Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
File:                     F19zLkbbq-mqcYHfg8cm729vW8I.mft (raw, json)
Hash identifier:          vLiFZVUgD7vkpPwsB8gYEqxUBpy0DnDnityn50YZ+mA=
Subject key identifier:   A5:D3:0B:9D:81:DB:E3:56:C5:B1:01:CD:5B:E6:CB:15:FD:42:4D:5A
Authority key identifier: 17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2
Certificate issuer:       /CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
Certificate serial:       04C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
Manifest number:          04BD
Signing time:             Thu 23 Jul 2026 00:40:56 +0000
Manifest this update:     Thu 23 Jul 2026 00:40:56 +0000
Manifest next update:     Thu 30 Jul 2026 00:40:56 +0000
Files and hashes:         1: F19zLkbbq-mqcYHfg8cm729vW8I.crl (hash: 3Fe3COBX8ZQlk+0yl440tdyjlEpnMn2fS+AkIHS4yCE=)
                          2: 76FA00E87EE811EC8D796C6EC4F9AE02.roa (hash: lfsTIDGCnQK6PH10P+vYNBk6SfyJpYoVAr9CgVPitiE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl
                          rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F680E, serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
        Validity
            Not Before: Jul 23 00:40:56 2026 GMT
            Not After : Jul 30 00:40:56 2026 GMT
        Subject: CN=6a616318-3eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:83:55:bd:27:3c:92:91:48:7b:e3:31:bc:
                    d3:9b:b5:7c:f1:22:ff:e1:7d:2e:00:0d:5e:ea:37:
                    23:fd:de:1b:3e:cb:95:57:06:95:67:fd:da:b1:b7:
                    5f:06:7c:08:fa:da:8a:b8:44:2a:68:7b:54:69:6c:
                    9c:f1:7a:df:30:35:83:86:b1:b3:ba:71:54:2d:e2:
                    4d:d8:d2:26:1c:46:aa:b6:93:ff:49:81:c9:2c:b4:
                    23:e1:49:b7:2c:05:bf:f4:ec:65:6c:25:1e:c9:c5:
                    4c:dc:6c:0b:19:d1:05:01:c2:0e:98:51:15:aa:dd:
                    64:17:42:14:9f:9b:fd:9c:cf:f5:b1:88:06:05:17:
                    d1:d3:50:03:95:de:30:e8:17:e5:aa:8c:50:20:0a:
                    53:18:c8:19:9d:17:7c:c5:32:93:b1:d1:25:ef:5f:
                    e0:47:b1:e5:f0:72:27:8d:8f:ba:43:f7:74:b5:bf:
                    69:e8:4d:88:86:00:92:18:d0:a3:c3:de:6e:77:e4:
                    5a:16:26:03:2e:a2:a5:85:d4:3e:c1:08:b1:e9:14:
                    8c:64:95:60:e8:77:3d:42:81:a9:e4:c9:65:1b:80:
                    45:2a:8e:2a:ff:e8:06:c6:f4:7d:56:0c:aa:73:5f:
                    33:07:88:c7:7b:a4:34:31:15:16:cd:c0:aa:24:63:
                    8a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D3:0B:9D:81:DB:E3:56:C5:B1:01:CD:5B:E6:CB:15:FD:42:4D:5A
            X509v3 Authority Key Identifier:
                keyid:17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:63:ab:32:f2:68:de:88:cf:3c:87:2b:d1:00:6c:33:9c:3c:
         88:d4:99:56:f5:5d:9d:a2:69:93:68:36:9d:0a:4a:ed:5e:d9:
         e1:25:80:6b:55:75:c6:55:8a:43:80:09:76:79:22:4b:73:c0:
         fc:50:11:2a:85:5b:33:b6:56:2f:2b:d0:dd:22:0f:b1:b9:0e:
         eb:c7:57:d5:ed:97:4d:34:6e:22:98:59:e2:1f:16:cf:74:d9:
         81:b4:61:58:29:e9:0f:6e:70:d0:75:a2:37:8f:d3:08:9a:2a:
         75:83:a0:d6:dd:b4:18:5f:c6:6a:cd:47:e9:fc:78:8a:d7:77:
         05:f8:3b:d1:af:82:96:7c:e9:2c:ce:c6:0c:65:49:00:d9:af:
         06:6f:5f:b4:dc:e1:fb:a3:ca:5b:5f:56:b4:63:a3:24:03:e3:
         b1:72:a0:d3:aa:1b:6f:21:59:59:be:05:90:d8:52:8a:f6:3e:
         71:f5:fc:4d:49:53:05:da:ec:ac:cc:44:f1:98:ac:00:9b:2c:
         f7:7c:a0:88:8a:2f:88:61:de:51:a8:95:de:1b:d7:b1:00:a1:
         ce:a4:7a:ee:30:38:59:42:1a:fd:9b:2b:b7:3b:4d:9a:9a:f6:
         18:be:15:da:c3:7c:fc:27:8a:48:c1:b6:75:b9:b7:7b:55:a6:
         6d:c6:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:59 2026 by rpki-client