Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
File:                     mFDq_-09ooRdUfCVrBEkUIjVYj8.mft (raw, json)
Hash identifier:          pKkkCGH1GJL2tp9/rom8xF1eG7uPyX5y2IMiBhCj8/U=
Subject key identifier:   EA:60:F8:11:9C:10:48:3D:0C:E4:66:D8:49:28:47:45:EA:5C:C2:AF
Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
Certificate issuer:       /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
Manifest number:          A0
Signing time:             Mon 27 Jul 2026 09:26:14 +0000
Manifest this update:     Mon 27 Jul 2026 09:26:14 +0000
Manifest next update:     Mon 03 Aug 2026 09:26:14 +0000
Files and hashes:         1: mFDq_-09ooRdUfCVrBEkUIjVYj8.crl (hash: YF+hPpIfask4q7ekQmnf7Tj/zAsYAGEh7o/Z/JbM+8Q=)
                          2: ACA405589E7011F083978F1AC4F9AE02.roa (hash: aqdlEd+hSBzQzve2o5DblyAqPMOMIZAPbkwHiErLH6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
                          rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
        Validity
            Not Before: Jul 27 09:26:14 2026 GMT
            Not After : Aug  3 09:26:14 2026 GMT
        Subject: CN=6a672436-70a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:16:06:89:a3:57:14:27:d1:ac:11:0d:68:
                    83:aa:6c:87:2b:0d:25:3f:1e:19:29:db:51:4a:ec:
                    80:22:eb:17:7a:06:e2:e4:0e:6d:0d:84:81:d6:fe:
                    ec:dd:36:99:fd:0a:4c:22:0c:78:a2:61:db:2f:63:
                    70:7a:47:e6:ba:f3:d9:6c:c4:ff:73:71:de:d6:d7:
                    9d:9b:77:e6:de:eb:17:95:ef:5f:de:90:42:d0:c9:
                    eb:39:0b:a3:73:9b:22:68:c2:8e:d5:2d:a5:60:71:
                    9d:44:96:66:6b:4f:c4:33:13:5a:e0:1e:34:78:75:
                    07:9e:9a:19:ca:36:f3:32:b4:2e:6c:f2:87:d1:f6:
                    3b:23:4d:f3:08:ec:59:cf:25:71:c4:e9:ac:40:0d:
                    e5:1b:c2:1b:72:e6:80:35:a6:2c:5e:53:d4:e8:db:
                    ae:43:58:d7:96:a8:e3:83:d2:f5:bc:fe:ad:ec:c2:
                    db:17:fb:82:e8:97:d9:8c:02:cf:ab:f8:16:08:79:
                    90:a4:0b:f4:dc:ed:7e:2d:e2:6f:a1:c8:01:80:88:
                    34:02:24:c2:78:37:0f:fe:b6:64:6d:60:99:71:49:
                    17:56:8a:ac:c4:f1:e0:93:46:44:57:ae:95:64:2e:
                    58:df:d5:4a:32:75:30:d3:7d:7b:7f:15:a8:a7:28:
                    d5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:60:F8:11:9C:10:48:3D:0C:E4:66:D8:49:28:47:45:EA:5C:C2:AF
            X509v3 Authority Key Identifier:
                keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:59:6b:48:3c:42:fd:97:86:b0:b6:e1:2c:16:bc:26:fb:9f:
         93:dc:e4:4c:55:27:a9:e2:ea:1c:19:67:e3:6b:ac:c0:42:41:
         d8:fa:95:9a:c7:37:1e:9e:c9:37:2d:fa:80:01:a9:f9:d9:fa:
         3f:2e:33:3d:a1:23:fb:20:96:08:30:59:06:7e:eb:0b:44:eb:
         02:de:dd:9d:b2:32:52:fc:60:05:f2:46:64:1b:90:6f:28:bb:
         c2:82:7f:e7:e8:82:5b:67:50:f0:13:db:17:59:71:41:dd:be:
         e1:6e:c5:a4:9f:1a:af:60:ea:81:61:2f:e9:52:4e:7f:c9:3d:
         68:68:e7:c1:57:a1:9b:e6:36:6e:ed:c0:b5:9e:6c:0d:3d:a7:
         24:a7:0b:07:a1:27:92:b0:20:24:bb:51:1d:5d:90:ea:14:0e:
         52:d0:fc:dd:d5:6a:3b:ef:53:8b:ca:5b:1c:c8:c7:5c:0d:5f:
         7e:4a:5d:20:b1:b7:3f:45:06:be:ba:10:70:bf:94:ce:65:aa:
         28:a8:f8:be:e6:b9:49:e4:19:33:93:25:a1:61:5b:24:2c:16:
         b0:4a:62:cb:ad:ea:d0:22:a3:53:cd:98:9c:a7:93:f2:02:f0:
         70:9e:e5:84:fe:82:d5:5a:29:ff:7e:d1:c5:ca:fc:1c:9b:58:
         3d:6d:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:07:07 2026 by rpki-client