Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
File:                     0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json)
Hash identifier:          W4yA2upXgQ6GYHwekPTz455xzACrXtAMkreZqh38+i8=
Subject key identifier:   50:54:C3:14:27:81:D5:75:BE:71:4C:2B:D1:F2:33:75:F6:27:DA:15
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Certificate issuer:       /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial:       0C05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
Manifest number:          0BEE
Signing time:             Tue 28 Jul 2026 19:11:50 +0000
Manifest this update:     Tue 28 Jul 2026 19:11:49 +0000
Manifest next update:     Tue 04 Aug 2026 19:11:49 +0000
Files and hashes:         1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: wr1GbqQ03PPr2jaiuvybBub0O4AD2oX+mYgIggPcrDo=)
                          2: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (hash: RljGAjjwZ/pe6/m6sE6jioJluQgFaLFt64ScvocrVSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
                          rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3077 (0xc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
        Validity
            Not Before: Jul 28 19:11:49 2026 GMT
            Not After : Aug  4 19:11:49 2026 GMT
        Subject: CN=6a68fef6-bc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:3a:06:ef:45:c6:b1:f9:d7:d1:26:cc:4b:
                    d9:54:39:02:ea:e8:b3:66:ef:7f:52:f3:99:66:8a:
                    79:cc:2e:5f:90:20:0b:b8:ee:25:a1:38:f6:68:bc:
                    f3:86:84:15:e9:f0:bc:c5:b9:7d:d0:1e:8a:f5:d4:
                    48:8e:69:8c:24:58:69:c8:bc:d6:be:12:39:7f:40:
                    bf:ef:15:ed:0d:0a:89:35:50:08:6b:72:46:5b:3c:
                    4a:02:bb:23:ca:b7:1b:2e:fb:f9:c7:f6:74:4b:1d:
                    c5:ee:46:e5:2b:e4:07:74:ed:f0:21:ec:07:09:43:
                    c5:c7:67:51:fa:27:c6:be:6d:81:b8:cd:a5:1b:d6:
                    4e:ac:38:cb:9a:e6:ed:06:89:ff:fe:bb:db:17:e8:
                    a1:04:6e:65:a4:bf:38:e6:7d:3f:fb:81:29:f6:04:
                    5f:be:3f:b9:61:47:77:9e:80:bb:85:3e:2b:c9:41:
                    5a:3a:2c:db:93:66:c6:66:a1:01:e4:75:5f:37:87:
                    2c:1d:6a:a6:b1:f0:1f:d2:c0:63:be:b6:e1:f7:84:
                    69:11:e2:d2:0e:03:b3:64:56:48:e4:4b:a8:44:cb:
                    6e:69:c3:a6:d8:99:a4:98:51:05:9b:4f:e6:71:c9:
                    f8:11:99:cf:15:9b:26:be:ce:18:d1:21:40:11:c5:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:54:C3:14:27:81:D5:75:BE:71:4C:2B:D1:F2:33:75:F6:27:DA:15
            X509v3 Authority Key Identifier:
                keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2e:47:fd:1d:d3:44:46:77:38:8f:fb:ca:c9:dc:0e:b8:61:
         b4:04:36:0b:f8:b7:84:d0:c8:36:ca:35:c3:8d:11:a1:95:a5:
         de:80:bf:cb:63:87:cb:32:1b:d9:36:1b:9b:4e:e6:f6:e8:40:
         63:b7:95:85:75:50:a4:8a:95:e4:57:c2:5e:2a:7f:85:1c:d7:
         01:d2:bb:94:b9:a1:ab:d0:04:7f:9a:2a:2f:fc:71:88:ef:17:
         f5:52:45:fe:93:54:64:81:b1:fe:7f:4d:a8:4f:19:6c:9f:14:
         24:bc:ab:e7:26:10:bc:ae:ef:db:a8:1a:68:2b:a9:e0:c2:94:
         19:82:54:6f:ea:6e:50:10:a7:16:12:b3:3a:ed:45:03:82:0a:
         c7:a4:e7:1b:93:4d:d4:b9:79:6e:6c:11:ea:1b:39:d5:6d:b3:
         5f:bb:06:90:b7:3b:77:c0:5c:05:e5:c9:77:ac:fc:a9:4c:a8:
         25:4e:e7:6d:69:f3:93:07:58:b1:67:c0:e9:ec:16:7c:97:e8:
         a3:cf:75:c2:59:3c:ac:22:ff:70:a1:19:35:ab:c4:8f:ba:8d:
         98:64:94:8d:60:4f:df:6e:cb:64:1d:44:00:2e:18:fd:fa:cf:
         56:39:27:0d:c6:d5:70:01:74:cb:92:91:03:5f:ab:2d:d5:ca:
         20:5a:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:56:14 2026 by rpki-client