Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
File:                     FTtjqTdzsliYghhmVd7zBEbdhg0.mft (raw, json)
Hash identifier:          CgZZHxhMPACPFj0kCTlKnW2S1oP0aWp3d+zLSHFyUb0=
Subject key identifier:   EE:BA:1B:C3:1F:7E:5A:65:52:FF:DF:C7:43:5D:04:52:B7:6B:8E:AE
Authority key identifier: 15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
Certificate issuer:       /CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D
Certificate serial:       0341
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
Manifest number:          033A
Signing time:             Mon 27 Jul 2026 02:11:52 +0000
Manifest this update:     Mon 27 Jul 2026 02:11:51 +0000
Manifest next update:     Mon 03 Aug 2026 02:11:51 +0000
Files and hashes:         1: FTtjqTdzsliYghhmVd7zBEbdhg0.crl (hash: neOvS71+YA0tBTK1ZrDbPMx4YmPtU7qpsjBORo9mIp0=)
                          2: 27A32D7A16BA11EDB0E9E464C4F9AE02.roa (hash: uTY9Mx19zYpw6CO6HqYxOp2zXgWkOsB7x9EURMKFBhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl
                          rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833 (0x341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91810B4, serialNumber=153B63A93773B2589882186655DEF30446DD860D
        Validity
            Not Before: Jul 27 02:11:51 2026 GMT
            Not After : Aug  3 02:11:51 2026 GMT
        Subject: CN=6a66be68-21f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:94:22:76:83:7c:49:a0:71:44:b0:bf:94:
                    e5:d1:6d:24:cc:3b:3d:c1:17:38:5b:cf:05:6d:0b:
                    f9:73:5f:a0:c4:07:46:a2:8b:20:76:04:59:a7:5b:
                    1f:4e:d7:c3:eb:8c:99:36:6f:de:84:84:15:ce:4a:
                    77:58:9f:09:ea:80:a1:6c:65:6e:e1:c3:2f:93:7d:
                    f8:fd:fe:18:72:2c:f9:2d:e6:f0:0d:a9:36:37:5c:
                    8d:81:a1:02:12:37:11:80:b9:5d:43:33:dd:1e:ba:
                    a1:b3:20:a4:b8:d8:86:17:89:0e:a3:ea:8c:02:cf:
                    d8:97:e7:fc:2c:b1:e5:2e:71:40:25:4c:9d:93:67:
                    40:94:aa:dd:d1:53:3a:78:2a:d8:a9:d7:8f:5e:91:
                    ad:84:a2:19:7b:e2:16:85:71:da:e3:64:a3:01:b4:
                    7a:83:1a:bd:e2:21:98:2b:07:de:17:d0:4b:2a:34:
                    ab:ad:59:cc:15:ce:dd:05:53:34:6f:65:cb:01:4f:
                    fe:85:44:6a:b1:7d:92:91:74:bc:40:13:ce:07:e1:
                    db:df:9f:53:26:d4:8e:91:0f:78:cd:3a:72:ee:72:
                    ee:9f:1c:7e:b1:ce:7f:46:51:d8:bb:f4:56:73:3d:
                    b1:f1:14:62:2e:49:bf:5e:c5:97:17:fd:e7:9a:cf:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BA:1B:C3:1F:7E:5A:65:52:FF:DF:C7:43:5D:04:52:B7:6B:8E:AE
            X509v3 Authority Key Identifier:
                keyid:15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e9:e3:d7:5b:ec:c7:af:66:02:2a:b4:45:c3:71:29:ee:dd:
         93:60:3b:02:83:dd:14:bd:2d:c8:fc:74:a4:c6:b0:ab:39:e3:
         13:9e:f2:a8:36:ea:a9:a3:f9:5e:fe:c2:1a:f1:b0:a8:28:04:
         6a:36:af:52:ca:0e:8e:9a:47:4e:4b:b6:81:90:d9:dc:6e:a3:
         0f:33:8c:1f:6f:e2:77:1b:ce:0b:4c:48:6b:77:23:18:81:3d:
         f6:84:74:c5:53:a3:42:9c:94:00:04:4b:ee:4f:46:5e:3b:fc:
         60:f0:53:83:48:14:c5:00:7c:8b:e4:ff:54:97:da:e5:d0:ef:
         c7:af:12:e2:41:a6:7c:6b:9d:76:7d:f8:04:33:f1:f7:87:25:
         98:c5:34:14:52:2c:f6:0a:17:a2:a5:4d:06:bb:2e:a5:21:54:
         58:9d:c2:cf:8c:79:48:f8:3d:87:37:d5:e8:85:a1:8c:fe:ac:
         cd:03:6d:cf:db:6f:36:f1:6b:e3:6c:54:31:51:24:e6:5a:81:
         34:92:2b:3f:43:30:84:c1:95:f8:82:75:38:3d:5e:0c:28:6d:
         58:d4:16:4f:19:55:91:fd:bd:04:9a:45:25:69:c5:74:34:05:
         95:3b:89:3d:6e:b7:47:18:28:7e:c4:6a:ba:7c:d9:09:a4:af:
         f3:7c:66:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:26 2026 by rpki-client