Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
File:                     FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json)
Hash identifier:          bwY0JnqCPMcjnDAz5CRkQWR40ONt+CPp0k4ScDP+LVs=
Subject key identifier:   13:DF:44:BD:67:0D:2E:8C:5B:35:7A:36:1F:8B:22:0C:F1:EB:BC:FE
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Certificate issuer:       /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial:       02D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
Manifest number:          02C1
Signing time:             Mon 27 Jul 2026 02:38:08 +0000
Manifest this update:     Mon 27 Jul 2026 02:38:07 +0000
Manifest next update:     Mon 03 Aug 2026 02:38:07 +0000
Files and hashes:         1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: ukLJ4Rrfg9QORDO9VFKhDt4PKOzcSvumrqclf2RvWqs=)
                          2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: 9LFaLc8meqLBp289mlYACBm+5v+NFT6EUQrjqf3aYig=)
                          3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: eg3pUwfwQDE+9YQzOG9BMq0Bkyet7crQzC1+mV0wngc=)
                          4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: EgHfoXDPWkSf9EMELvfB9wprgOdP6M6i5C22XOX+eIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
        Validity
            Not Before: Jul 27 02:38:07 2026 GMT
            Not After : Aug  3 02:38:07 2026 GMT
        Subject: CN=6a66c48f-1183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4f:4b:21:05:1d:c2:92:28:05:92:f0:db:7b:
                    1b:32:6c:cf:27:8e:52:99:18:0f:8b:30:83:2c:64:
                    8d:9d:32:42:5f:5b:5c:9c:b7:63:8d:79:e7:e7:88:
                    7b:fa:af:f9:15:e2:9c:92:f9:e1:b5:d0:28:3c:a8:
                    a1:d7:8c:61:ca:9d:f4:ef:29:8b:d9:cc:fc:0d:67:
                    29:eb:d6:1e:03:a2:c7:ea:9a:f3:da:e5:18:01:b6:
                    9e:c9:e8:4f:b3:f9:32:76:e4:ad:88:91:6f:75:c3:
                    31:75:7a:01:27:86:ca:b0:76:d6:c1:4e:92:94:be:
                    e5:fd:11:1b:2d:b2:ef:0a:59:68:a7:ea:7a:dd:ae:
                    51:02:37:7a:d5:bc:8e:9d:ab:2e:05:ed:a0:5b:e1:
                    3b:90:9a:63:88:95:40:d7:c9:c2:c9:a8:3c:1f:48:
                    de:05:4d:b8:88:0d:12:13:aa:3e:74:5f:1c:ae:09:
                    5c:f3:d5:ef:da:a7:50:90:a2:16:9a:2b:4e:56:c9:
                    29:f7:e9:15:fe:ba:81:32:b0:e4:c3:71:be:04:9b:
                    fa:40:7a:d6:dc:5d:58:74:dc:39:c8:08:df:c8:87:
                    e4:7a:1f:46:bc:1e:42:4d:a1:f7:92:7a:08:13:34:
                    fb:62:9b:aa:01:a9:69:fd:15:6b:3f:53:fa:aa:ff:
                    d0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DF:44:BD:67:0D:2E:8C:5B:35:7A:36:1F:8B:22:0C:F1:EB:BC:FE
            X509v3 Authority Key Identifier:
                keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4a:46:26:a3:07:61:5f:e2:93:1d:a5:1c:a5:c8:25:28:db:
         55:7b:7b:fc:31:a2:2c:0c:5f:02:41:82:8f:46:57:13:d4:4a:
         fd:65:85:68:0c:9e:11:c7:88:30:7f:e2:0f:4b:50:19:80:0f:
         33:f8:11:ef:68:cd:53:58:5b:fa:97:b8:ae:e1:95:41:5f:a5:
         b9:cc:96:20:6b:3b:7e:a4:1d:70:de:f1:f7:85:af:ea:d8:b8:
         a6:02:24:c8:5a:e7:a4:e4:27:7f:bc:74:0b:5f:75:57:e3:34:
         57:a1:d1:df:00:9e:18:fc:e2:90:e1:6a:53:8c:70:76:5d:c0:
         6e:6d:d4:0b:c4:21:fa:db:58:ab:53:55:06:4b:3f:41:be:6e:
         84:74:ad:a4:4a:2a:41:29:1f:ed:bc:b7:32:40:0e:97:2b:9c:
         c9:62:14:83:00:dc:3a:46:ea:c4:13:e9:ae:c4:26:de:ca:8a:
         70:2d:d1:48:3d:97:c6:85:c3:1c:3c:7a:31:33:93:f9:9d:35:
         b9:c0:1f:a7:9e:bc:11:7f:ac:da:ab:79:95:1b:c7:58:82:2f:
         8d:ba:71:a6:93:de:25:b4:33:4b:d5:3b:4e:82:9e:fa:cf:e5:
         db:14:20:6f:d8:0f:df:08:ab:92:84:54:0f:6a:30:47:4f:60:
         00:83:47:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:26 2026 by rpki-client