Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File:                     AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier:          LMkF/aIMWqf5AB3qKEDXMy48XeD5Xo4NxMnEkI6nh4M=
Subject key identifier:   11:3F:BF:D3:91:39:6D:8A:3F:D7:57:3D:31:66:D7:0F:ED:BA:5F:76
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       0360
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number:          0353
Signing time:             Mon 27 Jul 2026 02:07:26 +0000
Manifest this update:     Mon 27 Jul 2026 02:07:26 +0000
Manifest next update:     Mon 03 Aug 2026 02:07:26 +0000
Files and hashes:         1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: B4Ats12/FFbGHbhJES45aZ5DWm1YA9aUzkY1uHPPBPo=)
                          2: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: 19rQZpp4Df+lZ6FB4t+WOO+mA6WEBb8HvSNnL/TvyQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Jul 27 02:07:26 2026 GMT
            Not After : Aug  3 02:07:26 2026 GMT
        Subject: CN=6a66bd5e-841e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:c0:73:1f:4a:c9:32:e1:c1:42:72:8c:2c:
                    e4:1c:05:13:59:91:07:ea:d9:1d:de:ac:2f:72:3d:
                    c4:c9:af:75:10:88:e0:63:a7:23:2a:5a:d5:77:85:
                    17:25:30:1a:ff:4f:ad:6e:7e:a5:b8:3c:38:b8:73:
                    1e:f4:aa:42:f8:df:3d:c9:c1:26:17:b0:19:43:ff:
                    b4:ae:46:52:89:a3:b7:f5:a0:99:4a:db:22:72:52:
                    8c:89:40:a1:dc:e4:2a:4e:82:94:84:58:21:9c:a9:
                    3b:4a:37:a7:76:dc:fa:f4:57:a6:15:98:bb:5e:1d:
                    ab:76:55:79:f4:0c:3e:98:c9:e0:62:7c:11:8e:c6:
                    1c:94:b6:2b:a8:a8:16:5e:c6:bd:c6:73:2f:41:2e:
                    a4:f9:e4:66:38:92:50:d0:f3:91:20:b9:57:e4:82:
                    31:71:a5:1b:ab:dc:09:34:1c:99:1c:1b:59:03:37:
                    70:3e:4d:9f:65:9c:bd:6a:64:75:49:58:0c:18:70:
                    be:ad:ce:ad:14:eb:10:4c:33:dd:d9:df:de:95:62:
                    58:69:93:1e:db:35:9d:f8:a8:b9:08:cd:1b:52:33:
                    5c:6b:2e:91:4c:25:45:81:a0:d8:0d:4e:6b:4a:98:
                    64:16:b3:8a:6a:c2:ec:15:3e:c1:19:55:3d:70:67:
                    3e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3F:BF:D3:91:39:6D:8A:3F:D7:57:3D:31:66:D7:0F:ED:BA:5F:76
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:91:5b:64:19:94:36:a3:2f:8f:05:9a:80:a1:a6:29:5f:71:
         d8:9a:1e:ef:3e:05:08:63:0c:c8:76:3f:1f:4c:92:fa:29:b1:
         a7:8c:5a:89:22:b4:00:99:7c:a7:e5:3f:58:7f:e0:59:73:fb:
         54:9c:e3:9a:c6:77:d5:9e:84:2a:cc:1b:b7:11:e9:23:7f:5d:
         8a:b7:db:92:5c:94:1a:f7:14:13:59:f4:b8:67:30:22:57:86:
         9f:69:a1:bb:ed:d8:a5:60:d7:c6:69:b4:7a:01:51:df:ad:88:
         08:62:ef:c6:5e:db:01:c1:34:ab:e2:68:16:63:d7:6b:04:b9:
         04:bb:30:be:2b:e1:93:d2:07:5a:38:6c:e0:33:62:69:06:58:
         f7:75:2d:ca:a6:8f:5a:a4:ca:de:4f:be:cd:e1:23:33:2d:b6:
         dd:99:b0:29:04:d6:d1:1c:68:d2:e2:96:d3:e7:2e:1f:1b:a5:
         ab:b4:74:a3:12:f0:51:7a:39:81:27:04:f2:07:aa:05:69:ab:
         1a:f9:2b:20:b5:03:84:6f:44:0c:c3:1b:6d:8a:b8:00:37:0d:
         6d:33:a7:41:dc:67:4e:df:2b:b5:e8:fc:be:d8:d4:53:bb:e1:
         56:5b:1a:84:d4:94:9e:a2:e1:ce:38:61:1b:60:d6:b8:f2:33:
         41:86:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:35 2026 by rpki-client