Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
File:                     PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json)
Hash identifier:          KMndsRHDG7B8fpDIL8+N0NnWi9hSWjmMnr8XWguovw0=
Subject key identifier:   8F:C5:B6:F8:36:68:B0:E6:0C:CA:AA:80:F7:43:0A:66:C6:E0:8E:61
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Certificate issuer:       /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial:       090D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
Manifest number:          08B8
Signing time:             Tue 28 Jul 2026 21:13:23 +0000
Manifest this update:     Tue 28 Jul 2026 21:13:23 +0000
Manifest next update:     Tue 04 Aug 2026 21:13:23 +0000
Files and hashes:         1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: b7m+OpgHR1TAaIJ9WSK9TT25VrZo1fEfKV9amQAOzAQ=)
                          2: CD1E94321A7D11F09A63C576C4F9AE02.roa (hash: izTNp/JGEMDm9FjJb1Cp+fcuTZ2LOC/hwPNrIFeFyK4=)
                          3: DD8B40E41A7E11F098A37378C4F9AE02.roa (hash: +7lOcEWjzdH/XplyA+gRPVuruxEgb/MpWHfUAeK3/gQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
                          rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317 (0x90d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
        Validity
            Not Before: Jul 28 21:13:23 2026 GMT
            Not After : Aug  4 21:13:23 2026 GMT
        Subject: CN=6a691b73-142b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:01:67:4e:be:7d:d5:b8:07:68:9e:2e:d8:
                    60:c8:f0:0b:b2:f1:32:23:29:f5:a1:83:b5:2d:59:
                    f1:79:49:e2:ad:b5:d9:f6:51:27:8f:5f:ad:e4:f8:
                    eb:50:8f:08:a2:be:77:08:c2:97:f2:c8:01:ab:9d:
                    54:5e:b4:a5:0b:ee:3f:ea:8b:d2:ac:b9:3a:ba:b5:
                    3f:78:9c:a4:70:a9:f1:83:21:c4:d0:cd:9d:b2:cf:
                    d9:d7:a1:d0:35:98:f2:b0:cf:93:43:43:f7:c6:21:
                    e6:c4:a7:04:78:c7:a0:b8:aa:b8:04:e1:6c:47:9d:
                    7b:25:ae:0f:2c:a8:6e:48:a6:57:f3:b0:8d:0d:f0:
                    f5:d0:a7:76:db:e2:ae:3a:8b:0f:56:75:d9:55:a6:
                    dc:80:b2:91:bb:2b:08:1b:26:56:a9:dd:91:09:8d:
                    97:55:5d:a5:23:cf:15:1b:b6:46:9b:cb:0d:8e:6f:
                    1b:c5:42:77:8d:61:84:52:3a:41:0e:ea:00:91:54:
                    07:0f:e2:7e:9c:ab:f0:ca:be:83:df:aa:1e:0d:cc:
                    be:7a:46:14:e3:ab:85:38:f2:e4:68:3d:ca:af:35:
                    43:e8:38:40:b3:fb:01:77:63:10:56:ff:c4:6c:5d:
                    30:20:ca:33:f2:fc:f8:40:68:b0:08:21:32:19:b0:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C5:B6:F8:36:68:B0:E6:0C:CA:AA:80:F7:43:0A:66:C6:E0:8E:61
            X509v3 Authority Key Identifier:
                keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c8:4e:6e:24:ea:a2:3a:90:64:18:6c:f4:fb:43:ac:8b:8e:
         9c:d2:11:4d:33:3a:21:2a:30:d6:c7:7c:b6:93:03:ef:32:47:
         5d:dd:3e:59:40:9f:11:0d:9b:86:e5:70:32:13:a4:e3:3e:7b:
         2f:2e:77:3a:f3:3e:24:f1:09:42:fb:8f:0c:dc:46:c5:e3:56:
         8d:3a:22:f5:85:a0:7e:38:45:4c:cb:c9:36:0f:3b:dd:b9:7c:
         49:54:59:8b:65:87:84:b5:37:6e:fe:ba:88:33:dc:3d:dd:23:
         67:90:92:7d:f6:17:6b:4b:6e:46:f5:3f:41:96:cf:49:44:67:
         00:2c:be:9b:55:dc:6e:52:73:89:42:c1:0c:0a:b8:35:58:eb:
         f5:d9:46:6c:18:d0:27:a0:5d:2b:0b:dd:5d:6c:c0:44:f8:df:
         6b:6d:7f:12:e7:ff:8e:66:0f:0c:42:cb:d8:fb:0d:d7:9c:ab:
         7c:b6:de:6e:d1:d7:28:c2:29:69:35:a1:a3:fa:cf:ab:df:f2:
         24:44:8a:c9:90:43:ee:f2:53:c2:ec:c3:a8:f1:d3:85:b8:d3:
         63:43:ca:eb:6b:8c:1d:29:85:5e:a3:67:c7:dc:0c:ca:92:35:
         ee:67:f6:c1:af:d7:1d:85:d4:5f:5c:f8:f5:73:26:70:f0:a4:
         89:76:8f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:26 2026 by rpki-client