Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
File:                     M23U8UX716kQau8fBtkXB9JQt3o.mft (raw, json)
Hash identifier:          I8i83kM18wxcm7LITrAppZ/taFygq/Y3To4hI8I3W6E=
Subject key identifier:   A1:7B:0C:90:42:FD:11:9F:B0:2F:2E:0E:3D:C2:3E:AB:B6:F8:BB:80
Authority key identifier: 33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A
Certificate issuer:       /CN=A91A9E90/serialNumber=336DD4F145FBD7A9106AEF1F06D91707D250B77A
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
Manifest number:          0D
Signing time:             Mon 27 Jul 2026 11:32:00 +0000
Manifest this update:     Mon 27 Jul 2026 11:31:59 +0000
Manifest next update:     Mon 03 Aug 2026 11:31:59 +0000
Files and hashes:         1: M23U8UX716kQau8fBtkXB9JQt3o.crl (hash: 0asit5xB61YP1x9tbEKokfXIFKBI9Qq07pAunB+yayg=)
                          2: 16261DCC85D411F1B888CCFF69A30FBC.roa (hash: KhZuvpiH1QtAzasVJFC3Nq++oQgjiVWH6Qo6hINf7iE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E90, serialNumber=336DD4F145FBD7A9106AEF1F06D91707D250B77A
        Validity
            Not Before: Jul 27 11:31:59 2026 GMT
            Not After : Aug  3 11:31:59 2026 GMT
        Subject: CN=6a6741b0-9a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:61:a4:9f:48:6a:ac:fc:54:be:ae:43:4e:
                    2f:e6:9d:09:20:81:1f:ca:d8:5c:68:dd:15:16:58:
                    68:94:b6:b8:b2:00:47:b2:ef:c4:16:32:0e:b0:40:
                    32:02:73:cd:6d:1b:07:a7:c2:37:e5:fa:17:de:6a:
                    7e:2e:c2:9f:87:54:02:02:31:00:92:fe:b4:ed:66:
                    71:97:b1:b0:a7:dd:41:36:12:7f:c4:b2:f8:52:32:
                    8a:02:e1:2f:ef:52:49:85:4e:d9:46:07:0c:06:76:
                    e6:12:8d:f1:ce:c5:1b:56:13:f4:d5:f8:94:79:89:
                    82:84:c4:a7:cd:a0:17:08:46:46:e1:dc:2e:be:39:
                    10:a0:36:d3:d1:2c:f0:e4:09:51:c7:13:98:c7:42:
                    f2:9c:60:67:19:69:79:a5:a1:03:6d:ea:05:5a:ab:
                    09:31:03:8c:e3:a2:9e:a2:02:77:01:c0:2f:9f:a8:
                    50:f7:95:6c:b3:e7:5c:98:6c:5d:36:c9:25:4a:f1:
                    4e:99:31:ee:21:9b:f0:09:31:2d:4e:8b:60:20:0e:
                    33:dc:90:06:9a:22:30:81:43:38:6e:62:e5:e5:29:
                    b1:8f:05:73:de:e3:99:eb:a3:24:db:08:f6:7b:58:
                    b3:c0:90:d1:23:d6:94:5b:ae:64:e5:c9:ac:f0:5f:
                    fc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7B:0C:90:42:FD:11:9F:B0:2F:2E:0E:3D:C2:3E:AB:B6:F8:BB:80
            X509v3 Authority Key Identifier:
                keyid:33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d4:7b:63:37:46:09:42:b3:9e:2a:7d:78:4b:26:7b:d8:04:
         4f:df:0d:8f:36:19:be:7a:ca:35:b1:43:06:e1:b2:e7:5e:af:
         23:bc:9e:90:fb:c1:d7:46:02:1e:71:fa:2c:a5:bd:1f:75:bb:
         55:03:5e:60:53:51:ee:08:f6:89:12:45:ec:31:70:2f:4b:d6:
         2c:f6:d6:94:fa:a5:d7:67:38:e4:cb:e4:4c:fb:f1:52:f1:4c:
         c8:26:d4:f4:19:37:bc:83:3b:43:a4:65:13:19:33:0d:a0:11:
         3b:04:11:19:0e:a3:b8:14:08:ec:ee:c0:48:16:cb:a2:fc:9a:
         9d:10:dd:86:c9:03:36:c8:9c:de:bb:bd:88:fc:47:cd:6e:ba:
         f7:e7:0e:c2:ab:a3:34:65:4f:1e:ce:1d:62:32:9b:94:a0:da:
         57:c7:e9:96:75:e2:bd:11:d9:d3:39:12:ca:5d:7a:12:85:f8:
         db:de:05:ef:62:0a:1f:cb:a4:c4:50:d3:f0:33:5d:95:34:73:
         46:2c:b9:ec:2b:d1:7b:a1:a2:b9:26:2e:35:6c:93:9f:a4:ac:
         c5:55:e6:50:29:60:a8:f1:a2:34:fb:15:21:9e:1e:2e:71:c0:
         aa:f5:05:34:15:d8:ba:fc:7d:24:1e:88:3f:77:dd:17:38:9f:
         31:b4:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:17 2026 by rpki-client