Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
File:                     cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json)
Hash identifier:          n2B9TP8qN5ZcEfmsLqhsRKFcL7iBXMfnv6gmjy33drI=
Subject key identifier:   B0:B6:C8:CF:03:A3:72:BB:C5:65:E6:3B:BD:8C:8C:81:32:EB:01:27
Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
Certificate issuer:       /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Certificate serial:       0288
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
Manifest number:          0281
Signing time:             Thu 23 Jul 2026 03:00:12 +0000
Manifest this update:     Thu 23 Jul 2026 03:00:11 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:11 +0000
Files and hashes:         1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: zEtRKItDNWJdIM/NHPeS2BYNOW/nZitWSHK23TycNMg=)
                          2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: ylQZgSxpoYGOK3QMYk3CFuQ9Ou8gBsooYQ9v1rokCT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
                          rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
        Validity
            Not Before: Jul 23 03:00:11 2026 GMT
            Not After : Jul 30 03:00:11 2026 GMT
        Subject: CN=6a6183bc-4c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:58:1e:9f:89:24:47:f8:2d:ee:37:99:cd:
                    17:2d:56:c0:50:6d:18:50:0b:2a:bb:ae:02:f1:cc:
                    cc:21:74:51:4c:c8:12:9d:37:f7:13:0a:5a:31:b6:
                    be:5b:f4:6e:fa:ae:80:b7:27:30:68:46:99:bc:c2:
                    c9:48:57:91:dc:12:40:ad:8d:32:16:0a:81:60:82:
                    14:8b:e7:b3:0c:b7:29:91:9f:0e:c4:64:c2:a3:f5:
                    79:7f:b7:fd:a2:b1:27:5a:8c:01:36:67:d5:78:10:
                    2c:c8:8a:1f:6c:77:05:29:ce:fb:ab:00:af:78:9d:
                    ef:8e:6e:8a:f2:b4:5f:95:8a:56:a5:32:9a:96:22:
                    a6:d7:5a:28:77:7b:15:f3:ec:f9:3a:42:23:1b:5c:
                    5b:be:5b:19:da:8c:ee:c7:cd:7a:db:1d:be:9d:ac:
                    27:14:a4:da:89:eb:dd:4a:e7:59:7d:e5:79:66:06:
                    84:2b:f9:b0:df:2c:4e:cc:03:f1:33:eb:f6:4e:19:
                    97:82:62:55:9f:d4:d1:8b:72:19:3a:14:8d:b8:b9:
                    23:79:48:55:3d:6a:2f:cc:19:40:d3:b2:4e:11:72:
                    18:f6:c3:c8:f4:b5:4f:6a:83:30:2e:81:49:47:b4:
                    68:89:77:d2:fa:e3:65:cf:3d:c7:f1:2d:67:b0:b7:
                    13:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B6:C8:CF:03:A3:72:BB:C5:65:E6:3B:BD:8C:8C:81:32:EB:01:27
            X509v3 Authority Key Identifier:
                keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ac:bf:39:f2:6a:fc:45:a4:fb:ac:68:ba:96:31:d6:33:cb:
         ac:d8:e1:82:40:eb:99:f6:63:c1:9d:98:e1:8a:52:d3:32:91:
         1a:34:19:a1:b2:dd:cc:f2:63:80:93:7f:af:06:f6:13:6a:c1:
         6c:3c:20:02:bb:53:c4:9a:75:53:dc:50:eb:9e:c9:19:79:f0:
         f4:1c:3d:ea:84:aa:c6:a8:64:86:17:47:6e:51:7d:90:86:e8:
         00:5f:2e:db:bb:c0:e5:bc:4b:61:6c:8d:27:52:48:ba:b0:a4:
         39:22:5b:eb:f0:d6:71:a7:ec:2b:45:84:cc:23:44:52:4f:83:
         5f:6e:31:61:1d:96:35:53:11:73:e2:d5:c8:8f:d0:85:b3:4d:
         d6:69:97:5b:04:df:bc:5d:b6:9e:85:df:5a:bc:a1:f5:85:36:
         c3:b9:00:b2:7e:d9:4b:17:9e:89:47:c5:a9:cd:20:df:44:be:
         3a:f7:8f:2c:5a:18:7d:15:21:69:3c:3b:1d:e5:fa:40:5a:82:
         63:be:02:c2:56:94:05:31:79:f9:e6:6b:0a:4b:45:28:48:3b:
         c3:a2:6b:91:35:89:29:0c:3c:51:c0:ac:0d:4e:fa:47:64:80:
         42:41:f8:7c:b5:1d:ea:1e:66:c5:0a:c1:fa:e5:50:4b:cf:3d:
         16:46:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:40 2026 by rpki-client