Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
File:                     CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json)
Hash identifier:          r7F9xzfDtP5f0cjCYPO8Zb6AYMvhM1nuvi9hcTE/QW4=
Subject key identifier:   95:ED:43:CD:29:AC:D2:85:CB:6A:38:94:22:77:68:47:D8:B6:4D:66
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Certificate issuer:       /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial:       059C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
Manifest number:          0594
Signing time:             Wed 22 Jul 2026 23:57:58 +0000
Manifest this update:     Wed 22 Jul 2026 23:57:58 +0000
Manifest next update:     Wed 29 Jul 2026 23:57:58 +0000
Files and hashes:         1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: ppbBzzNT7RuNw9+H4/ACtC6N60E7lXIQaaixF6Mbv94=)
                          2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: W1EP3IxXiJCk2UOf11rTChQuuxRnXDrkYltbGuUo73Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
                          rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
        Validity
            Not Before: Jul 22 23:57:58 2026 GMT
            Not After : Jul 29 23:57:58 2026 GMT
        Subject: CN=6a615906-64b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e8:e2:c2:67:9c:ef:c6:a8:37:53:b4:80:10:
                    1e:ec:4b:3c:3b:02:71:91:d4:3f:ad:10:b9:24:17:
                    a9:d2:db:be:5b:9a:b7:f2:9a:37:4f:ec:f1:f5:cf:
                    3d:c1:0d:94:af:18:08:b9:23:a6:0b:d3:31:0d:7e:
                    c5:f2:99:e8:f9:e1:3e:bd:26:7e:72:f1:fb:ca:b8:
                    f5:ae:54:4c:d6:9a:8b:db:57:b8:d6:00:81:d4:a4:
                    13:f3:0d:7f:82:51:0e:30:45:6f:78:70:05:6a:c5:
                    1c:a3:1d:18:ad:8e:95:ab:ed:fb:f7:7a:8b:37:82:
                    81:a5:28:a9:71:67:3b:58:71:da:27:e7:05:30:24:
                    e7:1f:3d:d7:39:96:ce:91:f3:5a:bb:32:f5:41:00:
                    ef:86:8c:68:33:19:89:c5:c4:06:f3:91:b2:3f:58:
                    db:cf:d4:43:99:df:32:1d:6f:34:0a:d5:0d:ee:ac:
                    8e:5a:7e:19:f0:4a:6f:93:60:34:fc:42:01:a3:d1:
                    94:00:d4:a5:de:28:ca:42:2c:7d:04:b8:11:1d:54:
                    5d:d4:d2:c7:02:41:a3:c9:7b:4e:1f:3b:bd:39:11:
                    87:ba:29:1f:fa:0f:6f:24:4b:8f:f5:f3:31:5d:c7:
                    eb:6f:74:b2:da:fc:4f:ec:0d:5b:29:8d:1a:4f:68:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:ED:43:CD:29:AC:D2:85:CB:6A:38:94:22:77:68:47:D8:B6:4D:66
            X509v3 Authority Key Identifier:
                keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:be:b8:59:70:94:d6:86:97:8d:47:7a:e5:1e:51:46:60:53:
         9a:9d:97:3e:95:47:46:54:45:a7:40:14:c1:49:2f:0d:fc:12:
         fd:f5:95:98:9a:32:62:25:60:34:e5:6f:02:c9:36:ca:46:f4:
         96:43:b0:8f:54:00:5e:59:82:27:9c:26:40:7c:ea:a6:64:4c:
         65:7f:94:88:be:e3:82:70:ce:69:85:60:3f:a7:6b:a2:a9:7c:
         7b:a5:2e:0d:5f:10:f9:5c:82:6d:01:55:e1:8c:1f:c0:4b:33:
         52:98:c2:f5:35:92:4e:a6:dc:ed:b0:73:5e:a3:9a:82:89:bb:
         bc:c5:69:72:fd:81:cf:2a:22:bc:8a:91:50:cc:64:36:ae:0c:
         c6:cf:6a:48:c2:4e:c6:5f:66:66:d8:6f:8d:ea:0a:d3:25:ee:
         0f:c0:2d:25:2b:63:59:e6:38:04:e1:b5:56:f4:28:73:51:4c:
         0d:51:e9:af:81:ab:54:cc:a8:74:62:b6:2c:96:c8:48:69:52:
         65:9d:5f:60:0a:0b:ad:6e:6f:d4:45:42:31:7e:5c:95:48:3a:
         0a:74:6e:f0:14:21:ff:3b:01:3e:9b:c7:95:67:99:7d:8f:e5:
         24:84:b6:b1:c2:db:0c:a4:1d:26:4d:14:7c:55:75:5b:1b:e8:
         dd:cc:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:51:31 2026 by rpki-client