Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File:                     M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier:          ki6WCG8+/1Jz0OkpmvwTiB0zGiJOrDBVO1WeGWP5YYA=
Subject key identifier:   92:7F:28:90:AB:C2:00:A4:39:57:CC:5C:98:1C:08:A9:91:45:23:4B
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer:       /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial:       0585
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number:          056A
Signing time:             Tue 28 Jul 2026 20:43:37 +0000
Manifest this update:     Tue 28 Jul 2026 20:43:36 +0000
Manifest next update:     Tue 04 Aug 2026 20:43:36 +0000
Files and hashes:         1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: aRb0kLQGrX3HgMFKqiQv5lZ9YZt7h1lLVz545QE4u9I=)
                          2: 0732C4DC090B11F1B0A6391E363D8C67.roa (hash: Q9fK/HIBESDBwerI+LGeuA1a/3ibrPdtmUfxDWX3vMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413 (0x585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
        Validity
            Not Before: Jul 28 20:43:36 2026 GMT
            Not After : Aug  4 20:43:36 2026 GMT
        Subject: CN=6a691479-bafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:11:d2:86:b7:c5:14:05:11:a0:7e:75:23:
                    4a:9a:91:68:11:35:cc:96:4c:a3:ae:4f:06:b8:76:
                    db:98:9e:66:2f:9a:cb:93:d1:2f:42:84:8f:f5:b7:
                    93:7d:e9:78:66:38:50:8c:d1:ac:b1:36:0c:88:bf:
                    c8:f3:ec:50:ef:46:0b:dd:f9:da:d5:b0:7d:15:69:
                    76:15:7d:ae:e4:54:86:d9:23:b8:3e:a7:b2:5f:49:
                    74:71:12:c7:5e:57:f7:77:26:62:ff:60:3e:e7:eb:
                    e1:c7:5e:70:e6:a7:e8:eb:c9:f3:4d:7e:ef:9e:3d:
                    4f:b6:98:fc:18:44:d4:ae:11:25:56:61:be:75:5a:
                    cb:48:14:35:02:59:b7:38:79:99:60:7a:8a:c3:22:
                    14:ee:dd:d7:1f:42:a0:e8:49:c4:68:64:be:92:7c:
                    31:b7:02:c9:93:8d:e5:e0:95:8f:98:cd:0b:13:02:
                    4c:d2:3c:18:8e:ad:48:80:63:8b:bf:d7:fd:26:18:
                    a2:33:75:fb:43:15:99:08:b5:3f:9b:0f:4c:d5:d6:
                    ef:ee:16:f4:4c:99:63:31:77:54:0b:9b:ff:cc:27:
                    50:bb:75:cc:f5:64:0d:f8:24:66:9f:82:51:d3:3e:
                    2a:10:81:a6:0c:d3:7a:b1:b5:57:9d:2a:c8:57:13:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7F:28:90:AB:C2:00:A4:39:57:CC:5C:98:1C:08:A9:91:45:23:4B
            X509v3 Authority Key Identifier:
                keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8d:5a:54:43:7e:5c:c4:ba:7f:fe:bb:41:c8:b9:ab:00:60:
         cc:07:12:46:53:6a:d1:b5:7d:06:f5:e7:41:13:e8:c9:76:d7:
         3b:a7:36:77:a9:6f:54:86:b3:6d:47:02:4e:5b:fc:08:f3:3a:
         bf:61:34:0c:b9:07:ea:91:ac:bd:25:90:f8:9d:d2:7c:12:ff:
         03:d8:60:24:f0:6f:03:63:fa:af:ca:7a:8d:d6:a4:72:df:0f:
         b7:cb:2f:23:3b:12:ce:49:b2:63:fc:e3:ef:56:f7:56:7f:cd:
         8d:80:fb:48:b7:8b:b0:3b:33:06:a9:ca:25:72:7b:75:8b:06:
         ef:30:3b:ca:d9:6e:f2:36:6b:61:c6:7d:ab:c0:05:11:2b:c7:
         03:bc:84:aa:78:8f:e2:29:b9:9d:ef:37:0b:1d:e3:f5:d7:3a:
         cc:d0:da:98:5e:96:65:fd:41:8d:84:0c:2c:ad:48:67:0f:38:
         c9:f3:e6:b6:04:f5:e8:9e:0a:94:03:bf:29:f9:96:ab:75:4f:
         1f:e3:9c:5d:a5:7b:8e:71:f2:1c:9c:60:66:0c:7e:bf:c8:21:
         19:4d:ae:67:57:db:15:e6:74:e6:da:b0:41:31:f2:24:59:47:
         d9:0b:69:a6:df:62:3c:c0:38:18:2c:a9:d5:a9:82:5f:26:2e:
         cd:70:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:56 2026 by rpki-client