Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
File:                     iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json)
Hash identifier:          duitX7OUAX+mP5Bl+eJYLwq1nYrF+a1Q7dkbHAR5Msg=
Subject key identifier:   51:F3:4F:C2:FA:C5:08:20:F9:E2:FC:A6:93:0E:18:CE:6C:FD:85:72
Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
Certificate issuer:       /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
Manifest number:          BC
Signing time:             Thu 23 Jul 2026 08:58:07 +0000
Manifest this update:     Thu 23 Jul 2026 08:58:06 +0000
Manifest next update:     Thu 30 Jul 2026 08:58:06 +0000
Files and hashes:         1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: EIwHCyBMRdfCab5AZZ0uu6UiQY/UkPG+3/WCLWmDkw8=)
                          2: C8E215DA72BD11F1A5B8119C6EA30FBC.roa (hash: bYGPYWXHf2UeD4FuDLYCFjg/tjpxUSkiRiLIR8rNZZU=)
                          3: 48C2333271D011F18649332165A30FBC.roa (hash: UYGd5tu+ponBabyfg0DTDMkROAeMGscpmExVITT2U8s=)
                          4: F60B4BC272C611F1AF8F5FA470A30FBC.roa (hash: u2ZcwrTd5VGUBKX9MxJ7Nhaz/rLCCBhAn2QaEhijF8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
                          rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
        Validity
            Not Before: Jul 23 08:58:06 2026 GMT
            Not After : Jul 30 08:58:06 2026 GMT
        Subject: CN=6a61d79f-dff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:c2:c7:eb:8f:d9:7f:1e:10:70:7f:6d:e1:
                    ef:e5:82:d3:79:56:e6:f3:0a:7e:6e:6f:a5:fa:df:
                    10:2e:ce:26:b5:61:36:c6:d0:34:2b:59:db:ee:bf:
                    cd:95:14:0b:4f:c1:d0:ac:9d:4c:7a:aa:29:b2:5e:
                    6c:9f:71:fb:33:2a:c4:d8:a9:95:b1:87:e0:5d:76:
                    03:10:43:8e:1d:ef:82:e0:38:e4:74:c1:54:7f:3e:
                    2c:90:dc:ba:df:d5:f7:3f:80:5f:29:c1:d9:93:f1:
                    93:22:82:cd:2e:d9:91:71:66:68:49:9e:7e:e7:2f:
                    b7:72:2d:26:69:d9:ae:c0:1a:5a:5a:13:db:3c:10:
                    98:84:d5:f8:b8:dd:e5:a8:e4:97:06:d0:fa:b5:36:
                    4e:dc:26:a3:64:c7:36:be:58:75:c4:7d:49:e1:b3:
                    49:61:3a:d5:6c:c0:bd:40:80:5a:44:9b:c4:41:c6:
                    4f:50:b2:41:6a:b2:67:d7:87:36:10:84:79:f6:f1:
                    ad:e3:c0:ed:02:db:09:81:81:90:68:5b:18:88:21:
                    07:a3:1f:ca:b9:94:5c:dd:b7:34:df:ff:f1:46:ff:
                    94:81:80:e1:ce:2a:6e:da:c0:a3:a6:68:87:94:fb:
                    1f:b9:26:cd:87:73:0e:3f:4e:ed:c8:e0:32:69:24:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F3:4F:C2:FA:C5:08:20:F9:E2:FC:A6:93:0E:18:CE:6C:FD:85:72
            X509v3 Authority Key Identifier:
                keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3d:e1:21:2d:6d:54:42:c7:69:d5:45:d6:7b:45:05:13:dc:
         4e:4b:8e:59:71:46:1a:59:d9:04:93:65:b3:81:00:55:a1:a7:
         c3:dc:d3:a5:d8:33:1c:8b:75:e6:c0:21:66:36:3f:d8:32:59:
         06:89:51:a7:1c:ce:4f:cf:f7:f3:9c:54:f8:6d:ad:7b:35:0b:
         9a:01:b8:23:61:08:da:2b:75:31:3d:8b:fc:fb:72:e4:3d:0a:
         d1:47:c0:39:04:36:fd:c8:e4:ac:b4:d5:26:1d:4a:80:c5:5d:
         22:80:2a:d9:35:f2:02:1f:ab:11:02:90:91:22:93:e0:ee:5c:
         54:91:97:df:13:17:7c:49:fc:28:34:ff:ec:fd:90:45:4c:f5:
         33:fd:db:42:4c:7d:bb:aa:4c:f2:bb:ea:43:09:70:f5:7e:6f:
         76:46:b8:6a:b4:79:61:7c:91:e4:15:3d:af:f5:8d:e5:e6:63:
         42:f4:fb:31:1c:54:f0:ad:6c:90:74:86:4f:0c:5b:25:b8:a2:
         e5:62:0d:97:73:4e:3d:19:69:82:9a:c8:c4:4d:ea:71:97:3d:
         cb:4e:b6:a0:41:b4:c0:d5:2b:4b:e9:91:6f:37:5d:f6:8d:ee:
         6a:e9:84:13:26:8e:d2:2c:e4:fb:2d:c9:1b:6a:d8:86:92:82:
         46:98:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:40 2026 by rpki-client