Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File:                     Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier:          GOl4+YUsIVOPuhhcbQA/EvvSpXwNp3vQXP94w5BbElg=
Subject key identifier:   6F:28:0C:C5:7D:3B:9A:01:6D:B4:64:AE:94:EF:AF:5C:5C:CF:75:17
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer:       /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number:          0241
Signing time:             Wed 29 Jul 2026 03:35:35 +0000
Manifest this update:     Wed 29 Jul 2026 03:35:34 +0000
Manifest next update:     Wed 05 Aug 2026 03:35:34 +0000
Files and hashes:         1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: r2mD8ojzwOPpnAPXJ6wcx2aasDE112UW/bmIbHvV6D0=)
                          2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: 1pvzyLV21JPKIBe4+vpM9SsFH5SGt6T5Irf10NoZGcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
                          rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
        Validity
            Not Before: Jul 29 03:35:34 2026 GMT
            Not After : Aug  5 03:35:34 2026 GMT
        Subject: CN=6a697507-85c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:60:0d:29:aa:19:8c:e4:20:8e:9b:30:4d:88:
                    1f:4f:da:67:17:4a:fc:0d:8a:ee:c8:4e:ed:21:53:
                    7e:5c:2a:77:b1:17:16:f1:0c:fa:29:af:38:b2:f2:
                    86:a7:1a:44:f8:27:ee:50:86:dd:88:5c:01:9f:50:
                    51:28:73:1b:c6:38:cb:f1:cb:5d:94:87:9c:08:6b:
                    91:33:a9:5a:19:b2:49:e9:58:91:43:9b:c2:c0:3b:
                    34:7f:95:d2:b3:6f:55:81:b3:26:df:e7:ed:55:dd:
                    e2:8d:2a:12:be:0d:b6:e7:1e:08:79:4d:ab:95:d7:
                    2c:86:cc:a3:37:9a:ce:e0:b7:7c:07:d6:1e:55:23:
                    4c:72:58:67:cd:ad:74:59:bd:40:2c:43:f9:64:89:
                    9f:7d:eb:fa:a8:2a:fa:6e:bb:91:08:05:ea:24:83:
                    9d:a2:45:0f:f0:ce:9b:92:52:b9:12:ea:b9:96:21:
                    15:a4:0b:f9:fc:c7:99:07:4b:36:d1:63:ef:a2:27:
                    3f:6f:51:bc:6b:a9:ad:50:25:c1:e1:f9:46:d4:b6:
                    9f:d1:35:ee:b1:1b:85:af:f7:76:a4:71:71:2e:87:
                    2c:9c:82:ad:ab:dd:84:cb:94:e6:76:ed:01:28:6c:
                    a8:7d:3e:cc:b1:67:f7:18:bd:c2:27:7d:5b:0a:27:
                    49:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:28:0C:C5:7D:3B:9A:01:6D:B4:64:AE:94:EF:AF:5C:5C:CF:75:17
            X509v3 Authority Key Identifier:
                keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:52:68:e2:10:78:44:73:d7:80:75:53:1a:5d:01:6a:6c:eb:
         9a:14:dc:39:4f:cf:3b:54:24:3c:56:f9:48:d0:df:13:c8:50:
         5a:4d:c4:2b:ec:c9:56:06:bb:09:24:b3:78:76:de:81:25:56:
         d5:ff:e5:ec:08:6e:c3:bb:dd:cd:bc:12:76:1e:84:1a:15:75:
         3a:1b:ab:20:e6:a2:cb:73:42:0a:37:f3:5f:fc:c1:22:fe:e6:
         27:86:6c:82:55:75:38:55:dc:41:0a:7a:49:fb:42:49:66:e2:
         b3:ac:ed:ee:08:91:e0:c9:48:0c:1b:5a:23:9d:a9:07:cd:0b:
         7e:04:d7:8d:e9:3e:fb:fa:41:c6:65:6f:34:62:90:03:ab:6f:
         d8:62:c3:cc:1e:e4:91:e4:68:44:57:48:2e:35:e2:a8:86:21:
         4f:2f:52:c2:e9:53:57:86:39:46:a7:47:b9:d9:19:c4:a5:71:
         13:c5:04:f5:9a:fb:e4:f0:7d:66:de:30:a1:72:23:b3:93:04:
         c1:f1:f0:c5:ca:15:66:5d:60:d8:eb:e3:ac:cd:d9:5f:71:08:
         d1:d7:57:c7:fc:05:4b:c2:eb:3c:46:eb:e0:59:c6:a9:5a:3d:
         c2:96:4b:bd:b7:8a:90:03:29:fa:39:bf:6d:13:3a:1f:4d:b0:
         18:df:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:13:20 2026 by rpki-client