Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
File:                     cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json)
Hash identifier:          QVR1Z0Ui6WrM2OUbfgNhYfrkqGrfRvFBuqbMtHQ9km0=
Subject key identifier:   80:C8:CD:4C:66:CB:31:F7:EC:74:89:89:5F:0C:BA:81:B0:92:22:B4
Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
Certificate issuer:       /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
Manifest number:          01EF
Signing time:             Mon 27 Jul 2026 05:07:58 +0000
Manifest this update:     Mon 27 Jul 2026 05:07:58 +0000
Manifest next update:     Mon 03 Aug 2026 05:07:58 +0000
Files and hashes:         1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: GhmL+BR5Y8TjUfttKNQUaZWQnZPMZsUw+z87hxPlO5c=)
                          2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: 8SqapDtzV8gP+3KIVS1rPzQhCDf8h1pmDU5PztyzjBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl
                          rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
        Validity
            Not Before: Jul 27 05:07:58 2026 GMT
            Not After : Aug  3 05:07:58 2026 GMT
        Subject: CN=6a66e7ae-0344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:61:52:68:11:ea:39:d8:ad:95:e2:66:31:
                    6e:66:93:e6:bb:35:e0:4e:dc:3d:7b:fe:01:4b:bc:
                    02:b8:d0:a9:a9:5a:82:f3:6f:62:12:af:63:fa:3c:
                    09:3a:07:3e:6b:3a:f2:c8:36:5f:cf:82:84:3f:20:
                    a7:19:46:24:2b:07:06:4a:4b:8b:31:86:bf:03:af:
                    f3:79:34:18:81:86:39:83:1e:56:95:06:45:ff:ab:
                    a7:bb:3d:5e:83:e4:52:52:72:01:77:55:bd:88:65:
                    a9:33:eb:d5:eb:9a:69:93:e0:e7:16:75:92:7b:9b:
                    72:83:4b:8b:89:67:92:48:78:b6:3c:1c:67:40:f9:
                    5a:2d:8d:cf:c0:c5:c8:a8:9b:c4:9e:b2:e2:53:5f:
                    d7:bf:67:77:e6:b7:44:6c:b1:09:9e:6f:61:e9:ea:
                    fe:e3:7b:53:6b:88:af:18:f1:4f:c2:98:c2:c9:16:
                    9b:e0:e7:e1:c7:eb:34:93:bf:92:27:b8:b4:81:e6:
                    5b:9d:29:32:bd:94:98:55:72:1f:83:dc:14:a9:d4:
                    e0:fa:2e:30:21:c3:57:4c:25:1e:61:26:99:d4:28:
                    1f:a8:d7:c3:66:32:80:bb:4a:33:1f:fb:cb:f6:eb:
                    5b:d8:e0:e2:46:6a:0e:71:6d:6e:d3:1d:8a:94:02:
                    d8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C8:CD:4C:66:CB:31:F7:EC:74:89:89:5F:0C:BA:81:B0:92:22:B4
            X509v3 Authority Key Identifier:
                keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:92:1e:4d:79:57:fa:3e:49:e8:af:f4:5b:2a:44:78:02:c6:
         fb:b3:b1:96:a2:8f:c8:d0:13:dc:51:5c:84:71:5b:a2:b8:12:
         bd:76:e2:28:4b:9f:aa:d2:6a:b7:2f:5e:e4:09:5f:29:ad:b5:
         10:55:3a:34:ec:b6:55:09:89:e1:c5:f9:3a:d3:25:0a:ba:2b:
         91:a8:9b:4d:15:df:a9:82:c0:d4:3a:0a:37:c6:9a:3b:87:1b:
         55:ab:22:7f:6e:f7:0b:64:04:ec:65:2d:44:cc:68:d8:97:ea:
         74:5c:c3:3f:a0:22:d0:63:3d:fe:38:63:50:73:0e:e8:47:11:
         52:f7:59:b8:ba:3c:f0:27:84:e4:50:a0:25:0a:5c:dc:f9:a2:
         96:14:81:ab:3c:1c:f4:eb:8e:4e:9b:9b:58:ee:a8:be:ea:5a:
         22:b4:23:b0:9e:52:1f:3b:be:ec:10:c3:6f:a9:10:37:4e:22:
         f7:b0:5d:d8:63:6c:1e:52:a6:8b:25:bf:16:8c:43:a9:89:9d:
         7e:9a:db:e3:4d:b2:ac:29:24:64:d3:92:3e:5f:15:2e:14:03:
         39:fa:51:6a:3e:a6:ec:a8:ef:bb:50:0a:73:4e:fb:a8:32:7e:
         ae:a5:3b:85:53:c3:18:23:f6:ba:a6:36:c9:65:f4:4a:a2:06:
         16:4a:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:47 2026 by rpki-client