Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
File:                     AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json)
Hash identifier:          DzADh70pe+QUtNyWjtEDYb+CaXsqcM/gKVXLIqko0EM=
Subject key identifier:   5F:07:3E:85:CF:8E:6B:9D:98:52:94:BF:7C:9C:19:37:E1:1D:2E:DA
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Certificate issuer:       /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial:       0A3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
Manifest number:          0A2C
Signing time:             Tue 28 Jul 2026 20:04:02 +0000
Manifest this update:     Tue 28 Jul 2026 20:04:01 +0000
Manifest next update:     Tue 04 Aug 2026 20:04:01 +0000
Files and hashes:         1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: mgblINkiwFY5ZcQhcRz4NqsetejBdLiBgqN6WFMj0OI=)
                          2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: MKSHGi4h67nwUpcuBwoNEL48SK6GQQ+1zuIScKP5bro=)
                          3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: Sblu535PzvGVdxFBEruufBhd0MyzgVdZtuh1fI35ITw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
                          rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2623 (0xa3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
        Validity
            Not Before: Jul 28 20:04:01 2026 GMT
            Not After : Aug  4 20:04:01 2026 GMT
        Subject: CN=6a690b31-6fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:dc:ec:99:ac:4c:b1:3b:ae:ed:f0:14:bc:
                    e8:de:b9:ef:e3:07:f1:0d:75:59:81:5b:1a:88:19:
                    27:a7:1c:d4:cf:49:b5:55:65:f3:d2:cc:7f:56:36:
                    26:1a:d8:71:1b:30:78:19:1c:ec:6c:4f:a1:d0:fa:
                    72:39:62:53:8f:f4:dd:26:f4:6c:3e:c8:0f:a9:ff:
                    8e:e2:a7:c8:76:33:89:28:9b:23:df:11:a4:ec:03:
                    e6:86:cc:d9:27:f6:66:70:65:49:66:87:7d:a2:b8:
                    0a:9c:e8:b6:db:80:95:55:67:e8:fb:9c:78:a3:19:
                    0d:93:76:ec:42:8e:a7:1e:30:2f:b2:a0:13:70:72:
                    d7:f4:37:50:b9:f3:bb:ef:8d:f4:68:b7:40:6a:83:
                    6c:a2:31:86:20:38:2b:52:b2:54:0d:fb:8b:dc:4a:
                    1a:d8:98:cc:fa:af:c1:0d:db:da:0d:bd:0f:31:a9:
                    c5:10:3e:fb:17:09:2f:65:25:50:1e:72:62:c7:a3:
                    53:da:45:2f:3e:c6:eb:35:21:20:e1:75:e4:30:49:
                    80:b4:0b:ec:14:c2:bc:b6:e7:f2:cd:be:31:e6:8c:
                    dc:5f:4c:b2:e7:08:94:0f:cb:e4:9f:86:f3:c6:cc:
                    31:67:dd:a5:25:63:0b:7d:0e:d5:ab:b7:72:f2:ec:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:07:3E:85:CF:8E:6B:9D:98:52:94:BF:7C:9C:19:37:E1:1D:2E:DA
            X509v3 Authority Key Identifier:
                keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:1f:b5:94:4f:b4:6d:25:45:67:ae:75:77:5b:71:51:c7:7f:
         32:d7:e2:26:54:10:90:60:fa:25:e5:d5:02:a2:5c:db:28:90:
         96:43:99:72:cc:b6:83:fd:81:46:8e:c2:24:41:3a:91:01:7d:
         e2:17:11:7c:fa:a2:1c:c0:11:38:51:48:e5:82:d5:1c:16:4e:
         2f:44:e8:5e:9e:62:32:24:fd:d6:d8:06:ed:e7:a3:73:f9:11:
         f3:51:c5:74:07:56:6d:ed:42:db:ec:4a:14:47:51:8b:0d:d6:
         68:24:c0:5f:40:9f:ba:84:c9:b8:24:f3:13:bf:e5:66:4b:71:
         d5:2a:c8:5e:97:e1:62:06:cb:87:08:bb:cb:24:f3:3b:bd:5b:
         d0:c8:7a:c0:8f:bb:b0:76:ab:d3:2d:2e:60:04:14:39:b7:d5:
         94:da:d2:3c:e2:8d:53:4c:61:09:18:79:96:f8:df:37:3d:f3:
         8b:56:0c:bf:79:64:8d:0c:cb:cd:7a:af:05:a1:de:d3:f8:84:
         8f:a4:d0:ec:3e:3c:67:82:c2:15:b8:74:43:20:9f:23:8b:09:
         89:7e:44:de:e6:6e:d9:d0:e0:7d:9d:91:08:d0:fc:76:39:90:
         24:06:dd:12:fb:e1:80:d7:d4:4b:78:9e:94:78:ce:31:f6:1c:
         88:f2:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:34:43 2026 by rpki-client