Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
File:                     1f9FyAWBJcJy3wRtwLjgb6owT88.mft (raw, json)
Hash identifier:          cUNNaCcxxe+2778Afhcv+Szd+2lwCLDk/uJf43c3sRY=
Subject key identifier:   28:87:04:20:3A:92:81:47:48:13:62:5B:CE:BB:36:EC:A7:55:68:01
Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
Certificate issuer:       /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Certificate serial:       04BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
Manifest number:          04B1
Signing time:             Mon 27 Jul 2026 00:55:59 +0000
Manifest this update:     Mon 27 Jul 2026 00:55:58 +0000
Manifest next update:     Mon 03 Aug 2026 00:55:58 +0000
Files and hashes:         1: 1f9FyAWBJcJy3wRtwLjgb6owT88.crl (hash: wwE+SwZ0NfsD0WPNge6BkXactVbBU9B4AG4RK++QYDI=)
                          2: 99F51284A1E911EDAD7CE929C4F9AE02.roa (hash: lf68hMOfZ/T65yk1q4mtj4OSXwkBVD1LwcuwEotYLTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl
                          rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7E29, serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
        Validity
            Not Before: Jul 27 00:55:58 2026 GMT
            Not After : Aug  3 00:55:58 2026 GMT
        Subject: CN=6a66ac9f-323d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:fc:ce:63:8c:36:a8:f4:4a:68:1b:2d:68:
                    71:bc:d7:ec:aa:2c:34:cb:2f:6b:40:b5:f7:4f:76:
                    e3:fc:2f:54:7e:88:d0:d6:2f:e8:a3:e6:45:3c:d5:
                    ab:7f:f0:e6:cc:9a:b7:36:36:88:a3:95:61:14:d7:
                    8f:63:e0:f4:c2:0b:45:6f:2c:b6:6b:ff:d8:86:c3:
                    b2:ca:26:ba:da:99:83:5d:d0:e6:c0:22:57:ea:f2:
                    fb:4a:53:de:5c:e6:92:2d:e3:91:fb:6c:d4:59:96:
                    21:e8:00:68:52:f4:bc:6e:af:3f:34:72:4d:87:29:
                    a9:82:de:02:35:7a:a1:76:07:52:6b:10:d2:9e:07:
                    72:1d:6a:f9:3b:7f:33:03:6f:91:80:eb:9a:e1:bc:
                    89:62:db:fc:18:c3:c2:4c:74:91:03:6b:86:78:fd:
                    60:6b:7b:ff:f0:5d:2f:26:36:2e:30:13:c4:09:03:
                    62:30:f4:4c:04:58:14:e0:6a:18:64:b8:12:ee:c8:
                    bc:00:25:72:d6:75:94:99:a7:f5:85:68:5a:ba:5a:
                    2b:46:ad:d4:32:37:42:a4:31:c1:b7:f0:cd:af:f6:
                    eb:37:d8:72:90:dd:be:a6:72:a3:a3:36:d3:52:b8:
                    61:c4:2f:f5:c6:c7:e8:90:da:a5:66:fc:20:e9:be:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:87:04:20:3A:92:81:47:48:13:62:5B:CE:BB:36:EC:A7:55:68:01
            X509v3 Authority Key Identifier:
                keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b3:93:79:48:0f:c5:91:a3:4e:23:9b:b3:0a:ac:82:f7:38:
         9a:c4:f3:00:ef:64:62:30:ee:f3:7e:4f:83:91:b9:5c:5a:1e:
         e5:90:94:1d:74:4a:be:3c:3f:79:7d:1e:11:9d:6d:6c:db:a5:
         92:d0:8c:15:87:0a:6c:d1:33:24:50:3d:1f:6b:53:91:a3:d7:
         09:36:20:ee:fe:01:3a:02:48:3d:db:ee:d7:ed:af:de:d7:4c:
         1a:ce:1b:41:92:27:7a:bd:c3:bd:24:d6:f6:ef:65:1f:9b:5c:
         81:44:ae:07:bf:b2:84:33:7f:23:3a:41:9d:c9:29:4e:8e:1a:
         ce:fd:49:98:67:6c:e5:1c:af:d8:b9:08:40:25:ac:31:d9:ff:
         92:f9:90:d6:87:09:6b:bc:d1:85:19:37:33:cf:92:69:c3:ff:
         df:7c:05:95:9c:f0:85:50:7e:6f:92:de:fe:00:6c:81:29:37:
         35:25:82:22:6e:54:87:b9:e8:1e:60:48:c1:da:a2:1b:ff:9b:
         e6:7f:dd:d8:fc:20:f6:31:d0:00:ac:d1:1b:79:4e:90:f7:61:
         4c:4f:4a:fe:da:ed:c0:47:34:78:93:74:21:49:bf:c7:dd:93:
         c4:43:53:87:7d:92:f2:93:ef:6a:fc:6d:fb:44:5a:f1:eb:78:
         83:04:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:30 2026 by rpki-client