Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
File:                     BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json)
Hash identifier:          kVZ+z+bxP9qqUd3y5fTMpltpu+b2BCpeM8PzHOGc8zQ=
Subject key identifier:   59:9B:04:14:E8:DB:04:CD:72:A3:E1:A6:AE:8F:E5:3D:BB:F0:13:E7
Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
Certificate issuer:       /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Certificate serial:       07C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
Manifest number:          079A
Signing time:             Wed 22 Jul 2026 21:47:50 +0000
Manifest this update:     Wed 22 Jul 2026 21:47:49 +0000
Manifest next update:     Wed 29 Jul 2026 21:47:49 +0000
Files and hashes:         1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: bz8xFosFHZheeYXZXHzTWzLfY4YfjLrt0ump/xWhUfg=)
                          2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: Bnf+utMQMnh8zQjddBOCbwOT7nCJfAIRhLCPTrWZ8Xc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
                          rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988 (0x7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
        Validity
            Not Before: Jul 22 21:47:49 2026 GMT
            Not After : Jul 29 21:47:49 2026 GMT
        Subject: CN=6a613a86-33cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:a9:10:75:52:6f:de:76:ab:ad:c9:33:71:
                    9c:f0:c7:e8:d4:6c:85:e2:bf:ed:85:d7:c5:36:cd:
                    c4:ed:01:c0:d5:cb:02:f9:6e:cd:4f:0c:fd:a2:88:
                    63:37:1a:68:45:1a:2f:fe:0c:a6:03:fd:85:eb:91:
                    f1:6e:95:7d:f1:51:67:a6:cb:27:e1:9f:e1:18:6b:
                    e1:e3:45:7c:aa:b3:7d:f2:a1:a1:d0:63:43:e0:fa:
                    83:44:6d:7b:58:f5:d2:94:84:bf:2a:08:fc:2c:30:
                    75:c0:ec:87:e4:3e:04:5c:f6:9f:7b:4b:16:bb:74:
                    52:e1:a4:f0:eb:e6:dd:9d:76:5e:70:a7:5c:ef:85:
                    73:82:a7:82:47:05:81:d9:3e:6e:d8:5b:e4:8e:f4:
                    3b:1c:ba:db:38:f9:ea:05:b0:95:7b:49:e9:3b:2f:
                    a9:cb:fb:3f:29:1d:8e:02:c2:7e:1b:5d:f2:45:8c:
                    04:1d:cb:d3:20:0a:ec:16:8e:67:35:df:51:84:4d:
                    61:c2:a7:15:a5:54:bb:7f:5b:6b:46:b9:ae:1b:53:
                    ac:e3:73:6f:62:fb:69:2e:e6:1d:91:3f:7a:5a:d2:
                    60:06:34:ad:c8:7c:68:8b:8b:29:51:2c:3f:ae:71:
                    06:ff:62:6f:60:ed:73:41:af:1d:a7:8b:10:20:14:
                    f8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9B:04:14:E8:DB:04:CD:72:A3:E1:A6:AE:8F:E5:3D:BB:F0:13:E7
            X509v3 Authority Key Identifier:
                keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f2:40:27:13:a7:ec:ce:a4:6f:dd:df:5f:04:82:3a:d4:2f:
         84:5b:34:2f:cc:aa:52:b3:0b:a3:be:3d:10:af:b3:0e:01:a4:
         2a:fa:02:94:d2:d5:ec:a9:e0:c2:68:b2:46:b4:24:24:ba:f6:
         ed:4c:f9:a3:f3:ce:a9:59:f3:fb:8a:4f:90:a4:58:7e:7b:48:
         ec:df:ad:fa:07:91:1b:51:73:07:ca:6c:95:f1:d2:2e:b8:f3:
         32:c4:09:76:e0:05:30:c8:27:50:32:a2:ad:c7:61:b5:e7:3d:
         7d:56:78:a9:18:ff:6e:0e:85:3f:ff:18:20:03:57:fc:32:bc:
         28:46:e0:79:ea:1e:8d:89:10:d4:3e:fb:18:84:09:39:9f:53:
         93:83:ea:5b:c1:cf:41:0f:f7:a5:79:75:1f:c1:7d:27:56:96:
         79:4d:bb:81:d7:1e:87:51:87:4d:39:78:7f:1d:3c:c6:1c:8f:
         b4:eb:77:9e:3c:03:74:81:05:9d:cc:84:5c:cc:48:ec:01:b7:
         44:82:24:71:27:13:00:54:0f:af:81:16:62:c7:16:ad:4a:fa:
         9f:b3:30:9f:e6:87:f1:16:27:4d:7d:d6:b7:d0:25:33:48:df:
         20:97:09:26:7d:20:3c:91:3f:2e:a1:da:f2:0a:1c:03:66:1d:
         d7:00:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:30:12 2026 by rpki-client