Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
File:                     inTvQOZaEnwOZmsUpsZXSlNvNnM.mft (raw, json)
Hash identifier:          hBUkeTdpsIr2jsBD8a9rcPlZ8yTLQkpgmGRrmUeI+PM=
Subject key identifier:   EA:CD:A1:91:33:F4:A9:B9:2C:F2:E4:E5:CD:4F:AB:51:64:FF:01:79
Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73
Certificate issuer:       /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
Certificate serial:       02A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
Manifest number:          0296
Signing time:             Mon 27 Jul 2026 03:07:51 +0000
Manifest this update:     Mon 27 Jul 2026 03:07:51 +0000
Manifest next update:     Mon 03 Aug 2026 03:07:51 +0000
Files and hashes:         1: inTvQOZaEnwOZmsUpsZXSlNvNnM.crl (hash: i+ZMxKsWZS0jcJoZ0uMajnKg2RspVj6AlS9+1P7eQ2Q=)
                          2: 94817492A7AF11EE9ABC7953C4F9AE02.roa (hash: LUsnLsc6mXSjUFBFxwOYNILJN9HGLaB/AK0ldBYzkRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl
                          rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91583E4, serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
        Validity
            Not Before: Jul 27 03:07:51 2026 GMT
            Not After : Aug  3 03:07:51 2026 GMT
        Subject: CN=6a66cb87-e50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:84:bc:9d:0e:9f:b5:64:3b:0e:83:8e:19:
                    dc:55:17:40:20:75:eb:7c:3c:7d:1e:a0:e0:91:1d:
                    ce:47:16:09:0c:ae:84:81:da:65:29:7b:61:cd:16:
                    f7:ef:ac:00:0d:73:b4:e7:a2:b2:45:b4:07:c8:84:
                    21:43:67:2a:30:8d:59:02:71:6f:1e:b8:a2:d6:80:
                    a9:bd:65:9f:6d:04:f2:a1:b8:f1:76:86:08:1b:ba:
                    b8:13:cc:14:b7:4a:6b:7a:04:ce:6a:3e:40:d4:53:
                    cc:b3:35:64:65:27:fe:8a:fe:c3:fc:ee:4f:42:3c:
                    1e:99:17:61:b8:70:ef:2d:9c:b2:da:83:4e:fd:8a:
                    2a:a2:bf:b7:32:82:a0:99:15:c7:97:b0:79:9b:8e:
                    76:b2:03:9a:64:2c:9f:f7:dd:1b:1a:a5:8b:12:1c:
                    2c:3b:6a:e8:72:4f:1d:f4:ee:7e:4b:e8:a1:74:b4:
                    aa:62:44:1a:84:82:88:90:a6:25:50:68:5c:52:05:
                    f6:08:8a:71:42:d5:1f:09:4f:ca:19:aa:ae:a0:d0:
                    f0:3c:c0:22:0d:df:e8:30:e1:84:7a:d3:b4:cd:38:
                    31:fa:93:96:6a:5e:08:7e:d9:d3:e3:65:ff:91:75:
                    dc:bd:62:5d:be:f0:77:fe:ca:da:5b:8b:14:ba:c0:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CD:A1:91:33:F4:A9:B9:2C:F2:E4:E5:CD:4F:AB:51:64:FF:01:79
            X509v3 Authority Key Identifier:
                keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:45:8f:aa:1e:5f:02:72:8a:e9:68:ef:0d:fb:b5:0e:04:42:
         11:a0:f5:a2:62:4c:5a:a5:b6:3b:35:dd:a2:67:09:fe:c1:00:
         b1:05:75:53:61:27:5f:35:4e:0d:ef:09:6d:a1:28:7d:ce:b6:
         9d:cf:ab:5f:34:fa:9a:da:48:d6:bc:cf:49:4d:8a:9a:d1:4e:
         93:64:d5:59:ce:c1:f3:06:38:d7:fe:fb:3c:59:d1:84:dd:52:
         c8:bb:c2:45:71:3d:f2:f8:d8:f1:a4:27:3b:36:e1:f8:44:07:
         7d:2e:41:e1:b9:48:42:5b:58:cc:3c:44:fa:ad:8d:f1:0d:64:
         fe:c0:64:05:e5:57:13:b9:13:db:b3:d3:bc:a8:17:17:4a:29:
         b7:e7:d3:0e:c1:4e:6e:8b:88:61:1c:03:a8:4d:a0:03:b5:6a:
         f5:ff:2b:4d:e8:f8:93:37:66:d6:4c:64:8a:ac:d9:41:fc:ef:
         7d:d4:4a:d6:a1:91:bf:3e:a0:06:ee:86:3f:f8:66:cf:7b:dd:
         3e:0d:b3:93:df:4f:a3:85:ff:c4:b4:83:45:62:dd:d7:52:c2:
         ad:c6:fb:f3:e7:04:92:bb:b0:e4:ab:bc:c1:96:cb:46:dc:ac:
         ce:68:1c:53:fc:ef:ba:e2:a3:f3:dc:fd:f3:f6:19:40:0d:c2:
         7a:4f:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:38 2026 by rpki-client