Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
File:                     F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json)
Hash identifier:          FBMDzV+f6sjZsEnM/9B2uoyryP8+OqDKTlvsstzSbMU=
Subject key identifier:   83:DF:FA:DA:6F:93:4B:D8:B3:14:B1:72:5B:E5:47:50:E3:85:18:72
Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
Certificate issuer:       /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
Manifest number:          0163
Signing time:             Thu 23 Jul 2026 06:34:24 +0000
Manifest this update:     Thu 23 Jul 2026 06:34:23 +0000
Manifest next update:     Thu 30 Jul 2026 06:34:23 +0000
Files and hashes:         1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: Sns8COrav/4EDtr3kDXEV5JUUyOUGzh5GeqEituQiPg=)
                          2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: Sy6cRszkN1joBse3YSNJ6ZAfwoikvcSiyyXdPrmFTpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
                          rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
        Validity
            Not Before: Jul 23 06:34:23 2026 GMT
            Not After : Jul 30 06:34:23 2026 GMT
        Subject: CN=6a61b5f0-5773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:d9:29:88:36:84:eb:e2:af:1e:03:5e:37:
                    0a:17:ec:bd:34:25:c3:8b:ac:15:93:80:5b:3f:cf:
                    dc:db:70:b5:06:7c:1e:20:c0:40:63:a7:9f:9f:57:
                    9b:13:07:64:bb:fb:45:e3:48:f6:d0:92:12:64:1a:
                    8b:87:05:e4:fd:bc:75:c0:ea:3a:75:3e:be:8f:bf:
                    72:22:ed:f0:54:26:81:df:c0:5e:a9:30:d5:c1:66:
                    25:15:ac:68:57:f8:31:fc:ba:2b:94:97:04:69:73:
                    8c:e6:e3:64:d2:df:7a:74:b9:42:2d:51:19:81:ce:
                    b7:24:56:85:e5:0c:02:12:24:46:97:ed:88:3f:5a:
                    d0:6c:49:4a:8f:47:7a:c3:4b:b6:54:72:38:4b:69:
                    a6:8c:5f:92:a7:a8:1d:38:9b:09:e5:02:df:a6:c3:
                    59:49:a3:d7:ff:76:0b:70:1a:ff:6a:1a:0a:7f:0b:
                    6c:c7:35:8d:75:3b:f5:ec:e7:9c:0a:b8:fd:10:e0:
                    be:2a:b4:33:c2:57:bd:35:40:9a:65:1f:ae:7d:42:
                    59:67:59:67:3f:f6:96:6b:e5:1a:95:f1:a4:84:78:
                    e9:f8:c8:67:01:5b:86:ad:e1:d7:95:12:77:0f:68:
                    7b:e7:10:10:f8:78:4d:6b:b6:fb:80:69:71:78:e0:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DF:FA:DA:6F:93:4B:D8:B3:14:B1:72:5B:E5:47:50:E3:85:18:72
            X509v3 Authority Key Identifier:
                keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4d:8c:8f:d3:34:37:76:47:e1:5b:fa:0a:d2:99:3b:b6:36:
         c3:c4:90:ea:f8:62:96:01:80:1a:60:21:18:b7:8d:c9:a8:58:
         1a:75:b3:48:04:27:fe:74:35:cb:c6:28:d2:6e:36:78:f4:ac:
         a0:05:a4:d7:33:3c:e0:42:22:70:95:1d:90:f9:6e:22:f3:7a:
         fb:2b:38:a0:7b:17:54:4a:ee:10:1e:94:d1:92:94:8d:0a:ea:
         ad:65:f4:a9:6a:9f:aa:ab:36:5b:8f:20:e4:7b:81:90:e2:5f:
         06:13:51:e8:32:52:63:29:a3:f3:ee:3b:1c:54:7d:ac:8e:b4:
         98:ac:87:35:af:87:39:dc:8a:74:b7:d3:01:88:aa:5a:89:6c:
         d7:87:85:b9:b1:85:58:a9:70:ad:fe:8c:de:5a:25:e2:8a:80:
         35:43:5b:8d:0a:31:f7:10:f3:49:f2:71:3b:db:30:ca:88:32:
         0c:41:0e:36:4a:89:f8:ed:1e:82:8f:69:4e:64:3a:00:5b:a3:
         f4:69:7a:80:79:2e:31:b0:f1:98:1b:28:35:35:b1:46:c6:44:
         fd:25:b2:f0:1c:e8:44:72:12:50:98:fe:87:0f:0a:15:2c:0c:
         b5:e1:44:62:d0:9c:87:63:8f:e8:e3:45:6a:6a:bb:35:a5:cb:
         6f:ef:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:32 2026 by rpki-client