Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
File:                     sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json)
Hash identifier:          jMv/1ki0lhfSTKjk9JR+ect2Dq3X6DGtCVgK/2p2i/g=
Subject key identifier:   CA:AE:57:BB:48:74:63:CF:67:72:54:B8:DA:4A:96:8A:C5:90:82:76
Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD
Certificate issuer:       /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
Manifest number:          FB
Signing time:             Mon 27 Jul 2026 08:21:59 +0000
Manifest this update:     Mon 27 Jul 2026 08:21:58 +0000
Manifest next update:     Mon 03 Aug 2026 08:21:58 +0000
Files and hashes:         1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: FF1IwLoM73VvPy/eLnNHb5x+NCKcspGZyr0PyexBQQU=)
                          2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: oZt0DncXTvvxAu6W6XuMxsXB6h7QjU6a+ul8Hylf5MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl
                          rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
        Validity
            Not Before: Jul 27 08:21:58 2026 GMT
            Not After : Aug  3 08:21:58 2026 GMT
        Subject: CN=6a671527-aadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:80:6f:3b:f9:f9:83:7a:5b:64:1e:7c:97:
                    d6:4f:40:c4:54:61:67:73:30:28:7a:c5:16:d9:91:
                    36:6b:ca:2a:91:d8:6b:06:cb:10:ae:2e:3b:fa:8c:
                    e1:33:f5:b2:4a:db:1a:d3:48:a2:81:18:b8:d0:ab:
                    e2:29:63:40:4d:d2:45:b3:5e:20:19:8f:cd:9f:c7:
                    a9:19:fe:63:c3:c1:91:10:e4:91:9c:bf:81:1d:28:
                    dd:d4:d9:f0:4d:40:a8:e5:e3:eb:7d:b6:96:6e:7f:
                    48:27:ac:11:1d:cc:2d:37:36:82:8d:86:b4:66:72:
                    f1:d3:61:1a:2c:6c:52:cf:1a:71:13:45:02:8d:ed:
                    28:4b:66:32:2d:fd:9a:fa:72:e9:79:51:7b:63:77:
                    6a:0d:b5:fc:1e:f8:ce:00:c1:49:9b:d3:83:93:e6:
                    dd:71:1c:6e:8a:b3:1e:57:ad:f3:e0:c1:b1:95:37:
                    0a:f0:82:46:e4:52:38:5b:4d:43:fb:23:a5:07:b8:
                    47:fa:40:b7:c2:c8:48:62:45:1e:16:fd:b1:28:bc:
                    2d:2e:f2:57:9b:20:55:9a:96:51:c1:3c:96:09:8a:
                    95:ae:9d:34:d8:84:f5:d6:2f:ad:f1:63:42:51:01:
                    dc:37:3f:0f:16:3d:3f:80:2c:3d:87:bf:35:39:3b:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AE:57:BB:48:74:63:CF:67:72:54:B8:DA:4A:96:8A:C5:90:82:76
            X509v3 Authority Key Identifier:
                keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:3e:fa:51:b7:4e:c0:63:63:48:7e:a7:77:59:66:34:2e:
         41:d2:de:ff:bd:3e:87:42:93:e7:90:39:57:3a:e3:07:dc:ed:
         5b:90:bf:fe:2d:cb:a1:96:63:53:a2:dd:6f:b7:50:cf:32:2a:
         57:3b:50:de:0b:15:9f:dd:6f:6c:3a:78:a4:45:31:c7:68:dd:
         99:4b:8f:20:bc:36:11:35:07:16:8f:de:59:e7:8c:ea:62:41:
         4d:ab:38:5e:6e:77:e1:01:e8:ae:16:a8:3e:58:9a:3c:ba:a5:
         a1:79:34:bc:32:f4:f1:3f:7c:6a:40:9e:0a:2f:5e:2c:46:5c:
         8e:fe:c5:0d:7a:9b:c8:9a:d8:d8:bb:19:a7:4c:04:99:dc:a4:
         f4:5d:3b:8b:e7:8c:f4:0b:7d:b4:3b:c3:43:35:03:56:12:f5:
         06:eb:eb:0c:e0:5c:8f:79:d0:c2:90:0a:08:5f:5c:07:58:88:
         b1:6a:cd:97:9c:62:15:09:dc:3b:db:cd:79:6d:7e:0c:86:fe:
         a8:e5:0d:e9:df:95:8a:4d:3c:df:c9:7b:70:7a:25:0d:a4:c2:
         65:db:a7:fe:cd:a9:be:fc:60:23:37:5b:be:b4:50:57:c6:4f:
         a0:5b:d1:c6:07:d9:83:d2:e3:59:96:4b:35:cf:9e:43:f4:d1:
         d4:e0:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:00:54 2026 by rpki-client