Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
File:                     xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json)
Hash identifier:          RW3P2ayNzxG8jDNbAGK65i6zylRR0xuwjbPKLJLwIi4=
Subject key identifier:   91:5C:DB:A7:EB:01:61:36:85:26:E5:42:77:C5:F2:90:89:AF:0A:77
Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22
Certificate issuer:       /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622
Certificate serial:       0411
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
Manifest number:          03F2
Signing time:             Thu 23 Jul 2026 01:25:05 +0000
Manifest this update:     Thu 23 Jul 2026 01:25:05 +0000
Manifest next update:     Thu 30 Jul 2026 01:25:05 +0000
Files and hashes:         1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: k4/C7wMhCqkAPR+0pGPVSX9El9STq5J0SQOB7znbVPc=)
                          2: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: MYhon/bKVvfbESU7PH3/suSb5/+YVeHAdnZ0m09ZYpE=)
                          3: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: VLoma/afTmz4hnI0EdqXpLXgczEhizYxmaDG9CyhcCo=)
                          4: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 4Abgy+X2ZW9Ha0ytPuEUdXVUheE/F+OPg09zPVRwTxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl
                          rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622
        Validity
            Not Before: Jul 23 01:25:05 2026 GMT
            Not After : Jul 30 01:25:05 2026 GMT
        Subject: CN=6a616d71-68c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:ea:65:5a:21:e9:b7:73:5e:ed:37:75:f3:
                    aa:94:47:c9:e1:7a:36:ba:39:47:d2:bf:60:fe:ce:
                    2f:ed:5c:80:83:6d:c0:cc:1d:0c:cc:56:e9:b5:79:
                    9b:b5:ab:86:f5:13:fe:2e:52:48:6e:6f:f5:20:4d:
                    92:26:c5:f2:25:df:11:b9:fc:5d:00:84:56:02:5d:
                    1b:c2:09:58:1b:87:53:e9:9e:b7:89:1a:3c:0a:c5:
                    0d:0e:b7:fa:d8:40:16:62:f4:a2:24:b7:1d:0d:0e:
                    d8:bf:67:67:3f:a7:0f:57:c5:cf:89:e1:23:5e:f5:
                    26:ff:ec:44:54:83:e6:d7:85:a9:38:45:93:47:0b:
                    83:34:cf:73:3e:2b:d8:cb:43:3d:d1:c9:e9:d3:45:
                    30:52:64:cb:cf:80:4b:e0:3b:0a:41:eb:e3:4b:2d:
                    1e:0e:5a:bd:9b:63:bd:44:59:c8:14:00:f7:3a:f3:
                    e6:43:8f:bb:45:62:d2:80:de:7d:20:47:43:c3:a5:
                    a5:0d:a7:8b:f7:9d:3f:a9:1a:b7:47:d7:87:a2:46:
                    49:13:fd:b2:cb:24:8d:42:f6:76:29:ba:0f:1a:5c:
                    5c:ee:31:ee:58:f7:c4:6d:66:61:7a:bd:cc:f2:a9:
                    ea:5d:a5:e6:94:f1:d9:7c:e8:9d:a7:96:5d:fe:27:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5C:DB:A7:EB:01:61:36:85:26:E5:42:77:C5:F2:90:89:AF:0A:77
            X509v3 Authority Key Identifier:
                keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f3:d1:7a:40:d2:02:d8:aa:37:69:17:78:de:50:8a:ac:a2:
         f5:d5:5b:df:c4:bc:23:c9:05:5e:c9:b1:8b:58:aa:9f:e0:b0:
         25:69:6d:62:70:e7:52:a4:6b:9c:cc:d0:9a:e1:99:85:ce:12:
         d1:ee:9a:cc:6f:e4:ae:43:1f:db:8d:22:a2:b0:15:9d:d8:b5:
         b9:fb:36:5a:12:10:cf:e2:5d:00:4b:b4:66:11:f9:bf:14:41:
         42:40:26:72:74:a1:f2:f6:a2:32:78:2b:13:91:36:4a:48:5b:
         02:a6:2c:79:39:78:b0:a0:b7:37:80:fe:b4:58:a9:1a:2d:b4:
         05:95:c3:20:64:41:f6:bc:39:ae:52:d3:6f:9d:c7:8e:2c:88:
         a0:e2:88:5d:52:ad:d1:6a:8d:3b:ce:1b:4a:cc:94:07:74:3c:
         c7:0b:f5:a5:af:2e:f8:a5:b8:0e:a1:b5:33:35:76:7d:87:a9:
         c9:74:8c:55:78:1c:e3:c9:6c:21:2d:30:22:3d:60:3b:3c:6e:
         6b:87:76:90:fb:84:32:e6:a0:6c:5d:20:8d:ab:a5:28:5b:b4:
         fd:6d:1f:f6:58:b9:38:31:33:9d:1b:df:0c:c3:35:b7:68:2b:
         4f:c5:e7:4d:99:7b:69:38:2d:68:fb:ad:42:97:09:4c:97:4f:
         27:9b:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:17 2026 by rpki-client