Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
File:                     jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json)
Hash identifier:          V4+M0FtQ+Hv63VG5rpDbX75jL4M4DZDKfDpNs0GjtEI=
Subject key identifier:   2B:A3:C7:03:65:EF:58:60:02:E5:6B:4F:21:D1:68:48:2C:B8:9B:9D
Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66
Certificate issuer:       /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
Certificate serial:       0BEF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
Manifest number:          0BE6
Signing time:             Tue 28 Jul 2026 19:09:35 +0000
Manifest this update:     Tue 28 Jul 2026 19:09:34 +0000
Manifest next update:     Tue 04 Aug 2026 19:09:34 +0000
Files and hashes:         1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: OTRvyJ0g7wXIdf5XqKy7OMbdNdKFsmUmEhoOqCW7eB0=)
                          2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: ybu4TRi1kWC8ch99fNXPnIw41VP/i805qg2nqD/B1Eo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl
                          rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3055 (0xbef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91190A9, serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
        Validity
            Not Before: Jul 28 19:09:34 2026 GMT
            Not After : Aug  4 19:09:34 2026 GMT
        Subject: CN=6a68fe6e-2972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ed:ba:bd:fa:5e:ab:b3:95:e9:3c:ac:c6:35:
                    0f:34:02:ee:97:f0:08:86:e8:dc:e3:20:44:08:66:
                    3d:52:8f:a6:48:e2:97:5b:3a:a2:8b:c7:d1:8e:7d:
                    e1:77:66:f4:55:5b:e4:6a:b5:85:c9:13:0a:e5:36:
                    a0:67:52:01:6e:cf:41:f8:09:38:c9:16:f0:70:dd:
                    82:b0:a6:89:2a:59:ab:5c:80:2f:62:ab:fc:ce:11:
                    14:f2:34:c9:54:d9:bb:b5:7e:d4:0e:3a:21:a1:61:
                    7c:7c:60:9e:0b:3e:af:5b:6c:3a:1d:b9:8d:e5:8b:
                    5d:5a:ed:b6:d1:e9:c6:94:a3:68:9d:d6:77:2b:fb:
                    7d:17:64:b6:ee:2e:09:06:a6:de:59:5f:5d:09:20:
                    9a:ea:e4:c2:4f:03:b1:85:e3:b2:14:46:0c:90:de:
                    88:15:0e:ef:e7:11:1b:81:4e:dc:ef:83:b7:46:32:
                    e7:f5:41:99:ba:b1:da:43:5d:e2:e2:4e:60:ce:28:
                    17:2f:a7:6b:af:6a:4a:92:be:42:12:80:ba:92:7e:
                    be:80:b7:bd:41:b8:d3:68:56:7d:86:33:7f:c7:90:
                    35:02:a1:e2:83:79:36:32:db:52:4b:30:71:ac:73:
                    75:c1:ef:4a:1d:a0:92:2e:80:c4:38:b6:4e:9d:a6:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A3:C7:03:65:EF:58:60:02:E5:6B:4F:21:D1:68:48:2C:B8:9B:9D
            X509v3 Authority Key Identifier:
                keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c0:25:44:3e:91:15:a8:6a:91:69:83:98:b9:63:c6:bb:0a:
         83:21:d2:6c:0e:c6:f5:34:b1:79:80:72:3e:3f:90:5a:11:ba:
         50:72:2a:7c:42:58:bf:a4:3d:da:5f:a4:1d:40:a8:c1:26:8f:
         20:24:8d:e1:93:e1:bf:9f:63:dd:22:1f:5c:d0:fb:c7:f6:a8:
         6f:b7:4f:46:18:b5:01:5a:4a:b3:81:72:47:c0:77:9f:71:e0:
         d6:dc:bb:d9:17:f7:94:1a:29:b5:96:af:fb:7e:47:0f:b0:6d:
         40:d7:49:f2:d4:d4:b4:d2:ef:67:00:2a:69:bc:a9:a0:b9:56:
         c9:8d:aa:9c:a2:f4:fc:f1:b1:72:34:e5:54:d9:6e:28:2a:cf:
         f7:b3:3d:ec:08:aa:cf:99:27:61:29:94:cb:f9:06:0d:cb:21:
         85:fc:92:9b:98:ff:07:63:74:68:e3:d6:a1:09:97:8f:3f:16:
         26:60:b1:4c:92:f9:c9:0b:70:16:16:67:1f:2d:4b:a7:6a:1b:
         ac:28:a5:19:9e:9d:ff:ad:ef:e3:7d:92:ff:12:8f:a9:0d:99:
         00:c8:89:e4:b3:f4:64:6c:10:f2:ab:10:9e:f9:2f:b0:98:dc:
         0f:ac:8d:81:9b:3a:35:c6:b6:36:bb:f7:7a:4e:07:5d:4c:6d:
         6c:60:6e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:59:46 2026 by rpki-client