Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
File:                     _un91LDoMTGIoIn3qH-30BUyU4g.mft (raw, json)
Hash identifier:          WytQ23iztLvGCZCb3FLLIlVbIzghmIlpWQOGD1sxqYM=
Subject key identifier:   2B:DA:9A:8A:74:C9:CD:55:46:08:56:39:73:27:23:34:3E:2A:DA:05
Authority key identifier: FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88
Certificate issuer:       /CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388
Certificate serial:       0745
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
Manifest number:          073D
Signing time:             Sun 26 Jul 2026 22:34:41 +0000
Manifest this update:     Sun 26 Jul 2026 22:34:41 +0000
Manifest next update:     Sun 02 Aug 2026 22:34:41 +0000
Files and hashes:         1: _un91LDoMTGIoIn3qH-30BUyU4g.crl (hash: l2NAV7EtzqjB60tnGU1Y3XvD8yuqmyx9tQ6rMvvDBgU=)
                          2: 5803FE3880CD11EB83E8035FC4F9AE02.roa (hash: DdSs1+V8lus5gAngiKSCzk0U8+l+t9qxXBgD0Sy/R+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl
                          rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1861 (0x745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C673, serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388
        Validity
            Not Before: Jul 26 22:34:41 2026 GMT
            Not After : Aug  2 22:34:41 2026 GMT
        Subject: CN=6a668b81-15e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:13:d2:c6:e7:63:83:a2:e1:d5:a2:bc:c7:
                    ba:bc:80:c0:a3:c0:9e:d3:16:99:f4:46:5b:3d:82:
                    11:c3:97:ab:c9:6a:3e:70:0d:3f:10:ba:95:a9:a5:
                    ed:91:0e:d5:c8:87:23:b8:3a:49:75:38:6d:ed:ac:
                    ef:37:f4:84:2a:c1:63:b9:88:ca:d1:8b:c0:8f:70:
                    97:9a:1f:38:b2:32:46:62:37:00:0c:ec:8a:e3:af:
                    8b:6c:4d:6c:8c:f5:fe:50:1e:21:7c:8e:72:e2:f6:
                    c1:be:2b:78:8a:ee:4a:a5:49:91:ee:06:a0:23:13:
                    d8:18:12:b7:35:e9:d9:c6:f5:e4:d7:f6:86:22:31:
                    9a:e1:73:94:73:0d:49:20:46:d8:f7:64:96:c4:d2:
                    ac:1b:86:ff:81:f1:3e:2e:97:68:1c:ef:43:01:d1:
                    b6:97:1f:75:cb:d1:e7:fe:3a:0d:84:40:de:46:f6:
                    64:1a:3b:fc:41:ad:33:52:cc:e3:b2:67:1a:e6:cb:
                    94:b4:d2:8e:9c:17:d5:05:9a:ea:4b:d4:9a:92:94:
                    21:de:d2:b4:ce:5d:73:48:19:24:cc:8f:11:e8:be:
                    ad:71:c6:ba:5d:11:f2:40:97:e1:d7:25:8d:ae:02:
                    ac:8a:7c:0e:67:66:76:e0:a7:38:2d:c6:28:49:99:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:9A:8A:74:C9:CD:55:46:08:56:39:73:27:23:34:3E:2A:DA:05
            X509v3 Authority Key Identifier:
                keyid:FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c6:bc:29:c1:13:3e:9e:c4:ec:fa:15:08:09:cd:63:be:d7:
         77:ba:39:da:96:c9:9e:73:2b:37:56:b1:4e:51:da:02:7e:eb:
         3a:4c:6b:74:96:49:31:ae:ff:79:22:3d:7a:00:1d:f6:d6:a8:
         3c:ca:05:e1:8a:52:e9:4c:2d:19:5d:14:aa:aa:ed:22:e5:f0:
         1d:9f:cf:8a:38:e4:e9:e0:7a:bc:f3:49:f5:4b:68:17:0b:d6:
         c2:9b:ea:02:ab:23:0d:96:08:60:3c:68:50:4c:7f:cf:1f:c1:
         b7:ac:84:de:a7:5d:94:6c:57:f5:e2:30:42:67:2d:f9:78:bc:
         96:9c:05:91:30:b6:11:9a:37:5b:42:4f:4e:e3:68:3b:1d:9b:
         87:49:e5:ff:24:2e:57:7b:c2:69:20:49:ca:7a:a7:c3:9b:86:
         77:b4:43:7d:91:82:c0:58:b4:ff:12:f0:17:64:2a:3f:e6:05:
         bd:78:aa:8a:6d:7c:17:5d:e4:05:cf:c7:bf:64:fb:3d:b7:47:
         cf:fc:4e:03:f5:9e:30:cc:db:2e:f4:b7:f2:92:51:7e:43:f8:
         16:9f:f2:8e:c4:da:33:ff:35:20:47:0f:36:b2:1a:51:5f:38:
         3d:fe:bb:88:3a:2a:ff:cb:c8:84:c7:45:04:10:96:8a:68:68:
         30:2f:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:21 2026 by rpki-client