Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
File:                     40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json)
Hash identifier:          HFnBiS/wGYMQ4YettEFAa2KA2Z6pALNuXFROL6tcTBs=
Subject key identifier:   0F:BC:29:52:BE:6E:9E:68:F7:56:E2:5E:9D:67:9F:35:50:66:FE:5F
Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Certificate issuer:       /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Certificate serial:       0CAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
Manifest number:          0C90
Signing time:             Tue 28 Jul 2026 18:49:50 +0000
Manifest this update:     Tue 28 Jul 2026 18:49:50 +0000
Manifest next update:     Tue 04 Aug 2026 18:49:50 +0000
Files and hashes:         1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: qD6DALrEd4SXQmvIe8eZfXGekrMGL2GkeDSvP2HmJJc=)
                          2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: cD+tWMa2tCm5TnaY019r+91dmxm4eQDA6fv1coCGHU4=)
                          3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: LA1zhuDO8oOV5U+SWHLv48B4wlsZkTvLHZIw98i6K60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
                          rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3242 (0xcaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
        Validity
            Not Before: Jul 28 18:49:50 2026 GMT
            Not After : Aug  4 18:49:50 2026 GMT
        Subject: CN=6a68f9ce-74c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:9d:1f:3d:bc:13:f9:fe:75:01:3f:a1:c7:
                    e5:c9:ef:fa:8c:4d:25:3b:66:69:40:52:06:c6:91:
                    6a:86:38:7b:32:45:47:5a:93:34:19:4a:f0:d4:1d:
                    bf:6a:bd:fc:1d:b3:44:db:d6:07:34:49:9d:75:14:
                    ad:96:0b:d4:3a:a6:e6:ce:e0:92:af:5e:95:1d:9b:
                    59:d6:9d:5f:30:fa:f3:1e:c1:69:e0:47:1c:6f:4a:
                    8f:78:8f:9d:03:89:c8:c6:5c:fe:95:4b:57:01:f8:
                    97:4d:96:82:b8:69:1b:8b:63:6f:9d:b5:4e:01:f5:
                    96:58:e9:10:32:e3:43:5b:50:47:68:03:20:c9:15:
                    da:52:77:b5:a3:7f:04:ff:c9:78:1f:71:af:71:88:
                    ab:6f:08:a0:04:77:a2:a3:6a:75:a1:4b:a0:9b:7c:
                    31:4c:f5:33:43:45:21:c6:54:bb:19:58:0e:5c:92:
                    08:b5:12:4e:dc:ca:1e:fd:a1:24:a0:f1:19:d2:e1:
                    ad:ab:d2:db:ae:f9:a4:f7:83:1e:14:54:d7:c5:49:
                    30:eb:10:f0:4e:af:a0:a4:a2:32:1e:54:16:69:2a:
                    91:31:40:7e:3d:f3:4d:e3:01:4d:d8:c1:98:31:ef:
                    35:ff:a0:90:9f:22:ce:64:57:77:02:71:df:51:5e:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BC:29:52:BE:6E:9E:68:F7:56:E2:5E:9D:67:9F:35:50:66:FE:5F
            X509v3 Authority Key Identifier:
                keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:96:69:3b:6c:ad:93:96:3e:e9:c5:31:4f:d5:dd:34:c0:9d:
         d6:bb:07:f1:5a:51:5a:4e:f4:c1:39:1f:b4:dc:ba:40:e8:14:
         5b:a3:bb:01:1b:4f:8e:38:d7:59:27:de:8c:8a:12:ad:7f:4a:
         df:cb:aa:ff:31:de:a8:1c:a1:2c:b5:5f:a2:53:8c:cf:2e:9c:
         0b:07:f2:f5:27:b7:81:0f:61:d8:59:23:3a:f9:31:0e:2a:96:
         b5:69:60:76:11:f8:30:87:9a:75:44:db:a4:cd:a4:34:8e:7e:
         6d:66:d5:07:b0:e5:80:31:41:7d:02:50:ae:f5:28:cb:2b:28:
         bb:d2:09:eb:c1:61:6e:09:09:e7:1a:0f:5f:ac:40:09:a6:b3:
         00:80:69:45:34:f8:cb:f1:a5:31:ac:73:12:bf:4a:c6:70:4f:
         6e:15:da:47:25:c6:46:04:53:dc:9b:e0:2b:98:d0:60:4e:0d:
         58:c9:7f:35:da:fb:b5:8d:7b:28:73:07:74:74:e1:ff:51:ca:
         39:88:91:f4:1a:88:f9:e8:47:7b:8c:37:4f:7b:94:76:c6:d5:
         b2:cb:4f:28:eb:74:08:78:6f:6a:f7:7e:7a:23:b9:d9:33:ec:
         d7:7d:f7:e1:1d:6e:8b:4a:80:6c:7f:1d:f8:32:53:01:8f:60:
         0d:8e:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:29 2026 by rpki-client