Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
File:                     EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json)
Hash identifier:          6olKBMmBnCCDuF1iGta0vn+MgY/TlOT4HpNL7OXabaw=
Subject key identifier:   B9:E9:DD:CA:E1:73:97:1F:E3:1F:DD:7B:15:46:19:CA:0C:AE:DD:62
Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
Certificate issuer:       /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
Manifest number:          0192
Signing time:             Thu 23 Jul 2026 05:50:21 +0000
Manifest this update:     Thu 23 Jul 2026 05:50:20 +0000
Manifest next update:     Thu 30 Jul 2026 05:50:20 +0000
Files and hashes:         1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: lj6uXby0meCBo3cAJw+6tRqatU1JLhJ3OoFJiStIekU=)
                          2: 6B10AF52379A11F0B3AC7740C4F9AE02.roa (hash: s7GLGtp6WWZ+8tGGQw/IP17opBzX+2RCOigurVObf4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
        Validity
            Not Before: Jul 23 05:50:20 2026 GMT
            Not After : Jul 30 05:50:20 2026 GMT
        Subject: CN=6a61ab9c-8130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:de:3a:23:55:9b:00:56:1b:20:8e:95:54:
                    b1:d7:cb:72:17:f9:48:27:d5:24:d2:6b:e1:33:67:
                    ae:76:6c:28:d9:31:53:b1:e0:32:19:24:3d:0b:d1:
                    7a:30:f4:b3:95:ed:fc:9a:e0:5c:13:87:2d:66:cd:
                    8d:5a:21:df:a7:bb:53:55:be:e6:28:ae:7a:f7:70:
                    5c:0b:e0:f9:87:f8:32:ea:20:27:1f:19:f2:29:09:
                    30:e7:68:e9:2d:af:b5:34:60:3b:a6:da:ac:a7:2c:
                    a0:e3:0f:e7:db:3f:2f:91:f5:19:ba:c2:dc:cf:32:
                    b1:70:aa:a0:6f:48:9f:9c:49:b5:73:95:3f:f5:60:
                    b1:8d:f3:78:3c:7a:fe:c1:3c:86:8b:86:be:6c:ff:
                    03:65:19:f5:ca:f9:86:3f:19:b3:4c:36:d1:84:48:
                    f5:05:97:1e:6d:d5:21:63:f8:72:f4:8f:7e:b8:8c:
                    4c:28:cc:7e:cf:d8:a2:18:9f:5a:71:58:e3:12:7d:
                    26:9b:1d:5d:2b:b0:99:6d:96:11:9f:68:d1:7b:1a:
                    5e:1f:91:01:25:8c:f2:3c:6c:93:71:e4:47:1e:46:
                    2a:e8:1d:30:62:87:11:fe:0b:be:b0:a7:4c:3f:9d:
                    a9:b1:19:1f:19:fc:3c:d2:69:21:b4:8c:3a:cf:c9:
                    09:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E9:DD:CA:E1:73:97:1F:E3:1F:DD:7B:15:46:19:CA:0C:AE:DD:62
            X509v3 Authority Key Identifier:
                keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:fb:c3:4f:e8:bb:a0:b9:6f:1d:01:b1:39:10:39:fa:59:6e:
         5f:b5:86:5e:7e:fd:c5:c1:1b:c1:8f:a1:8c:c0:11:7a:fe:dc:
         5f:31:df:80:1a:00:95:99:5b:ae:77:37:2f:1b:fd:0e:90:e7:
         b3:b3:d3:da:f8:b7:e6:9a:bb:1a:bb:8f:08:21:8f:be:bd:91:
         3e:83:0d:26:71:3d:10:d4:62:f7:46:ab:cb:c9:c8:39:99:49:
         98:83:3d:d8:0b:6c:7a:f3:3a:ca:1b:41:f2:91:15:67:b7:83:
         30:b7:50:f0:17:dc:52:c3:29:dd:72:28:c2:20:42:66:92:88:
         07:c1:87:20:a8:c5:8e:a9:91:e2:85:66:62:74:59:8a:49:ac:
         85:6c:a0:15:b7:19:b2:13:fe:1e:e4:0c:36:b9:21:f7:2f:84:
         3e:8f:32:15:bb:2f:fe:13:76:ca:eb:88:a0:0e:6f:d9:a5:28:
         8e:15:40:f4:31:ed:d7:8c:70:b4:89:64:fc:32:88:da:41:03:
         e6:7f:8e:59:c6:66:28:a9:8b:c2:af:eb:07:70:73:de:8a:cc:
         b6:20:bc:c7:46:92:cf:2e:c4:f3:8f:f6:24:fa:cc:d3:18:73:
         ce:d8:ec:69:93:5d:e0:e5:3c:02:71:71:6b:6c:84:28:85:99:
         24:4e:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:25 2026 by rpki-client