Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
File:                     fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json)
Hash identifier:          vpisCj1thcFoKjNlOLYQsuH9OM6J3gguKQiybzlpo6o=
Subject key identifier:   33:A8:ED:0C:FE:83:A3:B7:DB:F0:24:30:A7:C1:C2:D4:75:01:4C:75
Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
Certificate issuer:       /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Certificate serial:       1D49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
Manifest number:          1CEE
Signing time:             Tue 28 Jul 2026 16:17:00 +0000
Manifest this update:     Tue 28 Jul 2026 16:16:59 +0000
Manifest next update:     Tue 04 Aug 2026 16:16:59 +0000
Files and hashes:         1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: qNJlnLzjFFYEMmCy4vA09AYE2OCZwAQ9Tw3rdBN1rJw=)
                          2: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: XTPwHAE+RSrJ2wVavnzJET8Caph7nR447oVW7w8/WgU=)
                          3: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: YdIG+LX9/nSnlUWidUhwdiQq+gtN7y6hQuASQmVjG5Y=)
                          4: 0754E1A6115411F19A223E75263D8C67.roa (hash: XkNkIGOcXYJKZ6BnuWlh6sl/eiNLJIsKVaWehkRd9Ok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
                          rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7497 (0x1d49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
        Validity
            Not Before: Jul 28 16:16:59 2026 GMT
            Not After : Aug  4 16:16:59 2026 GMT
        Subject: CN=6a68d5fb-1eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:52:88:c6:e5:96:ee:bd:5a:f1:36:88:e9:
                    be:a5:f0:d6:f8:5c:b3:7b:a1:0f:89:1d:f7:b4:6d:
                    7e:43:ed:1b:c0:3b:92:9e:96:6e:0f:8f:8b:3f:71:
                    15:aa:e7:8b:52:ae:42:5a:55:7a:a4:dc:81:60:0d:
                    b5:f0:2b:d9:09:e1:af:2a:d2:00:92:ed:e9:a7:ba:
                    4e:63:98:9c:82:81:0e:9d:46:4c:70:fb:8f:4c:3c:
                    50:3e:a2:af:4d:7a:0b:24:b9:15:03:57:6b:a7:ac:
                    e8:a7:e3:7f:79:b4:98:a6:e8:1f:85:dc:67:81:24:
                    c9:39:8a:7c:7a:6c:cc:aa:bb:eb:19:a1:2f:ae:80:
                    c0:f2:b3:63:d5:7a:44:f9:b1:55:61:4d:15:b7:2b:
                    20:ed:1c:c7:1c:c8:8c:0f:b8:57:a6:0d:2a:ba:3c:
                    7d:08:4d:24:b9:7f:9c:89:2d:23:a2:a8:5a:b3:87:
                    83:c4:06:20:49:5e:3a:8e:08:15:b6:18:ea:ea:67:
                    81:0b:4d:51:0e:b1:da:31:74:94:e7:8a:46:0f:c0:
                    a5:b4:24:53:c3:ee:3e:0c:f8:bf:bc:15:69:b2:df:
                    00:a0:41:8c:90:00:b0:05:e1:a8:14:f9:b7:dc:c8:
                    11:d1:9e:79:06:fd:74:67:5e:70:87:24:45:90:60:
                    5d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A8:ED:0C:FE:83:A3:B7:DB:F0:24:30:A7:C1:C2:D4:75:01:4C:75
            X509v3 Authority Key Identifier:
                keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:bc:c1:fb:39:a4:93:77:96:96:57:f4:e5:61:48:74:53:6c:
         58:0a:7b:d4:e5:f2:57:70:cf:ac:c0:6a:b6:d7:04:49:b4:6a:
         f3:3d:5a:c9:44:91:af:fa:90:ad:a1:16:bc:82:24:a7:a1:42:
         a0:82:84:dc:33:10:b7:88:f2:9e:b4:43:2b:fc:71:1a:20:94:
         f0:0c:5b:aa:68:e4:67:ce:28:4b:e4:87:c7:b4:58:f8:af:ab:
         c2:1a:f2:be:df:7b:53:61:59:bc:56:ad:94:56:ee:0a:86:d7:
         5a:bb:f3:56:a9:58:5a:2e:29:34:f1:90:89:40:8f:45:d1:a7:
         42:b4:77:14:77:15:a0:f8:6d:f6:3b:39:cc:d2:7e:ce:ab:61:
         e9:b4:45:81:67:c6:26:51:10:81:39:6f:2b:25:0f:26:30:41:
         7e:0f:cb:35:19:16:3f:58:d4:b2:a2:ad:6b:76:77:36:78:c7:
         8c:a7:72:a9:34:c9:8d:6f:6a:4b:fe:97:8a:b3:fb:9e:27:09:
         3c:fe:0a:d0:ec:3f:9e:cc:ac:b7:00:8f:a1:37:11:1e:fe:d3:
         93:3b:af:ec:44:15:b0:f6:e2:c8:11:62:73:2b:33:62:d2:e8:
         ae:7c:a7:27:0f:06:48:30:27:47:e7:92:1f:d9:08:3c:fb:d1:
         b4:7f:09:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:53 2026 by rpki-client