Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
File:                     aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json)
Hash identifier:          tE2fQBZGBdgvH/86qfJF/Q53AkMw7bQmGZ4VkWdoYyw=
Subject key identifier:   D4:0E:36:A6:D4:8F:68:65:C5:06:21:47:6F:1F:1E:B3:CD:21:7C:7F
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Certificate issuer:       /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
Manifest number:          0114
Signing time:             Mon 27 Jul 2026 07:59:54 +0000
Manifest this update:     Mon 27 Jul 2026 07:59:53 +0000
Manifest next update:     Mon 03 Aug 2026 07:59:53 +0000
Files and hashes:         1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: Nk5E6BUl9q1ta8GqKl91FM3Lhf1rQC/NZ7UJzcUSb4M=)
                          2: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: VJiboECQcz4EPJ3s89go0nGoquID30lt86NixvuBLSQ=)
                          3: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: uOYxYsUyV5d201wkHKNC5KliU1I0MfAZOgIjo4393UM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
        Validity
            Not Before: Jul 27 07:59:53 2026 GMT
            Not After : Aug  3 07:59:53 2026 GMT
        Subject: CN=6a670ffa-e9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bf:6a:4d:f2:ec:44:38:8d:0f:e6:6a:76:e5:
                    5d:da:d5:94:7b:8a:5e:0a:2f:80:35:90:2d:54:81:
                    3e:85:4b:21:2d:ef:23:74:30:21:bc:db:39:2a:ad:
                    84:fc:a4:4f:35:f3:e5:f1:98:49:58:42:1d:72:e3:
                    f6:7c:60:7c:b8:f3:18:d7:58:f7:f3:5b:51:e4:d0:
                    80:1c:f4:04:c7:af:cb:2f:7e:48:ea:bf:5a:00:90:
                    69:00:0e:95:a9:5b:cf:ec:ff:29:91:46:3f:cf:fe:
                    75:0d:74:20:68:dd:04:cb:52:06:5f:24:06:65:64:
                    5c:20:3c:86:d7:e4:9c:1e:8c:ad:6c:50:65:0b:a3:
                    f1:65:58:8f:f1:5e:fb:76:61:f2:89:ee:cb:07:a2:
                    9b:db:84:f3:ba:ec:a8:c4:8c:ee:62:9c:84:bd:6b:
                    07:cf:e4:8a:9f:c0:d9:f8:ff:ce:5f:ab:d5:7d:7f:
                    26:78:42:80:2c:cb:69:1a:44:9b:a2:b4:59:08:3b:
                    b3:7c:8e:dc:77:d1:30:58:70:9b:13:74:f5:70:f5:
                    ed:87:2e:9d:c1:26:6b:f6:d6:50:91:e2:75:5f:b3:
                    34:73:05:c5:4b:42:78:57:3e:a8:34:23:c5:07:df:
                    6b:a2:b4:2f:54:07:d3:70:42:07:62:f6:aa:27:5a:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0E:36:A6:D4:8F:68:65:C5:06:21:47:6F:1F:1E:B3:CD:21:7C:7F
            X509v3 Authority Key Identifier:
                keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7c:fa:c8:3a:19:17:95:bc:a1:0d:a5:64:a9:3f:d7:ce:8b:
         62:3c:c5:90:23:70:d0:71:1d:43:91:84:9b:ea:ad:b0:e8:07:
         cf:87:90:cf:66:18:df:6f:97:fc:01:91:5a:a9:c0:d8:6b:24:
         5b:ae:05:19:31:39:6e:ab:df:7a:c0:5b:4f:ac:0c:4d:6d:c8:
         e9:56:76:97:cb:14:f3:35:42:94:19:31:96:b8:6c:58:77:c3:
         3d:d0:a9:b3:ea:dc:5c:f7:eb:09:3f:ac:a5:14:83:af:39:4a:
         a5:8b:6d:ad:22:df:11:e1:5d:e0:9f:36:76:98:ee:0a:9d:f9:
         19:e6:f6:7d:47:06:00:cc:63:99:54:55:b0:1b:2a:fd:e6:53:
         c0:7b:63:f4:fe:f0:97:d5:8f:4b:ac:7a:ef:a0:ca:29:ed:e8:
         31:d1:2c:64:0b:9c:c2:3a:8e:5c:e1:9a:51:94:78:b9:0d:ef:
         9d:70:d8:8d:39:c3:e9:7d:48:62:d7:18:ac:50:d1:fe:6f:2b:
         fd:96:06:f4:97:0c:93:3c:c7:c8:ed:e2:f7:e2:4a:37:9e:fd:
         15:23:bb:60:ac:73:c5:af:5f:cb:79:24:10:65:4a:6c:f7:74:
         6c:c1:e5:c0:c7:92:a3:b3:e7:dc:e6:d0:f5:78:49:96:60:62:
         70:f6:8d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:47 2026 by rpki-client