Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
File:                     d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json)
Hash identifier:          y+TSG8c+vr4OxJgFZPo72Z+aqDD/O8XeUWEVY4SPSsw=
Subject key identifier:   96:1C:05:50:D5:19:43:82:8A:6B:4F:BD:92:96:D5:47:0D:CF:7B:5F
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Certificate issuer:       /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
Manifest number:          83
Signing time:             Mon 27 Jul 2026 09:50:29 +0000
Manifest this update:     Mon 27 Jul 2026 09:50:28 +0000
Manifest next update:     Mon 03 Aug 2026 09:50:28 +0000
Files and hashes:         1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: K/8ZJufLTwPA7BEMCIjHWjyV0zdi2UU8wE8W3ehHY74=)
                          2: 681269F8087811F19439B7C20A3D8C67.roa (hash: GfKHo2eQlYNPUrbMHKQtwwJ+sbJRJ6lCyawulNvQePo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
                          rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
        Validity
            Not Before: Jul 27 09:50:28 2026 GMT
            Not After : Aug  3 09:50:28 2026 GMT
        Subject: CN=6a6729e5-b4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:10:95:07:c2:a5:72:69:77:60:b0:a7:53:
                    82:2b:4f:e1:e6:fd:ba:3f:36:84:aa:a2:02:87:21:
                    a5:10:0f:fc:eb:89:e1:a6:be:f1:00:c3:c6:45:62:
                    86:15:87:57:98:f3:0f:32:81:14:a6:6c:29:44:79:
                    17:99:45:6c:2e:99:6a:6e:8e:b9:12:b8:0a:cc:da:
                    dd:1e:6a:f1:60:3d:dc:43:b0:f1:5c:8d:c1:da:59:
                    d4:a9:15:c3:55:dd:3f:b3:a8:f0:0a:a9:f5:2b:af:
                    0d:2a:a9:0c:fd:55:37:31:4a:b4:31:a2:94:00:34:
                    ad:96:d5:ac:6a:4a:e5:6e:5e:58:cd:72:b9:d6:22:
                    33:ba:fb:47:1a:b4:be:cb:9d:e3:58:57:d0:c6:a0:
                    7b:8f:75:f6:a9:6b:ef:58:0f:f6:91:f1:1a:b2:41:
                    04:fb:a3:8f:88:fc:e8:ad:8f:69:14:46:35:a5:ee:
                    e6:f0:95:33:7a:22:78:8e:af:ba:1a:9d:5e:47:11:
                    58:42:35:26:7a:22:ae:f7:28:13:e6:58:a7:2e:9a:
                    ad:1d:5c:92:22:64:17:75:b2:bf:e3:c1:94:3e:2d:
                    7f:75:b2:d3:0e:11:75:31:fe:9a:9b:8b:d6:4f:60:
                    6c:99:a3:14:7e:a0:6b:07:5f:8e:64:e9:50:ce:88:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1C:05:50:D5:19:43:82:8A:6B:4F:BD:92:96:D5:47:0D:CF:7B:5F
            X509v3 Authority Key Identifier:
                keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:42:06:a2:17:3e:59:7c:54:f9:16:2c:09:d1:3d:41:09:b8:
         3f:75:d5:16:80:b7:07:c2:29:8a:a4:81:2e:65:83:b7:94:f8:
         9d:16:0c:6e:39:de:92:0d:70:40:fd:12:a1:9b:4e:36:67:4b:
         c1:bb:34:89:83:14:b0:5a:39:a9:c3:34:71:77:e9:6d:75:25:
         10:0c:f2:06:67:36:fd:2a:41:3a:b2:bc:a1:9a:01:49:01:99:
         d7:8a:c8:21:cd:f3:ee:f4:a0:eb:70:ca:af:80:11:69:e6:ca:
         cd:c6:14:ed:55:a2:f8:d2:43:88:2f:90:3c:60:f4:d9:b8:69:
         d2:7b:f6:7a:21:d1:67:78:15:87:ce:95:1b:26:df:83:67:9e:
         36:21:51:33:13:f3:69:a9:d4:66:1b:3c:11:8f:31:dd:da:95:
         3e:1b:a6:0a:cf:aa:81:cb:5d:ef:a6:c2:af:e6:4c:d1:b6:ab:
         14:ec:1e:b5:0d:26:5a:5b:80:a9:0f:dd:db:87:e9:fa:e7:d5:
         09:98:ea:25:77:37:a5:22:c9:d9:72:ab:58:b5:63:92:5c:8b:
         57:2d:67:e0:78:df:70:07:e9:8c:c1:c8:d8:15:d9:45:43:71:
         eb:f9:d5:74:87:c0:52:69:7d:23:97:7c:72:2c:26:d4:94:ea:
         eb:ba:bb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:10:36 2026 by rpki-client