Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
File:                     mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json)
Hash identifier:          x6IZnQArr1C0ixlUuFzSdkIeAbQsG2muO1cwca0an1U=
Subject key identifier:   C7:F7:AD:5E:4A:CF:86:29:D1:AB:43:79:4E:91:E5:2C:D6:44:4E:99
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Certificate issuer:       /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
Manifest number:          01AE
Signing time:             Mon 27 Jul 2026 05:45:49 +0000
Manifest this update:     Mon 27 Jul 2026 05:45:48 +0000
Manifest next update:     Mon 03 Aug 2026 05:45:48 +0000
Files and hashes:         1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: x2+WPguUN6H24CrbRVZjHdG/ws3Fbl2cGQg9NVpfoM4=)
                          2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: AJJ92VGVLucsvsIdaZU0nKfuQXZ8cJi9IfizP5I2ais=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
                          rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
        Validity
            Not Before: Jul 27 05:45:48 2026 GMT
            Not After : Aug  3 05:45:48 2026 GMT
        Subject: CN=6a66f08d-2c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:a7:27:b3:36:fa:b4:46:7b:fb:4b:46:8f:
                    10:d2:58:39:c4:75:b8:d4:69:df:85:dd:3b:d2:16:
                    66:4e:44:a4:3b:a0:35:ce:d2:76:47:29:fb:12:7d:
                    6c:89:a3:f8:b2:e0:3a:ba:e8:8a:51:0b:0c:2c:01:
                    58:f1:e8:29:bd:b4:a0:93:41:7f:3a:58:fc:67:bd:
                    63:d0:6c:a7:24:f4:4d:66:ba:2f:e1:62:56:3d:12:
                    7c:13:0b:63:c2:06:9b:55:18:47:37:c6:3f:c9:e6:
                    60:0c:ad:53:96:a2:31:6e:93:15:5a:8b:79:cf:de:
                    d5:0b:e9:b6:34:39:b5:8e:87:2f:01:09:d9:ea:5e:
                    74:53:f7:b6:c5:f5:ca:bf:cd:87:0f:ba:c0:d5:85:
                    b0:39:15:f4:dd:6e:e4:53:f4:62:a5:d0:87:6d:7b:
                    26:20:a0:5d:00:23:14:40:9e:1f:f9:1b:3e:83:f9:
                    9e:fb:40:27:1c:06:8b:00:f8:b3:34:49:00:38:63:
                    40:ab:c7:9a:d6:9f:24:6c:a1:96:27:95:c7:da:5e:
                    d6:67:51:a9:69:76:7f:dc:0a:46:2d:d6:ba:98:38:
                    a3:7a:65:63:91:4e:16:c5:12:f1:2e:9c:a1:81:a6:
                    16:83:da:89:c1:76:bd:cc:e1:83:9b:86:12:23:c3:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F7:AD:5E:4A:CF:86:29:D1:AB:43:79:4E:91:E5:2C:D6:44:4E:99
            X509v3 Authority Key Identifier:
                keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4e:10:5d:19:1e:57:ef:78:27:4c:18:75:25:36:49:7b:96:
         6b:d0:f0:f2:2b:21:af:d3:80:be:1a:1d:c9:42:cc:47:2c:e6:
         fb:23:49:3f:7c:58:30:c9:30:23:03:94:01:8a:19:45:7f:d8:
         da:a1:c5:fa:23:28:33:1f:af:6e:d8:88:e2:95:cb:14:92:8c:
         a8:d2:b1:e2:d2:6b:72:bf:e2:e8:14:b0:36:74:e9:85:01:bb:
         75:65:30:7f:35:11:21:cd:01:0c:ed:43:e3:c6:d5:99:8f:48:
         b4:23:10:e4:06:8f:c7:f4:f4:a2:96:5f:1d:10:b6:03:7d:7f:
         c1:ba:c6:87:d8:57:6c:a8:ec:9f:5f:78:cc:1c:4c:f0:db:13:
         e6:27:79:cf:15:cf:77:65:38:9a:f6:d0:4a:2b:b9:0b:b4:66:
         2c:88:1d:46:19:d9:84:60:0a:27:95:64:28:69:65:65:23:d8:
         91:1a:63:13:0e:c3:f1:d2:4b:13:f5:bb:1b:ab:3f:72:e1:46:
         b1:e6:3a:80:d8:8b:4a:57:da:5a:c8:8c:4c:3d:5a:c4:eb:15:
         d2:39:09:68:42:de:44:6d:13:87:c3:be:1e:b2:47:bf:95:a1:
         3f:a9:03:ad:0c:42:04:e9:be:fa:c7:af:fd:e0:f3:c7:4e:bc:
         e1:20:c2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:24:58 2026 by rpki-client