Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
File:                     b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json)
Hash identifier:          WppJur5Pu7H6dNQpg9jdfVUT4Xzv/8HlFR9jc/u3LKg=
Subject key identifier:   56:2C:AB:C8:3B:05:35:78:68:62:15:A7:A4:8E:45:C2:FD:8F:E1:19
Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Certificate issuer:       /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
Manifest number:          0202
Signing time:             Mon 27 Jul 2026 04:43:44 +0000
Manifest this update:     Mon 27 Jul 2026 04:43:43 +0000
Manifest next update:     Mon 03 Aug 2026 04:43:43 +0000
Files and hashes:         1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: BiyzVap0JG3Eo/vxY5CZDNmTjtpjXNDDVOTp21dHQec=)
                          2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: zNUB+vibuX3nQWmpbN4PBwL7Sq5HwZSp7xD/bsaKx34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
                          rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
        Validity
            Not Before: Jul 27 04:43:43 2026 GMT
            Not After : Aug  3 04:43:43 2026 GMT
        Subject: CN=6a66e1ff-b963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:0e:85:68:2b:13:d4:0e:7e:cc:d7:f5:2f:
                    e4:e1:7f:66:b7:4e:0b:74:84:46:ae:a7:05:c0:76:
                    47:96:cd:92:c5:6e:bf:38:f0:10:6e:75:55:26:2c:
                    bf:dd:d4:9c:36:2c:f5:fc:54:f3:9b:c8:56:bc:d2:
                    8f:b6:6e:ae:79:ba:3a:37:20:cc:9a:ad:6b:18:1b:
                    2a:d3:d6:a2:f7:8c:a1:b1:1b:2c:fa:00:d6:da:39:
                    5c:10:65:0f:50:89:29:d1:4b:47:7a:a6:11:2f:16:
                    bc:e5:c4:ac:3b:52:28:35:4b:cc:e4:70:fb:85:a6:
                    9b:b0:b9:8d:14:cb:ec:4d:fa:36:88:c8:7b:a6:cc:
                    9e:fd:2f:d6:36:07:33:9f:90:0d:a3:ce:19:6c:bb:
                    62:88:0b:1a:59:f0:3a:72:f0:93:87:f9:4c:86:7b:
                    f5:99:a7:15:e6:a2:8a:15:ea:b2:a6:39:ef:17:6c:
                    09:e3:fe:07:1b:66:5f:e4:f2:82:27:7a:1f:7c:9b:
                    f7:0b:de:89:8b:9a:da:7b:83:4a:eb:71:13:27:8d:
                    bd:e0:fd:00:70:7d:6b:84:61:a0:c1:85:2f:47:b7:
                    c4:a8:ed:1a:5a:6a:c9:69:bb:d0:68:1d:4e:ed:cc:
                    2d:42:e7:f8:e2:ac:b9:0d:a6:20:ef:91:bc:22:78:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2C:AB:C8:3B:05:35:78:68:62:15:A7:A4:8E:45:C2:FD:8F:E1:19
            X509v3 Authority Key Identifier:
                keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:13:1e:87:df:d7:54:b4:3d:61:b2:6e:70:e8:ca:be:7f:9c:
         09:bd:26:4d:6d:7d:81:d5:5b:ae:94:a5:35:63:0e:c7:98:42:
         ce:a8:89:32:69:47:e8:2a:28:d3:ef:e2:e1:d1:03:94:e0:d0:
         b8:f0:d8:0b:91:31:9e:c8:8e:ab:cc:31:29:c4:e8:1a:8f:a1:
         79:fd:b5:70:36:b4:2e:aa:68:fd:56:c9:28:f4:a3:b2:be:95:
         bd:90:c0:04:e2:e1:75:e7:c2:e9:56:72:7d:1f:bc:0b:ce:85:
         42:f2:fe:98:f1:83:f8:b4:06:7c:e4:83:32:b8:bd:02:f7:fd:
         ed:92:5d:54:b6:41:42:60:47:30:ad:21:61:31:54:38:5b:3c:
         88:de:54:92:80:51:0d:a9:b6:6b:08:05:10:a6:3c:90:2a:16:
         70:f5:1a:af:cb:d2:87:20:d2:d3:7d:57:8c:97:a9:f6:8b:b0:
         4b:01:6f:a2:e8:f0:d6:a7:ec:da:3a:de:2a:e8:7e:4c:22:fb:
         66:7a:0c:92:e2:2e:d2:62:53:53:3d:cc:f5:c8:b0:47:be:80:
         99:0b:94:08:d0:51:be:5c:64:9d:6a:31:3e:5b:74:18:8a:8b:
         96:e1:1d:3e:e2:98:86:7a:f6:ec:d6:10:5d:f0:fc:76:d9:94:
         02:db:23:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:08 2026 by rpki-client