Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
File:                     fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json)
Hash identifier:          Vbj2vsZ1jcQfJA0AEGMQmYetNyWMociLDEeCMiYWc3Q=
Subject key identifier:   A3:5B:32:6B:27:AE:CD:04:7D:98:B6:E9:F8:98:BD:DA:C1:89:6C:72
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Certificate issuer:       /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial:       0C61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
Manifest number:          0C57
Signing time:             Tue 28 Jul 2026 15:15:44 +0000
Manifest this update:     Tue 28 Jul 2026 15:15:43 +0000
Manifest next update:     Tue 04 Aug 2026 15:15:43 +0000
Files and hashes:         1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: 3LwacsVsmKEXptKNKWA6QYC2AwIbEay6el8w1XNgq9c=)
                          2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /lTemBonHucyHdLH99iEZJS0pkpWT8EtwFhDtf78iXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3169 (0xc61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
        Validity
            Not Before: Jul 28 15:15:43 2026 GMT
            Not After : Aug  4 15:15:43 2026 GMT
        Subject: CN=6a68c7a0-f1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d9:b2:a6:61:13:52:a4:c0:49:29:03:48:e0:
                    10:32:4b:71:bf:dd:4d:07:3e:45:9a:61:b6:74:e0:
                    00:f2:32:8e:70:e1:fd:56:4f:dc:0e:a5:45:37:82:
                    a2:c5:86:68:22:25:e8:dd:cf:de:eb:f9:ea:0b:73:
                    49:7f:eb:a5:49:40:26:5a:b8:60:21:54:0c:d3:97:
                    b5:69:cf:94:fe:31:1c:cc:02:83:ae:d6:ac:8a:55:
                    bc:74:41:d6:90:d3:1d:d1:37:88:f6:7e:c8:13:bf:
                    d2:9c:e5:64:56:00:12:9d:d1:02:26:bd:d7:4e:bb:
                    7a:2a:f2:af:c2:16:90:50:2b:4d:de:25:2f:31:7c:
                    d1:35:d2:1d:be:04:6d:91:3c:cd:77:78:94:c1:d6:
                    4e:f9:90:50:13:15:11:63:05:b4:3c:40:a8:c9:7b:
                    bc:1f:fe:9b:95:dc:fb:fb:15:04:f7:7e:b6:37:89:
                    4f:e5:91:01:ca:4d:fc:5a:83:2b:c6:b9:88:82:30:
                    fc:01:e7:28:0d:fb:1f:8e:96:dc:94:10:43:95:17:
                    b9:5f:eb:49:08:3d:20:47:60:62:ff:e4:b3:a9:ba:
                    a9:eb:0d:b1:db:c0:7d:00:35:c9:c1:21:0f:fd:1f:
                    ff:5e:79:d0:08:ba:71:84:af:58:70:62:72:fd:e8:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5B:32:6B:27:AE:CD:04:7D:98:B6:E9:F8:98:BD:DA:C1:89:6C:72
            X509v3 Authority Key Identifier:
                keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f9:c2:9a:7e:06:7c:62:52:cd:8b:2d:4a:d3:e1:47:c0:b0:
         95:bc:e9:a0:f1:89:71:0f:5e:c8:68:06:21:e8:e0:02:e6:00:
         e8:d0:c8:e4:8b:9b:71:4e:c2:10:e2:8b:eb:f9:9d:67:5a:6d:
         15:7c:1d:ce:b3:18:bd:9b:50:04:7f:fb:ba:be:8e:b4:74:ba:
         58:f0:ff:64:b9:21:29:c3:b0:58:e4:5e:0d:32:c1:05:cc:a9:
         b4:ef:3a:88:96:3f:44:ef:d3:39:2b:83:d2:86:4b:85:2b:d2:
         a2:ea:9a:73:64:3d:1a:92:5c:0e:ea:f4:ff:2d:39:d3:6b:4e:
         1d:57:a2:d2:64:55:db:c4:43:1e:c9:ce:4b:04:0a:1a:55:e5:
         87:49:3c:f0:77:19:b7:f4:b4:dc:b5:25:1a:6e:f0:b7:2a:c5:
         43:4b:84:ea:d7:0d:c5:b8:f4:89:2f:a8:39:46:08:70:cb:00:
         1f:d6:48:2e:1e:08:4d:6f:a6:c5:8c:e8:f1:7f:e0:51:fc:cc:
         eb:03:81:00:b5:d6:43:02:a1:b4:65:57:3d:e4:dd:9b:ea:de:
         0a:cf:b7:fd:27:2f:e9:39:3e:27:0f:68:38:42:56:03:70:4f:
         9f:26:ab:d9:f5:4a:13:f5:bd:21:01:04:59:a2:ab:03:58:96:
         de:56:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:06 2026 by rpki-client