Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
File:                     -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json)
Hash identifier:          JEJjxC5l8Q1RqBz35+edUYdBLAdPN3zUA+FErgRQAkk=
Subject key identifier:   92:8D:E5:95:26:A2:21:5C:85:BB:28:A5:B4:AC:A6:44:1B:A0:A7:5A
Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
Certificate issuer:       /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Certificate serial:       0D1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
Manifest number:          0D02
Signing time:             Wed 22 Jul 2026 18:34:01 +0000
Manifest this update:     Wed 22 Jul 2026 18:34:01 +0000
Manifest next update:     Wed 29 Jul 2026 18:34:01 +0000
Files and hashes:         1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: TozeW9iPXx/cQsKKTa8j/UQ3ZJ5rD2T/iqwd1eoXpLE=)
                          2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: JgU3uHMLD1/j7W/OT0+XPxyyEVVhRjsVefR9u0vp7DA=)
                          3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: liqudEt944TPxlO6q13NxIFzhm26td/UszwH+GlqOU0=)
                          4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: APn+F9xRovOSeD45jGA8svXtlMxctUkywPcao3lKdl4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
                          rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3355 (0xd1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
        Validity
            Not Before: Jul 22 18:34:01 2026 GMT
            Not After : Jul 29 18:34:01 2026 GMT
        Subject: CN=6a610d19-aae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:12:27:f4:e5:16:80:ca:1c:73:2a:cd:b6:
                    61:73:41:5f:b5:31:2e:f6:fa:5d:a6:e8:31:64:d6:
                    7c:c5:41:a2:74:a5:86:9b:36:fc:71:84:b6:7a:9e:
                    0a:fc:8b:c7:bc:ef:76:63:67:dd:20:97:a7:08:da:
                    e2:f1:50:75:3a:91:f4:ec:83:5b:ed:1b:00:60:59:
                    ea:fd:d2:57:e3:9d:bc:a6:28:b4:07:18:7b:25:14:
                    90:09:7e:eb:c3:b7:b2:28:c1:c2:60:2f:ac:e7:21:
                    3e:fb:8c:4a:22:b7:1d:da:5b:7f:4f:ce:fe:8d:04:
                    5c:90:71:2e:0f:15:ce:a4:82:f7:c1:16:a8:18:32:
                    0a:3e:c2:f9:25:d7:a3:fe:ba:0f:d3:c9:5b:71:1d:
                    d5:b3:64:39:6e:65:06:dd:e3:f8:08:f6:bd:ee:c6:
                    a7:80:3e:2f:7e:ff:8c:98:69:ee:ee:1f:fe:d7:d3:
                    40:a3:cf:74:18:b7:5e:ab:8f:b6:c8:2a:48:26:98:
                    3a:79:15:33:de:88:58:3c:ce:4a:a9:8c:f7:2f:1b:
                    fa:2c:50:08:73:c2:13:06:19:a4:18:ae:fd:f3:eb:
                    20:2c:b8:76:ee:e8:2e:14:ad:d0:dd:da:70:c0:0e:
                    a1:38:d8:aa:a8:8c:5b:ed:6c:26:ee:7e:60:e2:18:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8D:E5:95:26:A2:21:5C:85:BB:28:A5:B4:AC:A6:44:1B:A0:A7:5A
            X509v3 Authority Key Identifier:
                keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:eb:36:59:cf:03:8e:96:66:ab:b8:69:c5:c6:7f:46:36:bf:
         f5:09:23:8a:d1:80:29:84:cc:23:8a:29:fc:03:ee:43:ad:f1:
         61:97:fd:2a:79:ec:30:6d:3a:a1:a6:24:23:d5:63:91:70:76:
         6a:97:24:49:5b:79:26:29:f2:eb:f0:56:e3:89:e3:d4:fb:d5:
         30:7c:6f:14:22:59:26:20:b1:df:92:b0:8b:8b:58:ae:41:18:
         fb:72:3b:d7:b1:c4:f0:f0:5c:4c:65:4a:f3:d0:0f:92:19:ed:
         d0:e2:ec:ef:59:bd:1c:94:6f:44:8a:70:d0:70:09:01:40:fc:
         bc:3f:5b:0e:b3:a2:94:ea:5a:ad:35:6a:7f:29:7e:0c:4e:85:
         ad:f4:35:9e:0c:04:0f:19:f0:1b:9f:bd:ea:3f:3e:e5:c9:b8:
         ef:36:da:9d:2c:f7:81:47:9c:5f:c2:64:33:08:2d:d4:93:79:
         0b:ae:9c:d5:1b:6d:11:30:fa:33:dc:74:df:18:b1:5c:38:23:
         af:d5:79:c3:81:c4:29:de:a4:b6:20:0f:aa:0c:05:d0:35:d2:
         64:b6:13:cb:6b:2b:95:e5:65:74:18:3d:6d:73:ce:bf:7d:72:
         66:88:f0:1e:4b:fa:13:5d:a1:b9:67:b7:8a:e2:3c:81:fb:20:
         6a:11:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:04 2026 by rpki-client