Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
File:                     AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json)
Hash identifier:          h8e5j1HzW3qS3naFmbeNNR3CkNGughw6plxVikL8VAQ=
Subject key identifier:   EF:A2:0A:BA:E2:DD:1B:6F:6E:66:6B:34:D5:B0:C8:EB:52:7E:19:E7
Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
Certificate issuer:       /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Certificate serial:       062E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
Manifest number:          0621
Signing time:             Sun 26 Jul 2026 23:39:49 +0000
Manifest this update:     Sun 26 Jul 2026 23:39:49 +0000
Manifest next update:     Sun 02 Aug 2026 23:39:49 +0000
Files and hashes:         1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: ozO3On60E0XA4LEzbw5Sv5fQ5CSBlnAaA2IwVwsaZwM=)
                          2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: VDech5jPNGmdLMydFhvBmeMj/+3X8iHs7o3tOUHRvXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
                          rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
        Validity
            Not Before: Jul 26 23:39:49 2026 GMT
            Not After : Aug  2 23:39:49 2026 GMT
        Subject: CN=6a669ac5-441d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:bb:e4:64:f3:31:cb:6a:65:a4:30:80:a4:
                    a9:e8:dc:cc:39:b4:fe:2a:c1:e8:dc:cd:e5:d5:ae:
                    c7:02:06:be:56:51:85:87:f5:df:f5:90:3e:33:96:
                    e7:19:eb:e6:9b:11:75:17:8c:8f:81:ed:e0:48:7f:
                    50:3d:3c:6e:c3:19:fa:9c:43:9e:1c:e6:b3:5b:64:
                    ee:62:96:7b:62:b6:74:ce:3c:39:4c:f4:7f:a9:22:
                    08:b6:b8:23:d7:4f:ac:a6:10:e1:6b:38:ac:bf:a7:
                    4f:aa:0a:ac:74:46:46:02:e1:78:c5:7c:01:c6:f9:
                    c8:ab:fe:a9:2c:28:18:1a:04:1a:f0:e2:aa:97:14:
                    d3:1e:3e:f7:52:7f:10:a3:15:17:e3:cf:01:c2:24:
                    07:00:e7:68:96:3d:9a:6d:99:78:41:ef:d1:97:48:
                    5b:86:29:f9:ba:a2:eb:75:90:14:1f:82:cf:90:da:
                    4a:92:69:04:5b:e2:82:04:5f:3e:33:7a:6e:a6:b4:
                    32:4a:85:d7:b7:e4:7a:c9:76:c7:3b:33:f6:80:a4:
                    5e:68:d6:6b:83:2c:66:75:b7:fc:14:a9:0b:f5:87:
                    0a:81:8c:6c:3c:e1:51:cc:83:06:a7:80:b4:19:fe:
                    13:da:4f:9d:06:2c:86:4b:85:3f:92:da:c2:79:42:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A2:0A:BA:E2:DD:1B:6F:6E:66:6B:34:D5:B0:C8:EB:52:7E:19:E7
            X509v3 Authority Key Identifier:
                keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:67:a0:89:60:2e:0e:75:f0:19:4d:d7:a4:3a:1a:56:40:74:
         20:57:8e:ad:fe:25:69:fc:bf:1b:1f:2d:12:3a:36:6b:43:df:
         69:40:df:bd:96:4e:c5:c8:b8:23:20:59:9d:f1:5d:10:42:a3:
         58:e8:e6:3a:54:39:86:59:51:84:8c:4d:dd:8e:8d:f8:a3:ff:
         76:12:6a:4b:ab:3c:78:2d:2c:d6:85:a3:76:9f:b3:d1:aa:35:
         6e:c4:f0:cc:a4:97:c7:e9:2a:16:d1:ce:cb:95:c4:fa:ec:0d:
         7b:80:05:e7:0a:e3:ed:c7:e5:16:fc:73:12:8f:41:51:d0:36:
         1c:90:26:03:15:37:7b:f4:b8:41:7f:fc:c1:58:90:49:64:67:
         2e:99:c6:b5:ea:75:39:d2:bd:8f:c6:9c:97:0d:8b:76:ca:72:
         f0:b0:7e:e6:57:eb:28:b7:70:f2:f2:12:e7:64:01:4d:22:46:
         50:84:77:5f:4a:79:96:6b:cf:3a:e4:6f:f1:3b:31:44:be:ff:
         d7:82:73:96:3c:74:9b:31:99:d5:ff:e4:29:59:dd:67:c2:f1:
         df:34:7d:29:3b:a5:05:9c:d1:d5:a1:9d:41:55:24:88:60:7c:
         e6:d7:b9:42:27:04:1a:61:24:8a:2e:f2:dc:1c:b1:72:a6:6a:
         0e:0a:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:05:00 2026 by rpki-client