Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
File:                     T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json)
Hash identifier:          XJ+eDLvqafm+1MVCUWHwQ1KfnMTNh6DIt1R1UrBJVBM=
Subject key identifier:   41:65:52:E4:5C:EC:FD:DC:84:C7:F4:F8:9B:17:4D:99:FD:D7:F4:71
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Certificate issuer:       /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial:       0434
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
Manifest number:          040A
Signing time:             Thu 23 Jul 2026 01:25:08 +0000
Manifest this update:     Thu 23 Jul 2026 01:25:08 +0000
Manifest next update:     Thu 30 Jul 2026 01:25:08 +0000
Files and hashes:         1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: bAY+fmvfirsrxkwkE9Q2sB4gHJMIXpn/kSsAJx8kXuQ=)
                          2: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: RE9x/m6mlo2vJzH32XxtuTi0P6Gpv9n9izH4NHfwP6Q=)
                          3: D9750E78F01111EFB1720645C4F9AE02.roa (hash: +LCGNb0OB4VM+Whp1njiiWEGwYQwA6NaUQIys14iy+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
                          rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
        Validity
            Not Before: Jul 23 01:25:08 2026 GMT
            Not After : Jul 30 01:25:08 2026 GMT
        Subject: CN=6a616d74-96ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:73:b9:f2:28:75:5b:2a:a5:53:6f:88:ec:
                    b3:d6:98:b4:f8:f2:0a:e2:76:a3:67:c0:02:e8:fc:
                    21:76:79:a5:ac:39:03:65:67:da:92:bc:55:03:ed:
                    89:94:10:1d:8d:0b:fb:1f:62:f7:7e:60:85:6a:eb:
                    ba:fb:2f:0b:f7:87:f8:53:86:5a:d3:66:b0:a9:0e:
                    af:97:71:8d:b2:9b:56:29:93:dc:20:5a:f4:e7:3f:
                    cb:0c:df:c6:26:f1:53:47:0a:45:1c:f6:38:01:89:
                    51:bc:9f:bb:11:01:62:fe:56:40:d1:12:8d:de:e8:
                    17:91:f0:09:01:61:79:7d:7a:fc:d6:00:5b:8c:fb:
                    ed:3a:f9:e4:be:1c:e5:90:0d:59:e7:7b:ec:48:24:
                    09:8b:fc:5d:44:bd:e8:bf:cb:8f:a5:e8:7c:90:26:
                    59:00:34:82:44:73:98:f0:f4:6a:30:df:cd:75:c7:
                    5b:20:0d:58:6b:78:72:3d:91:be:c0:be:b7:ee:b3:
                    d7:53:4d:91:ec:24:e2:ad:6c:6c:a4:80:ec:a8:ed:
                    d7:83:f9:c8:b8:05:d4:b4:a6:88:06:bd:b9:94:4c:
                    5e:07:69:4d:77:79:b1:b4:9d:63:78:37:c1:2e:e6:
                    33:87:90:a1:a7:cd:a7:36:0c:c7:b3:e7:0b:92:07:
                    03:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:65:52:E4:5C:EC:FD:DC:84:C7:F4:F8:9B:17:4D:99:FD:D7:F4:71
            X509v3 Authority Key Identifier:
                keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:58:6b:b9:5d:bb:e4:e2:e9:4b:10:ca:a6:6d:44:f2:33:
         99:1e:6d:71:d8:b9:b3:a0:57:cd:80:8e:a0:b0:15:a0:85:31:
         77:cf:03:cd:2a:95:fd:3b:06:df:a1:12:5a:29:87:54:65:4d:
         8e:35:64:f0:a5:73:d6:1c:05:d0:1f:6f:8d:57:30:7b:13:ee:
         f8:57:cb:34:e0:8e:22:c7:0c:9b:31:c0:e6:93:f2:51:15:27:
         13:c4:1a:e7:0d:dc:9d:cf:c8:f3:fc:54:d4:b4:e4:4b:45:43:
         ab:1d:83:83:96:83:6e:15:4e:1a:6a:28:18:38:a7:f0:99:19:
         3a:c0:19:b0:d8:1a:8f:cd:b9:3f:58:ac:ae:1c:82:24:41:59:
         91:f3:e4:c6:a9:58:cf:0c:24:db:a1:c1:b8:02:72:e4:b9:97:
         ad:a0:cd:c2:74:13:20:b4:e2:77:13:f2:2b:a5:4b:da:ed:dc:
         0c:8b:ca:be:ac:1c:f6:eb:2c:cc:ac:93:e7:7a:23:fd:4e:76:
         fb:6f:81:22:83:a2:5f:64:04:e8:35:b6:8f:e4:0b:9d:7d:9f:
         1c:84:3a:21:07:7e:6d:ff:7e:5c:56:1a:7d:d8:68:cb:ad:8f:
         85:85:70:23:6d:08:cf:b4:9c:08:8b:54:17:0f:5a:bc:3f:88:
         84:63:55:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:55 2026 by rpki-client