Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
File:                     6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json)
Hash identifier:          ysVou8WacS5k5nkeNwdQ3JtJaV3PpIhMbD8Y4bAxfZg=
Subject key identifier:   F1:34:9A:AE:9D:A6:2D:48:0B:D2:45:97:F1:80:88:F8:33:C9:C3:4C
Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
Certificate issuer:       /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
Manifest number:          0156
Signing time:             Thu 23 Jul 2026 06:42:51 +0000
Manifest this update:     Thu 23 Jul 2026 06:42:50 +0000
Manifest next update:     Thu 30 Jul 2026 06:42:50 +0000
Files and hashes:         1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: 83Qm32urf1ib1UuSDmrwjYHNJ0/caFVvJw1SHlMbmNY=)
                          2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: YCyt4eq0YTJbjtnPvyQjHsHsHz1MnNzHboaf/xb9tXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl
                          rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E
        Validity
            Not Before: Jul 23 06:42:50 2026 GMT
            Not After : Jul 30 06:42:50 2026 GMT
        Subject: CN=6a61b7eb-cb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:d3:8b:33:bb:03:cd:79:55:88:d5:b6:7e:
                    9b:70:c2:8f:d3:df:71:93:32:66:2e:96:22:fe:b9:
                    dc:c9:44:85:4b:a8:6a:75:6d:c6:27:18:8a:41:14:
                    f0:cd:26:da:18:92:5c:cc:f4:e6:dc:2f:f5:19:c0:
                    03:83:82:44:7c:7a:9b:21:6a:d3:75:ab:35:18:a6:
                    49:08:ec:b2:85:69:e1:17:33:5a:97:47:2c:69:a5:
                    ae:25:a7:14:47:d7:a2:35:66:c4:50:08:7f:b1:3a:
                    06:c3:a8:61:b4:9e:a2:ad:49:9b:5e:32:1a:bb:ed:
                    86:8a:02:34:04:b9:52:cc:9f:b1:c0:78:9f:9e:f8:
                    0b:7a:31:76:f9:7a:ef:d7:f9:7a:f1:46:41:b5:58:
                    b6:f4:34:01:a6:dd:b6:39:cc:64:5f:3c:e2:33:54:
                    ed:e7:b4:bc:75:e3:e6:66:1c:1d:a5:e7:a3:01:03:
                    d1:73:c4:f3:86:1d:61:7d:1c:28:d0:b2:9b:3c:39:
                    21:65:c7:36:6c:bd:b6:2f:e5:57:5d:f7:1b:7f:77:
                    88:21:2e:c3:2d:b2:8b:fe:63:0c:c4:74:79:92:c6:
                    10:c2:b3:5b:35:a6:1b:2d:3f:27:a2:04:19:57:f6:
                    4b:06:4e:4b:e6:61:f1:d0:6c:bf:68:b7:2f:b9:65:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:9A:AE:9D:A6:2D:48:0B:D2:45:97:F1:80:88:F8:33:C9:C3:4C
            X509v3 Authority Key Identifier:
                keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2b:f4:ad:60:db:2a:cd:af:47:4c:1e:6c:1f:b9:bb:d7:75:
         06:88:0b:ef:3f:b6:c9:9f:72:bf:bd:86:8a:42:f6:32:b9:12:
         fc:d5:f0:2c:13:62:63:e9:59:c3:f5:4f:1b:59:fc:a2:f2:2e:
         07:67:a8:ec:d4:bf:74:cd:2a:a3:23:5d:61:6b:f8:47:e9:74:
         d7:44:da:e4:f0:f6:14:55:24:95:be:92:a1:10:e8:b5:bd:dd:
         90:9a:c5:74:30:10:39:2a:e9:5a:91:64:d9:4a:64:34:f7:3e:
         11:6c:5f:c8:d9:2c:39:af:1d:29:b9:e6:a4:3a:b2:01:f8:40:
         4b:4e:38:28:6a:a4:82:0a:e6:16:3a:e9:9e:24:9e:e4:87:b2:
         37:82:5d:fa:7a:6a:4a:b4:07:b6:bb:ed:25:5e:f9:fc:b7:2a:
         c3:c2:de:f7:2b:f1:33:9e:5c:f6:49:1c:54:29:ee:92:33:8e:
         77:86:81:c2:ce:90:6e:bb:fc:27:d4:9b:b9:81:92:58:22:77:
         19:2c:78:df:4a:ff:b2:41:c0:39:62:e2:11:77:38:c3:36:08:
         6d:26:3a:e8:27:90:63:cd:d7:99:00:6b:ba:12:00:60:99:0f:
         c9:16:3e:59:a6:01:6f:cd:d2:f2:1d:93:96:cc:4a:b9:68:80:
         27:9d:ea:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:40 2026 by rpki-client