:ef:47:74:5c:83:83:
                    9c:39:3d:4b:4e:97:41:ba:df:73:8e:fd:2d:7e:64:
                    6f:d0:1e:42:89:18:91:84:11:f2:60:3f:29:54:d0:
                    f7:c7:23:ac:41:62:6f:9a:0f:de:38:fa:65:0a:cd:
                    bc:cb:29:8a:6c:fb:fd:7f:14:3f:d2:72:20:78:f0:
                    88:2a:ca:c4:0f:43:6f:19:f6:41:f7:4f:89:ae:50:
                    60:47:5b:36:50:9d:80:fa:71:a5:74:16:30:63:38:
                    b7:e3:b5:2a:53:c5:86:c7:fe:d6:e5:a6:17:b3:05:
                    6d:0c:48:ff:1d:1f:49:5d:6f:40:92:3c:74:11:69:
                    ba:1a:14:ab:2b:44:ea:8c:c3:20:24:8d:e8:1d:e4:
                    95:e3:03:a0:8e:14:6c:c4:24:61:58:ff:94:e3:04:
                    93:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F9:DF:08:43:D6:B9:32:90:D0:6A:58:5E:A6:D2:14:A8:06:A9:57
            X509v3 Authority Key Identifier:
                keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:eb:6f:ed:82:8d:57:c6:de:30:3c:19:3d:4a:df:ec:37:56:
         0d:c5:02:b5:45:5b:55:23:e6:a0:1e:42:90:4a:81:69:4a:f6:
         b8:99:34:e8:35:ae:56:47:89:b6:1e:a7:e4:f0:89:64:b6:c2:
         da:96:4f:7a:ad:de:5f:e3:23:58:b7:59:ed:bc:3b:d4:de:85:
         21:9f:ef:87:47:ec:f3:56:d8:30:9c:66:fa:c8:c7:74:62:02:
         67:45:8e:34:ca:1a:05:93:95:bc:6e:4a:d0:99:a9:ea:fd:5a:
         45:7a:99:e6:c2:ea:7f:66:d3:0a:e0:5b:e8:60:13:20:26:43:
         3b:6b:cb:bc:cc:ca:db:e6:f2:da:6d:ed:01:99:da:4c:06:d4:
         27:8a:6b:51:8d:c1:81:79:11:a7:fe:bc:80:bc:4d:8b:bb:a3:
         f1:0c:ec:28:d0:11:27:ce:d6:9d:d5:b2:f3:6d:df:2e:ff:eb:
         63:06:5d:85:9d:0f:77:0c:52:56:c0:87:11:f3:40:ea:42:67:
         93:f7:a3:bf:91:dd:fa:29:5b:00:a0:6b:af:6b:52:01:6c:53:
         a0:6b:0c:09:de:35:5d:9d:68:34:91:28:76:f6:72:a3:56:c8:
         aa:41:5d:e2:6d:b7:0e:7a:25:4b:5e:e2:4a:a9:91:ec:04:5b:
         3d:f6:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:25 2026 by rpki-client