Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
File:                     C6xCmG6avbfO4s37Kp_o1tAqq1w.mft (raw, json)
Hash identifier:          M1PA/++fvbp+B854mvd1weypoov+YsIRUoOX53e7F1Q=
Subject key identifier:   28:60:E6:10:65:23:9B:FE:66:25:9B:8D:7F:90:0E:6C:9B:83:7D:32
Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
Certificate issuer:       /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Certificate serial:       04A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
Manifest number:          0470
Signing time:             Wed 29 Jul 2026 00:58:27 +0000
Manifest this update:     Wed 29 Jul 2026 00:58:27 +0000
Manifest next update:     Wed 05 Aug 2026 00:58:27 +0000
Files and hashes:         1: C6xCmG6avbfO4s37Kp_o1tAqq1w.crl (hash: PAoIuxvjAzLnvIhR/beNjFHZ+lCsVG3DNMdFKKYpXSg=)
                          2: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (hash: bDXcTdd3+KI00Tu5QIah+xvRBUeXyNYVufxWd0r1cSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl
                          rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
        Validity
            Not Before: Jul 29 00:58:27 2026 GMT
            Not After : Aug  5 00:58:27 2026 GMT
        Subject: CN=6a695033-780d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:9d:75:8d:2f:78:00:42:58:69:e7:9f:b3:
                    c2:3e:c3:10:34:00:fd:29:a2:6f:fe:30:62:11:55:
                    55:59:8c:0e:19:1f:41:cb:84:94:1f:31:46:41:e2:
                    da:f5:93:1c:99:36:43:b9:0f:a0:56:69:db:6f:74:
                    59:1f:44:c9:70:1b:12:08:9e:9d:4f:0c:71:00:3b:
                    90:7f:5a:1b:35:3f:2f:bb:d9:d5:19:70:cc:d9:8e:
                    6a:5d:36:d2:8b:bb:6d:74:84:e2:0d:5f:30:6f:c1:
                    3a:0a:3e:02:e7:1c:d1:ab:15:ea:29:eb:69:54:b1:
                    84:61:33:48:be:16:83:21:61:6a:bb:a2:24:7c:c9:
                    b1:47:c9:36:fc:65:d5:80:4d:5d:86:e7:b1:2d:23:
                    be:2a:b0:89:27:80:e2:8b:77:3e:74:7f:2e:21:93:
                    7d:67:21:db:7b:51:11:c0:3d:fd:e8:ed:5d:15:0b:
                    f5:cb:f8:0a:68:88:74:2f:1f:c7:30:d4:8d:f6:48:
                    4c:28:55:af:aa:92:1b:be:d6:d4:c0:76:26:1d:d1:
                    4e:89:93:d7:3e:49:0d:5e:9a:8c:9d:f7:33:76:08:
                    59:cf:07:c4:31:6e:78:43:6b:83:e4:a9:bc:02:cf:
                    e0:dc:cd:e9:93:92:25:e7:38:c6:7a:0c:e7:f6:ca:
                    24:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:60:E6:10:65:23:9B:FE:66:25:9B:8D:7F:90:0E:6C:9B:83:7D:32
            X509v3 Authority Key Identifier:
                keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:43:59:47:26:02:41:b5:c7:bc:46:8f:86:21:3f:1e:7a:
         90:0b:eb:f7:ba:cf:38:13:c5:13:ba:86:85:45:61:79:54:25:
         58:9c:eb:1f:f2:b0:a7:7a:82:e2:2b:bb:16:75:11:27:84:50:
         d3:5e:ed:79:6b:b2:2a:b0:3b:8d:00:80:f1:cc:6d:0f:af:37:
         92:1a:f9:6b:77:88:6e:41:74:17:78:0f:9a:4b:3a:0e:9c:0e:
         a9:fd:d7:ce:a3:20:a1:77:1a:19:32:f8:39:6c:c9:75:4a:89:
         fe:ba:3f:7c:de:ba:56:90:5f:ad:e9:0d:3d:2b:a2:4b:94:3c:
         bf:b5:b4:d9:02:05:10:55:2f:88:7b:d6:ca:c6:bb:ac:5c:81:
         66:34:5f:55:ed:0d:9a:4d:a3:a4:c7:a5:05:f1:e0:b9:1f:99:
         25:d1:45:d3:e4:cd:72:9c:c9:53:6e:e8:48:b9:2c:f8:b8:bd:
         66:14:d4:66:d4:dd:44:b6:dd:1c:c8:c3:98:a9:f6:b1:a0:b2:
         f6:27:d1:db:e2:f3:65:60:ac:f9:f5:82:de:c6:d4:12:2c:00:
         66:55:73:bd:73:fa:2a:37:e1:89:5f:de:8f:2e:80:cd:58:29:
         32:c6:69:2c:75:af:bc:39:81:8f:82:73:92:6c:3b:05:dd:24:
         bc:4d:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:53:15 2026 by rpki-client