Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
File:                     Sp1OqbVF6hBQTTa2X6owSfmezUY.mft (raw, json)
Hash identifier:          YyGd53YTYk3g/YMsdlNjiYizOSb/+pkgkak29rO/8B4=
Subject key identifier:   D4:11:65:18:2F:6C:F5:8A:38:70:DB:65:B0:1E:03:8E:AF:48:14:C5
Authority key identifier: 4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
Certificate issuer:       /CN=A915FAD2/serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Certificate serial:       109F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
Manifest number:          1090
Signing time:             Tue 28 Jul 2026 17:28:10 +0000
Manifest this update:     Tue 28 Jul 2026 17:28:09 +0000
Manifest next update:     Tue 04 Aug 2026 17:28:09 +0000
Files and hashes:         1: Sp1OqbVF6hBQTTa2X6owSfmezUY.crl (hash: wCkNvDaj0GsGxYmukKiLWkoTU/1Bq15rL9E9/GdQiY8=)
                          2: D34588789F8A11ECB8E03812C4F9AE02.roa (hash: rasmIGbbkGyXUadctbc+VdY6lJu2lwrTgiDYqa6HQ3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
                          rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4255 (0x109f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FAD2, serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
        Validity
            Not Before: Jul 28 17:28:09 2026 GMT
            Not After : Aug  4 17:28:09 2026 GMT
        Subject: CN=6a68e6aa-b850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:f1:9d:6b:dc:5a:27:9a:93:e3:d6:1d:b4:
                    7f:f2:76:0a:fe:b8:cb:cd:ad:f5:a2:da:5f:90:ac:
                    b8:32:34:04:a2:98:c3:65:49:04:cf:4e:17:13:bc:
                    cf:ed:ad:df:5e:83:85:e9:1e:5f:1c:2d:42:a6:3a:
                    a2:06:1e:45:85:c7:a7:6b:dd:63:22:be:72:7f:4d:
                    d4:dd:07:c6:6f:e8:98:be:96:92:eb:0f:80:e4:d7:
                    3c:cd:64:71:a2:2a:47:72:c7:d7:31:23:14:01:4d:
                    f3:dc:ea:21:fd:df:db:c5:4e:60:be:0a:e3:7e:08:
                    2a:0b:25:33:82:ea:b1:5d:d6:7c:d4:a6:b7:ca:78:
                    37:31:a3:50:de:bb:5e:44:57:c8:ad:03:d6:c3:c5:
                    8b:cc:a9:2c:44:ce:f8:4b:c0:51:71:b9:11:11:99:
                    bd:3b:80:ea:10:7f:53:41:2b:ab:7f:67:0e:68:15:
                    6f:fa:39:b5:7a:10:b8:26:56:a9:65:f7:a3:6f:56:
                    c1:04:de:26:fa:d6:97:a2:88:64:8d:3d:25:a2:26:
                    37:47:5d:4a:b2:b9:5b:77:2e:2a:6f:17:cd:ce:c8:
                    c4:10:58:57:5d:7b:37:d5:db:6a:66:0c:b6:d3:52:
                    e9:3c:9d:d4:cc:ba:69:9a:7d:e0:2c:f8:dc:95:13:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:11:65:18:2F:6C:F5:8A:38:70:DB:65:B0:1E:03:8E:AF:48:14:C5
            X509v3 Authority Key Identifier:
                keyid:4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:71:9f:42:2b:a0:8b:d7:66:7e:67:32:a8:06:82:e6:c5:c9:
         1d:e2:1c:69:c8:9a:4c:35:66:2f:37:8a:7f:f2:42:c8:aa:d2:
         c8:d2:2e:76:9f:d2:64:ad:3c:17:01:6a:06:bc:03:49:5b:aa:
         57:ee:93:ef:55:4b:43:fe:04:16:0b:fa:74:ba:76:ce:98:ff:
         51:b0:f8:99:44:49:fc:3b:34:7c:d4:e4:76:42:e3:34:6c:80:
         fc:1f:25:66:04:57:6f:f6:97:ad:44:e6:6c:47:81:41:76:44:
         3c:11:74:0c:14:ec:00:ca:81:b4:c7:bc:bb:d2:4b:6c:22:9f:
         e5:d6:83:f5:19:c0:04:b0:8b:7f:72:02:98:8c:ff:be:dc:87:
         42:c6:2c:1e:0f:4d:c1:fd:bd:18:5d:0a:4a:dc:94:dd:89:62:
         bb:d8:d7:cc:d3:ab:c0:22:29:2d:1e:06:82:8a:10:fa:a8:df:
         e3:86:dd:f8:5f:53:2d:79:42:84:bd:33:93:83:50:6f:1d:24:
         7b:ed:f5:a2:05:90:76:54:76:f6:9c:93:70:10:1e:b3:45:ff:
         b0:1d:cb:9e:e5:61:d9:41:be:f6:07:06:13:26:a2:0a:5d:e4:
         1d:9a:08:19:e5:d6:57:cf:85:6e:63:c5:c8:3f:2b:99:9a:85:
         5e:2a:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:33:38 2026 by rpki-client