Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
File:                     -soSQJs8JskJ3Pqy874emPzo2oA.mft (raw, json)
Hash identifier:          NZ5bhToTmqG7PAtzxs8buEGIVP/YP7oAXzvHtzRkp4o=
Subject key identifier:   0D:CC:18:5A:A6:F9:FB:38:9F:CB:62:39:F5:AB:44:45:AD:74:DD:8A
Authority key identifier: FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
Certificate issuer:       /CN=A91EE8EF/serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
Manifest number:          33
Signing time:             Thu 23 Jul 2026 10:38:48 +0000
Manifest this update:     Thu 23 Jul 2026 10:38:48 +0000
Manifest next update:     Thu 30 Jul 2026 10:38:48 +0000
Files and hashes:         1: -soSQJs8JskJ3Pqy874emPzo2oA.crl (hash: viIkfS3JS9S6ZMS3855JAGI7qeXh4wvliAjGBCsIrX0=)
                          2: 4663706238A311F1973C08FAC9833773.roa (hash: 2BdIoOt9gZwRjlU6kS+v6A4uOHq7Kcw5jXOmSBzzOg0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8EF, serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
        Validity
            Not Before: Jul 23 10:38:48 2026 GMT
            Not After : Jul 30 10:38:48 2026 GMT
        Subject: CN=6a61ef38-ca25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:51:93:c3:6c:55:67:e0:80:fa:18:bb:77:
                    56:17:a6:6c:fc:44:b0:76:3d:0c:23:ec:89:58:83:
                    9e:13:9c:51:8a:3b:31:04:ed:c3:55:ca:75:42:f6:
                    a3:8c:ed:87:35:93:83:9c:29:0b:e3:de:ed:c6:43:
                    11:34:85:ae:bb:05:cc:8a:de:48:45:c9:d6:c2:0b:
                    9f:06:a5:d1:b9:a0:c4:35:6a:59:9f:60:7e:97:37:
                    8e:54:9f:23:4a:44:9c:28:76:97:bf:74:a9:92:3b:
                    12:0a:d3:94:1c:f8:a4:27:54:4b:2d:3f:cc:6a:e6:
                    d9:b4:24:47:99:39:16:2c:08:5d:8e:73:98:fc:4f:
                    e3:ee:d4:8e:64:ca:e6:f1:ad:44:cd:b0:36:1f:03:
                    07:0e:27:eb:34:c5:01:98:9f:7a:b6:b5:26:a9:db:
                    99:ec:3c:45:79:6b:69:cc:ce:ae:a4:c4:b6:3d:90:
                    5d:fb:eb:1b:39:f3:ff:72:6c:d0:1a:88:e7:77:a3:
                    60:6d:01:34:cd:21:dc:b6:0d:34:22:42:a7:2e:f4:
                    73:1d:2f:6b:ce:80:6f:4b:c1:66:dc:14:5e:08:04:
                    73:f2:02:27:e3:93:65:37:ac:b2:5f:06:f0:e1:1a:
                    16:ac:99:66:f1:4e:f6:63:e6:97:b2:11:e6:d5:fa:
                    40:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CC:18:5A:A6:F9:FB:38:9F:CB:62:39:F5:AB:44:45:AD:74:DD:8A
            X509v3 Authority Key Identifier:
                keyid:FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ac:d3:e8:47:10:6f:4a:3f:28:cc:9f:fc:bb:50:dc:bc:57:
         56:8b:da:3b:30:72:a8:ba:88:2d:ba:e3:ea:16:34:c6:fe:87:
         f3:1f:18:6c:11:64:27:d8:8f:0c:c8:c4:f5:15:a7:1e:08:6d:
         11:a5:af:88:ed:4c:42:96:42:63:b0:12:88:21:7a:83:b3:58:
         44:6d:ea:51:b4:44:93:32:8c:ac:e4:e1:41:4b:90:ee:9a:85:
         b8:a5:46:f4:fd:53:6c:e1:f4:bd:3e:3a:ba:79:6e:15:a7:d8:
         85:94:5c:80:65:a6:3c:fa:c5:01:38:97:1a:8a:78:8c:02:28:
         54:11:ad:c7:cc:3b:47:e9:a3:c9:b6:53:41:9b:8a:9a:aa:72:
         3b:ca:4c:ba:6e:3f:88:46:97:d5:d6:a9:44:62:ce:cd:80:c0:
         9c:3f:70:1d:86:aa:12:29:a0:e4:b2:d9:8b:a4:a0:c0:93:a2:
         c6:73:d1:1d:89:b5:c8:db:e4:e4:1a:de:51:ed:17:2f:e3:39:
         73:1b:7d:f2:51:9c:32:9b:ee:8c:3d:d0:32:ff:ce:e7:e6:06:
         db:6c:db:2e:5f:60:f2:58:0f:c3:d5:99:fd:97:84:fd:dc:72:
         23:60:ad:26:2c:81:06:0a:b2:5b:f1:dc:2d:b0:a5:cd:9d:84:
         b2:99:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:34 2026 by rpki-client